Privacy Policy

Last modified 04.20.2022

  1. General information and principles
  1. This Privacy Policy forms a legally binding agreement between you (also referred to as "User") and CTF-Tech OÜ (referred to as "CTF-Tech"). CTF-Tech OÜ is a legal entity established on the basis of the laws of the Republic of Estonia. CTF-Tech’s legal address is Toompuiestee 35, Tallinn 10133, Estonia and its registry code is 14975308.
  2. The Privacy Policy sets out the rights and conditions regarding processing user’s privacy applicable to the websites https://portal.ctftech.io and https://ctftech.com (also referred to as the "Website" and "Platform").
  3. CTF-Tech is committed to protecting and respecting your privacy. In its working rules and practices in data processing, CTF-Tech follows the following principles: data minimisation, purposefulness, security and transparency of processing personal data. Please read this Privacy Policy carefully to understand our rules and practices regarding processing your personal data.
  4. The Privacy Policy is effective as of the date set forth above. The Privacy Policy is an integral part of our Terms of Service.
  5. CTF-Tech reserves the right to unilaterally modify and change the Privacy Policy of the Website at any time. The modified Privacy Policy will become effective upon its publication on the Website.
  1. Controller of personal data
  1. A controller of personal data is the company that determines the purpose for which and the means by which personal data is processed. Controller determines the purpose, conditions and means of the processing of personal data.
  2. The controller of personal data for this agreement is CTF-Tech.
  3. All questions, comments and inquiries related to data processing can be sent to the email address: info@ctftech.com.
  1. Processor of personal data
  1. An authorized processor of personal data is the company that processes personal data in the name and on behalf of the controller.
  2. In the case of this agreement the authorized processor of personal data is CTF-Tech OÜ (also referred to as “CTF Tech”), established on the basis of the laws of the Republic of Estonia, with registered address at Toompuiestee 35, 10133, Tallinn, Estonia, registry code 14975308.
  1. Objectives of data collection
         CTF-Tech collects personal information for the following purposes:
  1. To enable the use of the CTF-Tech Website and the use of services hosted on the CTF-Tech Website;
  2. To develop and improve the CTF-Tech Platform and the services hosted on the CTF-Tech Platform;
  3. To inform the User about the changes and modifications of the Platform related to the use of the Platform and provision of services and other information relevant to the User. 
  4. To fulfil contractual and legal obligations.
  5. To exercise and protect the rights of CTF-Tech.
  6. To send offers to the User according to their preferences and profile when they have given a consent to process their personal data for such purpose.
  1. Legal basis for processing personal data
  1. CTF-Tech processes personal data to provide service(s) because it is necessary for the fulfilment of the agreement which is concluded between you and us, or for taking steps at your request prior to entering into an agreement. In such a case the legal basis for processing data is the agreement concluded between you and us, or your request prior to entering into an agreement.
  2. We process your personal data to improve the Platform and services because it is necessary for the fulfilment of a contract which is concluded between you and us; and under legitimate interest pursued by us. In such a case the legal basis for processing data is the agreement concluded between you and us, or our legitimate interest. It is also our legitimate interest to ensure that the services and the Platform are working properly, any problems could be addressed accordingly and that the services and the Platform could be improved.
  3. We process your personal data to fulfill obligations established in law as the processing is necessary for compliance with the legal obligation to which we are subject. We process your personal data to enforce and defend our legal rights under legitimate interest pursued by us. It is our legitimate interest to enforce and defend our legal rights as we see it necessary.
  4. We process your personal data to enforce and defend our legal rights under legitimate interest pursued by us. It is our legitimate interest to enforce and defend our legal rights as we see it necessary.
  5. Upon your consent we process your personal data to provide you personalised notifications of our services.
  1. What categories of personal data we process
  1. CTF-Tech collects the following data:
    1. User Account and/or User contact information - name, e-mail address, home address, telephone number, school/educational institution, grade/level of education, skills and other information that the User voluntarily shares with CTF-Tech.
    2. Preference of the CTF-Tech services that the User voluntarily shares with CTF-Tech.
    3. Log information - IP address, the time of the use of the Website and/or service, duration, technical content of queries.
  2. The User has to share their name and e-mail address with the data controller and the processor to be able to use the CTF-Tech Website and services hosted on the Website; sharing other data is optional.
  3. When visiting the Website, certain computer information of the User, i.e. log information about the communication of the User's device or web browser with the Website, is automatically collected. Such information is anonymous.
  4. The Website uses cookies to personalize the services provided to the User. The cookies of the Website do not store personal data - data that could be identified by CTF-Tech. Most web browsers block the use of cookies, but in that case the service and the use of the CTF-Tech Website may be limited.
  1. Data retention
         User data will be stored for a maximum of 5 years to meet data processing objectives and purpose.
  2. Data sharing with third parties
  1. CTF-Tech does not share the User's personal data with third parties, except for the cases specified in the clause 8.2. of this Privacy Policy.
  2. CTF-Tech uses third party services in its work and data processing, such as cloud services for data storage and processing, communication services, accounting services, software development services.
  3. The services in Section 8.2. are provided by the following agencies: Microsoft Corporation; Google LLC; Slack Technologies Limited; The Rocket Science Group LLC; Eventbrite, Inc..
  1. Rights of the User
  1. The User has the following rights:
    1. The right to request from CTF-Tech to access the data collected about him/her.
    2. The right to demand from CTF-Tech to modify his/her data and erase his/her data from information systems.
    3. The right to object to the processing of personal data concerning him/her.  
    4. Right to request additional information about data processing.
    5. Right to withdraw offers sent by CTF-Tech.
    6. The right to turn to the Data Protection Inspectorate and the court if the User finds that his/her rights have been violated during the processing of his/her personal data.
  2. In order to exercise the rights set down in the clauses 9.1.1, 9.1.2, 9.1.3 and 9.1.4. of this chapter, we ask the User to write a corresponding request to the CTF-Tech e-mail address: info@ctftech.com.