Privacy policy
Operator and scope
iso27001pentest.com is an educational resource operated by SEQ SIA (OffSeq), registration number 40203410806, Lastādijas iela 12 k-3, Riga, LV-1050, Latvia. The site has no user accounts, newsletter, contact form or comments.
The Annex A evidence mapper
The scope selections and Statement of Applicability ticks in the evidence mapper are processed entirely in your browser. The application keeps them in page memory only: nothing is written to local storage or session storage, nothing is sent to OffSeq or to any analytics service, and no selection is added to outbound links. Reloading the page returns the tool to its default state. The mapper is educational, it does not inspect your systems, and it produces no audit opinion.
Technical requests and traffic measurement
Serving a page through Cloudflare involves technical request data, including an IP address, browser headers, requested URL and request time. These data support delivery, security and operation of the site.
The site sends page views and clicks on OffSeq service and contact links to our self-hosted Plausible service at in.ainalytic.net. Events include the site domain, public page address, limited campaign parameters and the referring site’s origin when available. A link-click event adds only the destination path and a static placement label, such as header or mapper. Tool selections and results are not sent. The application does not set analytics cookies or a persistent visitor identifier; the collector receives technical network information with the request. Cookieless measurement still involves data processing.
Measurement is disabled when the browser signals Do Not Track or Global Privacy Control, or when this site’s local-storage preference plausible_ignore is true. It is also disabled for previews, local development and recognised automation. OffSeq links may carry static referral labels identifying the resource and link placement; these labels never contain your tool selections.
Purpose, legal basis and retention
We use technical request data to operate and secure the site, and page-view and link-click statistics to understand resource use and interest in OffSeq services. The operator’s stated legal basis for these purposes is legitimate interests under Article 6(1)(f) GDPR. Hosting and infrastructure providers process requests on our behalf; the analytics service is self-hosted. Data are kept only as long as needed for those purposes and applicable legal obligations. The operator’s privacy policy explains its retention criteria, providers and transfer safeguards.
Contact and external links
If you email support@offseq.com, we receive the address, message and any information you choose to provide so we can respond. Correspondence is retained while needed to handle the enquiry or business relationship. OffSeq service links and the cited sources take you to sites with their own privacy notices.
Your rights
Subject to the GDPR conditions, you may request access, correction, deletion, restriction or portability and object to processing. Contact support@offseq.com. You may also complain to Latvia’s Data State Inspectorate or the supervisory authority where you live or work. See the cookie and browser-storage notice for what this site does and does not store in your browser.