FIBRAIN is the controller of personal data processed within the portal. Contact regarding personal data processing takes place through the contact details published by FIBRAIN.
For personal data matters, the e-mail address daneosobowe@fibrain.pl may be used where it is indicated by FIBRAIN as the current contact channel.
FIBRAIN may process identification and contact data, organizational data, account data, correspondence content, technical information submitted in a report and operational data related to portal usage.
The scope of data depends on what is provided during registration, report submission, subsequent communication or transfer from an external form into the portal.
Portal
Data may be collected directly from the user during account registration, login, communication and submission of a report through the portal.
External Form
Data may also be collected from forms published by FIBRAIN or HALNy Networks where those forms are used to create an account, a report or a communication history in the portal.
Purpose Of Processing
Data is processed to identify the user, administer the account, receive and assess reports, maintain communication, document the case and meet legal and organizational obligations relating to product security.
Personal data is processed on the legal bases provided by applicable law, in particular in connection with account administration, the controller's legitimate interests and legal or organizational obligations related to security report handling.
Data may be shared with entities supporting FIBRAIN in portal maintenance, IT operations, hosting, security, advisory, audit or other activities necessary to handle the case.
For reports concerning specific products, data may also be shared with the relevant manufacturer, importer, product owner or technical partner to the extent necessary to assess and remediate the issue.
Data is retained for as long as necessary to administer the account, handle correspondence, document reports, comply with legal obligations and protect FIBRAIN's legal interests.
After that period, data may continue to be retained only to the extent required by law, archival obligations or the need to defend against claims.
Subject to applicable law, data subjects may have the right to access, rectify, restrict processing, erase, object, request portability and lodge a complaint with the competent supervisory authority.
The exact scope of those rights may depend on the legal basis for processing and on legal obligations connected with documenting and handling security reports.
Where a report or account is created automatically from an external form, the information and confirmations provided before that form is submitted become part of the case documentation handled through the portal.
Last updated: July 31, 2026.