Privacy policy

At V-Formation, we value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

1. Data We Collect

We may collect the following types of personal data:

• Account Information: Name, surname, email address, IBAN (collected solely for the purpose of paying researcher bounties)
• Platform Activity: Submitted reports, communication with our team, and usage history
• Technical Data: IP address (collected for fraud prevention based on legitimate interests), browser type, device information, and interaction logs

2. How We Use Your Data

We use your personal data to:

• Provide, maintain, and improve our services
• Communicate with you regarding your account or reports
• Ensure platform security and detect misuse
• Comply with our legal obligations

3. Legal Basis for Processing

We process your personal data based on:

• Contractual necessity – to provide services or respond to your requests
• Legal obligations – to meet regulatory requirements
• Legitimate interests – to operate, protect, and improve our platform
• Consent – when required, such as for marketing emails or non-essential cookies

4. Your Rights

You have the right to:

• Access, update, or delete your data
• Object to or restrict data processing
• Withdraw consent at any time (where processing is based on consent)
• See section 12 for contact info

5. Data Retention

We retain your data only as long as necessary to fulfill the purposes described above or to comply with legal requirements. After that, data is securely deleted or anonymized.

6. Data Protection

We implement industry-standard security measures — including encryption, access control, and monitoring — to safeguard your personal data from unauthorized access, loss, or misuse.

7. Third-Party Services

We may use trusted service providers (e.g., hosting, analytics, email delivery) to support our operations. These providers are contractually obligated to process your data securely and only on our instructions.

Some services may be located outside the EU. Where we transfer your data internationally, we rely on Standard Contractual Clauses or equivalent safeguards.

8. Cookies and Tracking Technologies

We use cookies to personalize your experience and analyze site usage. You can manage or withdraw cookie consent through your browser settings or our cookie banner.

Non-essential cookies (such as analytics) are only activated with your consent.

9. Acting as a Data Processor

In some cases, we may act as a data processor for our customers, such as when managing vulnerability submissions on their behalf. In these situations, our customers are the data controllers and their privacy policies apply.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on our website with an updated effective date.

11. Data Controller

The data controller for your personal information is:

MB DK Cyber Solutions Registration 

Address: Girulių g. 10-201, LT-12112 Vilnius 

Registration Code: 307002380 

Country: Lithuania

As the data controller, we determine the purposes and means of processing your personal data as described in this Privacy Policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us:

Email: [email protected]