NIS2Ready
Privacy Policy
Last updated: 15 August 2026
This Privacy Policy explains how NIS2Ready ("we", "us") collects, uses and protects personal data when you use our website (nis2.saevelis.com) and services. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable national law.
1. Who we are
NIS2Ready is an independent provider of NIS2 self-assessments and gap analysis reports for EU SMEs. For any privacy question, contact us at hello@saevelis.com.
2. What we collect
- Self-assessment answers: your responses to the questionnaire (business information; please do not enter personal data of individuals).
- Contact details: name, work email, company, company size, sector, country, provided when you request your results or buy a report.
- Payment data: processed by our payment provider (Stripe). We do not store card numbers.
- Technical data: anonymized analytics (page views) if analytics is enabled; we do not use advertising cookies.
3. Why we process it (legal basis)
- Performance of a contract: to prepare and deliver the report you purchased.
- Legitimate interest: to respond to your request for results and follow up on your inquiry (Art. 6(1)(f) GDPR).
- Legal obligation: invoicing and tax records.
4. How long we keep it
Assessment answers and contact details are kept for as long as needed to deliver and support the service, and for up to 12 months afterwards for follow-up purposes, unless you ask us to delete them earlier. Invoicing records are kept for the legally required period.
5. Who we share it with
- Payment provider (Stripe): only for processing payments.
- Email/forms provider (if you submit results via our form): to receive and store your submission.
We never sell your data. We do not share assessment answers with third parties for marketing.
6. Your rights
Under the GDPR you have the right to access, rectify, erase ("right to be forgotten"), restrict processing, object to processing, and data portability. You also have the right to lodge a complaint with your national supervisory authority. To exercise any of these rights, email hello@saevelis.com.
7. Where data is stored
Data is stored on EU/EEA infrastructure where possible. Payment data is handled by Stripe, which applies appropriate safeguards for international transfers.
8. Cookies
We do not use advertising or profiling cookies. If privacy-friendly analytics (e.g., Plausible) is enabled, it collects anonymized, cookieless statistics.
9. Changes to this policy
We may update this policy from time to time. The latest version is always available on this page with the "last updated" date.