Blacklist

1. Introduction

This Privacy Policy explains how ITTSP (“we”, “us”, or “our”) collects, uses, stores, and protects personal data in connection with the Blacklist Service, available at https://blacklist.ittsp.com/ (the “Service”).

The Blacklist Service is designed to identify, analyze, and mitigate abusive, malicious, or unauthorized network activity, including but not limited to IP addresses, network identifiers, and related security metadata.

We are committed to protecting privacy and processing personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and other relevant international regulations.

2. Data Controller

The data controller responsible for personal data processed via the Blacklist Service is:

ITTSP
Official website: https://www.ittsp.com/

For all privacy-related inquiries, please contact us via the contact channels provided on the ITTSP main website.

3. Scope of This Policy

This Privacy Policy applies exclusively to the Blacklist Service hosted at blacklist.ittsp.com.

4. Purpose of Data Processing

Depending on usage and interaction with the Service, we may process the following categories of data:

5. Legal Bases for Processing

We process personal data on the following legal grounds:

• Legitimate interests (Article 6(1)(f) GDPR)
  for maintaining network security, preventing abuse, and protecting IT infrastructure
• Legal obligations (Article 6(1)(c) GDPR)
  where processing is required by applicable law
• Consent (Article 6(1)(a) GDPR),
  where explicitly obtained (e.g., optional submissions or integrations)
• Performance of a contract (Article 6(1)(b) GDPR),
  where the Service is provided under agreed terms

6. Purpose of Data Processing

Data processed through the Blacklist Service is used strictly for:

• Detecting, preventing, and analyzing malicious or abusive activity
• Maintaining and improving the accuracy of blacklist intelligence
• Protecting ITTSP systems, clients, and third-party networks
• Enabling automated and manual security response mechanisms
• Statistical analysis and service optimization
• Compliance with legal and regulatory requirements

Data is not used for marketing, profiling for commercial advertising, or resale.

7. Data Retention

We retain data only for as long as necessary to fulfill the purposes described in this Policy, including security analysis, legal compliance, and operational integrity.

Retention periods depend on:

• The nature and severity of detected activity
• Legal or regulatory requirements
• Operational security relevance

Data that is no longer required is securely deleted or irreversibly anonymized.

8. Data Sharing and Disclosure

We may share limited data only under the following circumstances:

• With trusted partners or service providers acting under strict confidentiality and data protection agreements
• With law enforcement or regulatory authorities, where legally required
• With network operators or security entities, strictly for abuse mitigation and threat prevention
• Enforce agreements

We do not sell personal data or provide unrestricted public access to raw personal data.

9. International Data Transfers

Where data is processed or stored outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs)
• Adequate data protection frameworks
• Technical and organizational security measures

10. Data Security

We implement appropriate technical and organizational measures to protect data against:

• Unauthorized access
• Alteration or disclosure
• Loss or destruction

Security measures include access controls, encryption where appropriate, monitoring, logging, and regular security assessments.

11. Data Subject Rights

Where applicable under law, individuals have the right to:

• Access their personal data
• Rectify inaccurate or incomplete data
• Request erasure (“right to be forgotten”)
• Restrict or object to processing
• Data portability
• Lodge a complaint with a supervisory authority

Requests can be submitted through ITTSP’s official contact channels and will be handled in accordance with applicable law.

12. Automated Processing and Profiling

The Blacklist Service may use automated mechanisms to detect and classify abusive or malicious activity.

Such processing:

• Is strictly security-focused
• Does not produce legal or similarly significant effects on individuals without human oversight where required by law

13. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time to reflect:

• Legal or regulatory changes
• Technical or operational updates
• Security improvements

The “Last updated” date will always indicate the most recent revision.

15. Contact Information

For questions, concerns, or requests related to this Privacy Policy or data processing practices, please contact ITTSP via the official communication channels listed on:

QUANT Software House
https://www.ittsp.com/contact/