Who is responsible
HANSEC, S. de R.L. de C.V. is responsible for personal data when it decides why and how that data is used through this website or its business activities. Its public contact channel and address are shown below.
EntityHANSEC, S. de R.L. de C.V.
ContactSupport form
Phone+52 1 55 6099 9343
AddressCalz. Gral. Mariano Escobedo 526, Piso 10, 11, Anzures, Miguel Hidalgo, CDMX
When Hansec processes security data for a Nova customer, the applicable customer agreement determines the parties’ privacy roles. The customer normally determines the purpose and scope. Requests about data supplied by an employer or another Nova customer should usually be directed to that organization first.
What this notice covers
This notice covers personal data collected through hansec.co, our contact and support channels, Nova evaluation activity and our direct business relationships. It also describes customer-directed Nova processing at a high level.
A customer agreement may contain additional terms for Nova data, retention, service providers and data locations. The signed agreement governs the service relationship for customer-controlled data to the extent permitted by law.
Third-party websites and services publish their own privacy notices. Their practices are not controlled by this notice.
Data we process
| Category | What it may include | Source |
|---|---|---|
| Contact and evaluation | Name, business email, optional phone, organization and evaluation context | You |
| Support | Contact details, topic, severity, subject, message and information needed to respond | You or your organization |
| Website and security | IP address, browser and device details, request time, page requested, consent state and abuse-prevention records | Your browser, the site and hosting systems |
| Preferences | Language, display theme and cookie choices | Your choices on the site |
| Business | Professional contact details, correspondence, contract administration and billing records where applicable | You, your organization and our business systems |
| Nova account and service | Authorized-user details, access roles, audit records and support activity | Customers, users and Nova |
| Customer security data | Security events, alerts, cases and related identifiers connected or submitted by a customer | Customer-authorized systems and integrations |
The public contact and support forms use Cloudflare Turnstile to distinguish legitimate requests from automated abuse. This check is required only when those forms are used. Hansec does not use it for advertising.
Our public forms do not ask for sensitive personal data, credentials or secrets. Do not place them in a free-text field. Customer security data may contain personal or sensitive information incidentally. Hansec processes it within the customer-authorized scope and the safeguards of the applicable agreement.
Why we use data
- to assess and respond to an inquiry, support request or Nova evaluation request
- to establish and administer a business relationship requested by you or your organization
- to provide, secure, maintain and support Nova within the agreed scope
- to authenticate authorized users and maintain access and audit records
- to detect abuse, investigate incidents and protect Hansec, customers and users
- to comply with law and valid legal process, and to establish or defend legal claims
- to send optional marketing only where we have a valid basis and a working opt-out
Under Mexican law, we use consent or an applicable statutory exception. Where the GDPR or UK GDPR applies, the relevant basis may be steps you request before a contract, performance of a contract, legal obligation, legitimate interests in operating and securing our business, or consent for optional activity.
This website does not use personal data to make a solely automated decision with a legal or similarly significant effect. Nova analyzes security data, system behavior and evidence. Supported actions depend on customer configuration, granted access, policy and applicable approval gates. Nova is not designed to make employment, credit, insurance or other legal decisions about people.
Cookies and local storage
The site uses a small set of first-party records to remember your language, display theme and cookie choices. It does not deploy advertising cookies or build cross-site advertising profiles.
| Name | Purpose | Storage period |
|---|---|---|
t0_consent and t0-consent | Records cookie choices in a first-party cookie and local storage | Cookie for about six months, local copy until cleared |
t0-theme | Remembers the display theme you select | Until cleared from local storage |
t0_lang | Remembers a language choice when you select one | 30 days |
If you enable Analytics, the site loads Cloudflare Web Analytics to prepare aggregate reports about visits, country, page, referrer, browser and device category, and web performance. Cloudflare Web Analytics is configured without analytics cookies, local storage or fingerprinting. It does not receive form-field contents from this integration.
You can change optional choices from cookie preferences. The site treats a Global Privacy Control signal as a refusal of optional categories. Browser controls can remove cookies and local storage.
Analytics remains off until you enable it. Turning it off prevents the beacon from loading on later page views.
Sharing and transfers
Hansec does not sell personal data and does not disclose it for cross-context behavioral advertising. We may disclose the data needed to website hosting, email delivery, support, Cloudflare Web Analytics when enabled, and other service providers used to operate our business. We may also disclose data to professional advisers, authorities acting under law or valid legal process, and a successor in a genuine corporate transaction.
Hansec is based in Mexico. Data may be processed where Hansec or a provider operates. When a cross-border transfer requires safeguards, we use the mechanism required by the law that applies to that transfer. Service-specific locations and commitments are confirmed in the applicable customer agreement.
You may request information about safeguards relevant to your personal data through our privacy request channel.
How long we keep data
We keep personal data only for as long as needed for the purpose described, the applicable customer agreement, a documented security need, a legal requirement or a legal claim. We then delete it, de-identify it or place it beyond ordinary use while a lawful hold applies.
- Contact and support requests
- While we respond and for a reasonable follow-up and security period under our records schedule
- Website security records
- Under the operational schedule of the site and hosting service
- Nova service data
- According to configured service scope, the customer agreement and any lawful hold
- Contracts and financial records
- For the period required by applicable corporate, tax and accounting law
Security safeguards
We use administrative, technical and organizational safeguards intended to protect personal data according to its sensitivity and the risks of the processing. Access is limited to authorized purposes. No network, service or storage method can guarantee absolute security.
If a personal-data incident requires notice, Hansec will notify affected people, customers and authorities as required by the law and the role that applies to the processing.
Your privacy rights
In Mexico, you may request access, rectification, cancellation or objection, known as ARCO rights. You may also revoke consent or ask us to limit use or disclosure, subject to legal exceptions.
Submit a request through our privacy request channel. Include your name, a way to receive the response, enough information to verify identity, a clear description of the data and right requested, and any document supporting a correction or authorized representation.
For a complete ARCO request, Mexican law provides up to 20 days to communicate the determination and, if granted, up to 15 further days to make it effective. A lawful extension may apply and will be communicated when used.
Depending on the law that applies, you may also have rights to portability, restriction, withdrawal of consent, objection to certain processing and a complaint to the competent authority. We may verify identity and may decline or limit a request where law permits.
Mexico’s competent data-protection authority is the Secretaría Anticorrupción y Buen Gobierno. Other authorities may be competent when another privacy law applies.
Children
This business website and Nova are not directed to children. Do not submit a child’s personal data through a public form. If you believe a child submitted data, contact us so we can assess and remove it where required.
Changes and contact
We may update this notice when our practices or legal duties change. The updated date identifies the current version. We will provide additional notice before a material change takes effect where law requires it.
Use the privacy request channel for questions, rights requests and complaints. Do not include credentials, secrets or unrelated sensitive data.
EntityHANSEC, S. de R.L. de C.V.
ContactSupport form
Phone+52 1 55 6099 9343
AddressCalz. Gral. Mariano Escobedo 526, Piso 10, 11, Anzures, Miguel Hidalgo, CDMX
This document is published in English, Spanish, and Arabic. For matters governed by Mexican law, the Spanish version prevails.
Questions about this document? Send us a message
Back to Top ↑