CRA Basics

CRABasics.com Privacy Policy

Last Updated: September 24, 2025

Your privacy is important to us. This policy explains what information we collect, why we collect it, and how we use and protect it. We are committed to protecting your personal data in compliance with the General Data Protection Regulation (GDPR).

1. Who We Are

CRABasics.com is a website providing resources and tools related to the Cybersecurity Resilience Act (CRA).

2. What Information We Collect

We collect a few types of information from you:

  • Information you provide to us directly:
    • Contact Form If you use our contact form, we collect your name and email address.
    • CRA Maturity Evaluation Form If you choose to provide it, we collect your email address. This is completely optional.
  • Information collected automatically:
    • Technical Data We automatically collect your IP address and information about your web browser (like its type and version). This helps us make sure the website works correctly and stays secure.

3. How We Use Your Information

We use your data for specific, clear purposes:

  • To contact you If you use our contact form, we use your name and email to respond to your inquiry.
  • For marketing purposes If you provide your email address on the CRA Maturity Evaluation form, we may use it to send you updates, news, and marketing information about CRABasics.com. This is entirely optional and you can say no at any time.
  • To deliver our service and for security We use your IP address and browser information to ensure the website is delivered properly to you and to protect our service from threats.

4. Legal Basis for Processing Your Data

Under GDPR, we must have a legal reason to use your data. Our reasons are:

  • Consent When you submit your email address through the CRA Maturity Evaluation form for marketing, you are giving us your clear permission to do so.
  • Legitimate Interest We have a legitimate interest in using your contact information to respond to your specific request when you fill out our contact form. We also have a legitimate interest in using technical data (IP address, browser info) to operate and secure our website, as this is essential for providing our service.

5. Your Rights

You have the following rights regarding your personal data:

  • Right to Access You can ask us what personal data we hold about you.
  • Right to Rectification If you believe any of the data we hold is inaccurate or incomplete, you can ask us to correct it.
  • Right to Erasure ('Right to be Forgotten') You can ask us to delete your personal data.
  • Right to Restrict Processing You can ask us to limit how we use your data.
  • Right to Object You can object to our use of your data, especially for marketing purposes.
  • Right to Data Portability You can ask us to provide a copy of your data in a simple, machine-readable format.
  • Right to withdraw consent If we are using your data based on your consent (like for marketing), you can withdraw that consent at any time.

6. How to Exercise Your Rights

If you want to exercise any of these rights or if you have any questions about this privacy policy, please send us a message via our contact form.

7. Opting-Out of Marketing

If you have provided your email address for marketing purposes through the CRA Maturity Evaluation form and wish to stop receiving these emails, you can do so at any time. Just send us a message via our contact form explaining you want to "Unsubscribe" or a similar clear message.

8. Data Security

We take the security of your data seriously. We have implemented appropriate technical and organizational measures to protect your personal data from accidental loss, unauthorized access, and other unlawful processing.

9. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or for legal reasons. The "Last Updated" date at the top of this page will always show when the policy was last revised.