Legal notice

Publisher

Publisher

Hervé Baudry, sole trader (entrepreneur individuel), under the French micro-entreprise regime, trading under the commercial name Cybertarian.

Activity

Consulting in cybersecurity, artificial intelligence governance and third-party risk management.

SIREN

880 498 845

Registration

French national business register (RNE), maintained by the INPI.

VAT

VAT not applicable — article 293 B of the French general tax code.

Contact

dpo@cybertarian.net

Publication director

Hervé Baudry

The cybertarian.net site is operated under the commercial name Cybertarian by the publisher identified above. The services presented on this site are intended for professional clients only. No online sale is carried out through this site.

Hosting provider

The site is hosted by OVH SAS, a simplified joint-stock company registered with the Lille Métropole Trade and Companies Register under number 424 761 419, with its registered office at 2 rue Kellermann, 59100 Roubaix, France (ovhcloud.com).

The site and the data it collects are hosted in France.

Intellectual property

All content on this site — text, methods, diagrams, graphic elements and code — is protected by copyright and remains the exclusive property of Hervé Baudry (Cybertarian), unless stated otherwise.

Any reproduction, representation, adaptation or exploitation, in whole or in part, on any medium whatsoever, is prohibited without prior written authorisation. Short quotations accompanied by a link to the original page remain free.

The trademarks and standards mentioned (ISO/IEC 42001, ISO/IEC 27001, SOC 2, NIS2, the AI Act, EBIOS Risk Manager, CISA, CISM, among others) belong to their respective owners and are cited for reference only.

Personal data

The data controller is Hervé Baudry. Any question relating to your data may be sent to dpo@cybertarian.net.

Three processing operations are carried out from this site, described below and detailed in the privacy policy (/en/privacy-policy). No data is sold, rented or transferred to third parties, and no profiling is performed.

Contact form

Data collected: first name, last name, email address, message, and — optionally — company and telephone number. Your IP address and browser description (User-Agent) at the time of submission are also recorded, for abuse prevention and evidential purposes. Purposes: to answer your enquiry and, where relevant, to enter into a business relationship. Legal bases: performance of pre-contractual measures taken at your request, and the controller’s legitimate interest in the security of the service. This information is stored in the publisher’s customer relationship management tool, hosted in France.

Online self-assessments

The self-assessments run entirely in your browser: your answers are sent to no one unless you fill in the optional “detailed analysis” form. If you do, the following is transmitted: first name, last name, email address, company (optional), together with your score and answers. Purposes: to provide the detailed analysis and, where relevant, to follow up with you about your result. Legal bases: pre-contractual measures taken at your request and legitimate interest in business-to-business prospecting. This information joins the customer relationship management tool mentioned above.

Appointment booking

Bookings are made on cal.cybertarian.net, an instance of the Cal.com tool operated by the publisher and hosted in France, which the site's booking buttons take you to. Data collected: name, email address, chosen time slot and any information you freely add. Purpose: to arrange the meeting. Legal basis: performance of pre-contractual measures taken at your request. A booking also creates a record in the customer relationship management tool mentioned above.

Retention periods: prospect data is retained for three years from your last contact, in line with the CNIL’s recommendation. Email exchanges are retained for as long as necessary to follow up on the relationship.

Recipients and processors: the data is accessible only to Hervé Baudry. Two categories of processor are technically involved: a hosting provider, established in France, and an email delivery provider whose servers are located within the European Union. No data is transferred outside the European Union. The identity of these providers can be disclosed on request at dpo@cybertarian.net.

Your rights: you have the right to access, rectify and erase your data, to restrict its processing, to object to it, and to data portability. You may exercise these rights at any time by writing to dpo@cybertarian.net. You will receive a reply within one month.

If, after contacting us, you consider that your rights have not been respected, you may lodge a complaint with the French data protection authority — CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France (cnil.fr).

Cookies and trackers

This site sets no cookies at all: no advertising, social network or audience-measurement cookies, and no third-party trackers. No consent banner is therefore required.

• Audience measurement: the site uses Umami, a statistics tool self-hosted by the publisher in France (stats.ch-baudry.eu), which sets no cookies and writes nothing to your device. It records the pages viewed, the referring site, the type of browser, operating system and device, the language and the approximate location (country, region, city) derived from the IP address; the IP address itself is not stored. These statistics are used only by the publisher to measure traffic to the site; they are neither shared nor combined with other sites. If your browser sends a “Do Not Track” signal, no measurement takes place.
• Appointment booking: the cal.cybertarian.net page, opened when you click a booking button, sets no advertising cookies and no audience-measurement trackers; it may use trackers strictly necessary to the booking.

Liability and links

The information published on this site is provided for guidance only and does not constitute tailored legal or technical advice. It cannot engage the publisher’s liability for decisions taken on that basis alone. Only a contracted engagement gives rise to deliverables and commitments.

The site may link to external resources. The publisher exercises no control over their content and disclaims any liability in that regard.

Governing law

This legal notice is governed by French law. Failing an amicable settlement, any dispute relating to the use of this site falls within the jurisdiction of the French courts. In case of divergence between the French and English versions, the French version prevails.