Privacy policy

Data controller

The data controller for the cybertarian.net site is Hervé Baudry, sole trader (SIREN 880 498 845), trading under the commercial name Cybertarian. For any question about your data, write to dpo@cybertarian.net.

General commitments: no data is sold, rented or transferred to third parties; no profiling is performed; no data is transferred outside the European Union. The site and the data it collects are hosted in France.

Data processed and purposes

Three processing operations are carried out from this site. In every case, only the data you enter voluntarily is collected, together with your IP address and browser description (User-Agent) at the time of submission, for abuse prevention and evidential purposes.

Contact form

Data: first name, last name, email address, message, and — optionally — company and telephone. Purposes: to answer your enquiry and, where relevant, to enter into a business relationship. Legal bases: pre-contractual measures taken at your request and legitimate interest in the security of the service. The information is stored in the publisher’s customer relationship management tool, hosted in France.

Online self-assessments

The self-assessments (ISO 27001, NIS2, SOC 2, GDPR, EU AI Act, ISO 42001) run entirely in your browser: your answers are sent to no one unless you fill in the optional “detailed analysis” form. If you do, the following is transmitted: first name, last name, email address, company (optional), together with your score and your questionnaire answers. Purposes: to provide the detailed analysis and, where relevant, to follow up with you about your result. Legal bases: pre-contractual measures taken at your request and legitimate interest in business-to-business prospecting. The information joins the same customer relationship management tool, hosted in France.

Appointment booking

Bookings are made on cal.cybertarian.net, an instance of the Cal.com tool operated by the publisher and hosted in France, which the site's booking buttons take you to. Data: name, email address, chosen time slot and any information you freely add. Purpose: to arrange the meeting. Legal basis: pre-contractual measures taken at your request. A booking also creates a record in the customer relationship management tool.

Retention periods

• Contact and prospect data (form, self-assessments, bookings): three years from your last contact, in line with the CNIL’s recommendation.
• Self-assessment answers attached to your record: same retention as the prospect data they relate to.
• Email exchanges: for as long as necessary to follow up on the relationship.

Recipients and processors

The data is accessible only to Hervé Baudry. Two categories of processor are technically involved: a hosting provider, established in France, and an email delivery provider whose servers are located within the European Union. The identity of these providers can be disclosed on request at dpo@cybertarian.net.

Cookies and trackers

This site sets no cookies at all: no advertising, social network or audience-measurement cookies, and no third-party trackers. No consent banner is therefore required.

• Audience measurement: the site uses Umami, a statistics tool self-hosted by the publisher in France (stats.ch-baudry.eu), which sets no cookies and writes nothing to your device. It records the pages viewed, the referring site, the type of browser, operating system and device, the language and the approximate location (country, region, city) derived from the IP address; the IP address itself is not stored. These statistics are used only by the publisher to measure traffic to the site; they are neither shared nor combined with other sites. If your browser sends a “Do Not Track” signal, no measurement takes place.
• Appointment booking: the cal.cybertarian.net page, opened when you click a booking button, sets no advertising cookies and no audience-measurement trackers; it may use trackers strictly necessary to the booking.

Your rights

You have the right to access, rectify and erase your data, to restrict its processing, to object to it, and to data portability. In particular, you may at any time request the deletion of the information submitted through a self-assessment. Write to dpo@cybertarian.net; you will receive a reply within one month.

If, after contacting us, you consider that your rights have not been respected, you may lodge a complaint with the French data protection authority — CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France (cnil.fr).

The legal information about the site’s publisher and hosting provider is available on the Legal notice page. In case of divergence between the French and English versions of this page, the French version prevails.