Privacy policy
Last updated: March 2026
This policy describes how we process personal data when you use our website and services, in line with the GDPR and French law (including requirements linked to the RGPD).
Data controller
The data controller is CE CYBER EXPERTS, a French SASU.
- Registered office: 12 rue de Port-Mahon, 75002 Paris, France
- RCS Paris: 953 156 791
- SIRET: 953 156 791 00014
- VAT: FR13953156791
- Trade name: Cyber Experts
Data Protection Officer (DPO)
The Data Protection Officer (DPO) for CE CYBER EXPERTS is FAKGROUP, acting as external DPO.
You can contact the DPO or the controller for any question about personal data or to exercise your GDPR rights at contact@cyberexperts.io.
- Legal form: SASU — share capital €100
- Registered office: 12 rue de Port-Mahon, 75002 Paris, France
- RCS Paris: 913 172 904
- SIRET: 913 172 904 00017
- VAT: FR07913172904
Data we collect
We may collect: identification and contact data (name, email, phone, company), technical data (IP address, browser, device), usage data (pages visited), and any information you send via forms or email.
Some data is collected automatically through cookies or similar technologies—see the Cookies section.
Purposes and legal bases
We process data to: respond to enquiries and manage the contractual or pre-contractual relationship (contract / legitimate interest / consent as applicable); operate and secure the website (legitimate interest); comply with legal obligations; and, where you have opted in, send newsletters or marketing (consent).
Specify each processing activity your organisation actually performs and cite the appropriate Article 6 GDPR legal basis.
Retention
Data is kept only as long as necessary for the purposes above, unless a longer period is required by law (e.g. accounting, litigation).
Indicative periods: contact form messages—[e.g. 3 years from last contact]; account data—duration of the contract plus limitation period; logs—[e.g. 12 months]. Adjust to your policy.
Recipients and subprocessors
Data may be accessed by authorised personnel at CE CYBER EXPERTS and by technical service providers acting as processors under Article 28 GDPR. The website is hosted and deployed on Vercel; we configure hosting so that processing for this site takes place in the European Union (EEA).
Other providers may be used for specific functions (e.g. email delivery, analytics) under their respective terms and, where they act as processors, appropriate data processing agreements. We do not sell your personal data.
Transfers outside the EEA
For hosting and serving this website, we use Vercel with infrastructure in the European Union only; this processing does not involve transferring your data outside the EEA for that purpose.
Where any other processing involves countries outside the EEA, we implement appropriate safeguards under Chapter V GDPR (for example Standard Contractual Clauses approved by the European Commission) where required.
Your rights
Under the GDPR, you may request access, rectification, erasure, restriction of processing, data portability, and object to processing based on legitimate interests. Where processing is based on consent, you may withdraw consent at any time.
You may lodge a complaint with a supervisory authority; in France, the CNIL (www.cnil.fr).
Cookies and similar technologies
We use cookies or similar technologies for essential operation, audience measurement, and, subject to consent, marketing. Describe categories, retention, and how users can manage preferences (banner, browser settings).
If you use Google Analytics or similar tools, mention them and the legal basis (often consent for non-essential cookies in the EU).
Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or alteration.
Changes and contact
We may update this policy; the “Last updated” date will be revised. Significant changes may be communicated on the site or by email where appropriate.
For any privacy request: contact@cyberexperts.io.