Privacy Policy

Processing of personal data in accordance with the GDPR

Last updated: 30 September 2026

This English version is provided for information purposes only. In the event of any discrepancy, the French version shall prevail.

Preamble

ScorCyber attaches particular importance to protecting the personal data of visitors to and prospects of its scorcyber.eu website. In accordance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR), this privacy policy describes the processing carried out, its purposes and the rights of the data subjects.

Data controller

The controller of the data collected on this website is ScorCyber, a sole proprietorship (Entreprise Individuelle) represented by Sebastian C.....S, registered under SIREN number 792 369 043. For any question about this policy or your personal data, you can contact the controller at the following address: .

Data collected

The only personal data collected on this website is collected via the contact form on the home page, when you voluntarily choose to fill it in:

  • Name (required)
  • Company (optional)
  • Email address (required)
  • Phone number (optional)
  • Subject of the request (required)
  • Message (required)

ScorCyber does not set any audience measurement, advertising or tracking cookies, and does not use any third-party analytics tool on this website.

Purposes and legal bases of processing

  • Responding to your contact or quote requests: processing based on the performance of pre-contractual measures taken at your request (Article 6(1)(b) GDPR) and, secondarily, on ScorCyber's legitimate interest in handling the requests it receives (Article 6(1)(f) GDPR).

No automated decision-making or profiling is carried out on the basis of this data.

Recipients of the data

Data submitted via the contact form is received directly by professional email and is accessible only to the controller. It is not sold, rented or shared with third parties for commercial purposes, and does not pass through any CRM, database or third-party tool.

Retention period

Data collected via the contact form is kept for 2 years from your last exchange with ScorCyber, in accordance with the storage limitation principle set out in Article 5(1)(e) GDPR. After this period, it is deleted or anonymised, unless a longer retention period is required by law.

Hosting and data transfers

The scorcyber.eu website is hosted by OVH SAS (2 rue Kellermann, 59100 Roubaix, France), on infrastructure located in the European Union. No personal data collected via this website is transferred outside the European Union.

Third-party resources

This website does not load any resources from third-party servers: fonts, scripts and style sheets are all self-hosted on ScorCyber's infrastructure. No request (and therefore no IP address) is sent to any external service (Google or other) when you browse the website.

Data security

The website is served exclusively over HTTPS and applies a strict Content Security Policy. As no database is used for the contact form, data is transmitted only by email, encrypted in transit.

Data Protection Officer

Given the limited nature, scope and volume of the processing carried out by ScorCyber (a sole proprietorship that neither processes sensitive data on a large scale nor carries out regular and systematic monitoring of data subjects), the appointment of a Data Protection Officer (DPO) is not required under Article 37 GDPR. Any question relating to data protection may be addressed directly to the controller.

Your rights

In accordance with Articles 15 to 22 GDPR, you have the following rights over your data:

  • Right of access: obtain confirmation that your data is being processed and obtain a copy of it.
  • Right to rectification: have inaccurate or incomplete data corrected.
  • Right to erasure: request the deletion of your data in the cases provided for by the GDPR.
  • Right to restriction of processing.
  • Right to object: object, on grounds relating to your particular situation, to processing based on legitimate interest.
  • Right to data portability: receive your data in a structured, commonly used format.

To exercise any of these rights, contact the controller at with the subject line “Exercise of my rights”. You will receive a reply within one month at most, in accordance with Article 12(3) GDPR. Proof of identity may be requested if there is reasonable doubt about your identity.

Complaint to the supervisory authority

If, after contacting us, you consider that your rights have not been respected, you may lodge a complaint with the French data protection authority, the Commission Nationale de l'Informatique et des Libertés (CNIL):

You may also lodge a complaint with the supervisory authority of the EU Member State where you live (for example the AEPD in Spain or the CNPD in Portugal). In the United Kingdom, the competent authority is the Information Commissioner's Office (ICO); in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC).

Changes to this privacy policy

ScorCyber may amend this privacy policy, in particular to comply with any regulatory, case-law or technical developments. The date of the last update is shown at the top of this page.