Privacy policy
This policy governs the collection and processing by Alliance Cyber Sud of personal data ("Personal Data") of users and clients of the alliancecybersud.fr website. "Personal Data" means any information that identifies or makes a natural person identifiable, such as your name, email address, phone number or IP address.
Data controller
Alliance Cyber Sud, a collective gathering six cybersecurity firms, is the controller of the processing of Personal Data carried out through the website. Each member firm remains the controller for the assignments specific to it.
Alliance Cyber Sud is committed to complying with French Law No. 78-17 of 6 January 1978 (the "Data Protection Act") and the General Data Protection Regulation (GDPR).
The website is hosted in France on secure, GDPR-compliant servers.
Contact: contact@alliancecybersud.fr
Purposes of the processing
- Enable access to and use of the website and its features
- Manage contact and cyber diagnostic requests
- Communicate with users to respond to their requests
- Manage commercial and contractual follow-up of assignments
- Send professional communications at the user's request
- Measure website performance
- Produce statistics
Legal bases
Some processing activities are necessary to perform our contractual obligations, comply with legal obligations, or pursue legitimate interests. Other processing is based on the user's explicit consent.
Data security
Alliance Cyber Sud implements the technical and organisational measures necessary to protect Personal Data against loss, alteration, disclosure or unlawful use: secure forms, encryption, restricted access and logging.
Users are invited to report any suspicious message (phishing) to contact@alliancecybersud.fr or via www.signal-spam.fr.
Recipients
Personal Data is intended for Alliance Cyber Sud and the member firms involved in the relevant assignment. It may be transmitted to technical sub-processors (host, communication tools) bound by contract. It is never sold to third parties for commercial purposes without prior consent.
Transfers outside the EU
Alliance Cyber Sud does not transfer Personal Data outside the European Union. However, the use of some tools may entail such a transfer. In that case, we make sure the provider complies with the GDPR through standard contractual clauses or an equivalent framework.
Retention periods
- Mission-related data: throughout the contract duration, then 5 years
- Prospect data: 36 months after the last contact
- Billing data: 10 years (legal obligation)
Some data may be archived for legal purposes beyond these durations.
Your rights
You have rights of access, rectification, erasure, restriction, objection and portability concerning your Personal Data. These rights can be exercised by email at contact@alliancecybersud.fr.
You can also withdraw your consent at any time and lodge a complaint with the CNIL (www.cnil.fr).
Updates
Alliance Cyber Sud may amend this policy at any time. Amendments apply from the moment they are published on the website.