Privacy policy

Who is responsible

The controller for this website is Cyber GDPR, published by Florian Amette. You can reach us at contact@cybergdpr.org.

What we process and why

Hosting and security: when you load a page, our hosting provider Vercel processes technical data such as your IP address, user agent, requested URL and timestamp to deliver the page and protect the service against abuse. Lawful basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR, Recital 49).

Audience measurement: we use Vercel Web Analytics and Speed Insights to count page views and measure performance. They do not use cookies, and Vercel describes visitors as identified only by a hash of the request that is discarded daily. We only see aggregated figures. Lawful basis: legitimate interest (Art. 6(1)(f)).

Email: if you write to us, we use your message and address only to answer you. Lawful basis: legitimate interest (Art. 6(1)(f)).

Cookies and local storage

This site sets no cookies. Your light or dark theme preference is stored in your browser's local storage and never leaves your device.

Processors and transfers

Vercel Inc. hosts the site and provides the analytics as our processor. Vercel is based in the United States; transfers rely on the safeguards set out in Vercel's data processing addendum under Chapter V of the GDPR.

Retention

Hosting logs and analytics data are kept for the limited periods applied by Vercel. Emails are deleted once the exchange is over, unless we need to keep them to establish or defend a legal claim.

Your rights

You have the right to access, rectify and erase your data, to restrict or object to processing, and to data portability where it applies (Arts 15 to 22 GDPR). Write to contact@cybergdpr.org. You may also lodge a complaint with a supervisory authority, in France the CNIL (www.cnil.fr).