Data controller : Personal data collected on the cyberstack.fr website is processed by Pierre Ressouche – CYBERSTACK (Sole Proprietorship), whose registered office is located at 37 Avenue de la Gare 12500 Espalion, acting as data controller within the meaning of Regulation (EU) 2016/679 (GDPR) and French Law No. 78-17 of January 6, 1978 as amended, known as the “Data Protection Act”. Hereinafter referred to as “CYBERSTACK” or “we”.
Purpose : In accordance with the General Data Protection Regulation (GDPR), this policy aims to transparently inform you about how your personal data is processed.
Contractual performance (Art. 6.1.b GDPR) : Data processing is primarily necessary for the performance of the contract concluded with you, particularly in the context of providing services.
Legitimate interest (Art. 6.1.f GDPR) : We process certain data to improve our services, ensure security, analyze satisfaction, and manage professional communications. These processes are based on our legitimate interest in ensuring the security and proper functioning of our services, without infringing your fundamental rights and freedoms. A balancing test has been carried out to ensure that these processes do not adversely affect the rights and freedoms of data subjects.
Consent (Art. 6.1.a GDPR) : Where required by law or appropriate, we request your prior consent, particularly for certain communications.
Legal obligation (Art. 6.1.c GDPR) : Certain data is processed to comply with our legal obligations, particularly regarding invoicing and accounting retention. Categories of collected data may include: identification data (first name, last name), contact details (email address, phone number), contractual and billing data, correspondence data, and technical data (IP address, connection logs). No sensitive data within the meaning of Article 9 of the GDPR is collected.
No transfer to third parties : Your personal data is neither sold nor transferred to third parties. Data recipients are exclusively the data controller and technical service providers strictly necessary for website operation (hosting, messaging), acting as processors within the meaning of Article 28 of the GDPR. No data is sold or transferred to third parties.
Location of processing : Data is processed and hosted within the European Union under appropriate technical and organizational measures. No data transfer outside the European Union is carried out.
Legal obligations : We may be required to disclose certain information to competent authorities where legally obligated.
Security measures : CYBERSTACK implements appropriate technical and organizational measures in accordance with Article 32 of the GDPR to ensure the confidentiality, integrity, and availability of data.
Breach notification : In the event of a personal data breach likely to result in a risk to the rights and freedoms of data subjects, the competent supervisory authority (CNIL – French Data Protection Authority) as well as the affected individuals will be notified within the legal timeframes in accordance with the GDPR.
Right of access : You may obtain communication of your personal data at any time.
Right to rectification : You may request the correction of inaccurate or incomplete data.
Right to erasure : You may request deletion of your data when its retention is no longer necessary or when no legal basis remains.
Right to restriction : You may request restriction of processing in certain situations provided by the GDPR.
Right to object : You may object at any time to processing based on legitimate interest.
Right to data portability : You may request transmission of your data in a structured, commonly used, and machine-readable format.
Right to withdraw consent : Where processing is based on your consent, you may withdraw it at any time without retroactive effect.
Right to lodge a complaint : You may lodge a complaint with the competent supervisory authority, in particular the CNIL.
Website use : You may browse our website for informational purposes without providing personal data. However, certain features require the collection of information.
Forms and communications : Data transmitted via forms or emails is used to respond to your requests and ensure service follow-up. Regarding mandatory fields, information identified as mandatory in forms is necessary to process your request; otherwise, it cannot be processed. No automated decision-making or profiling within the meaning of Article 22 of the GDPR is carried out based on the collected data.
Billing and legal obligations : Billing data is retained for a legal period of 10 years. Exchanges are retained for a maximum of 12 months, unless otherwise required by law. In the absence of a contractual relationship, contact data is retained for a maximum of 3 years from the last exchange.
Newsletter and communications : Data used for communications is retained until you withdraw your consent or unsubscribe.
For any question relating to your personal data or to exercise your rights: CYBERSTACK – Data Controller – 37 Avenue de la Gare, 12500 Espalion. Email: . A response will be provided within a maximum of one month. Proof of identity may be requested. You have the right to lodge a complaint with the CNIL.
