Privacy policy

At CyberSEN, protecting your personal data is an integral part of our commitment to cybersecurity and digital trust. This policy explains clearly and transparently how we collect, use and protect your data when you use the cybersen.net website.

1. Data controller

CyberSEN
Allées Seydou Nourou Tall, Point E, 1700 Dakar, Senegal
Email: contact@cybersen.net

2. Personal data collected

We only collect the data strictly needed for our business:

first and last name, company name;
email address and phone number;
information sent through the contact or subscription form;
technical security data (IP address, processed as a fingerprint to limit abuse, browser type).

The "Test your reflexes" game collects no personal data unless you request your report: your answers stay in your browser and in the technical session. If you request the report, your name, email address, company, headcount and answers are used to email it to you and to contact you again, with your consent.

3. Purposes of processing

Answering your contact, information or quote requests.
Organising express audits, meetings or demonstrations.
Processing your subscription and its payment.
Providing our cybersecurity, awareness and support services.
Keeping the website technically secure and preventing abuse.
Meeting our legal and regulatory obligations.

CyberSEN never sells your personal data to third parties.

4. Legal basis

Your consent (contact form, game report request, newsletter subscription).
The performance of pre-contractual or contractual measures (subscription, payment).
CyberSEN's legitimate interest (website security, service improvement).
Compliance with legal obligations.

5. Retention period

Contact data: up to 3 years after the last exchange.
Client data: for the duration of the contractual relationship, then for the period required by law.
Newsletter: until you unsubscribe.
Technical security data: a few days at most, to limit abuse.

6. Recipients and service providers

Your data is only shared with trusted technical providers, bound by strict confidentiality and security obligations, and only as far as necessary:

website hosting: OVHcloud;
anti-robot checks on forms: Cloudflare Turnstile;
customer relationship management, live chat and newsletter sending: Odoo;
transmission of newsletter subscriptions to Odoo: Zapier;
email: Microsoft 365;
payment: PayDunya — payment details are entered with this provider, never on our website;
publishers of the solutions deployed for our clients, as part of the service subscribed.

7. Data security

CyberSEN implements appropriate technical and organisational measures: secure hosting, encrypted exchanges (HTTPS enforced), a strict content security policy, restricted access to data, form protection (anti-replay token, anti-robot check, rate limiting), monitoring and incident prevention.

8. Your rights

You have the right to access, rectify, erase, restrict, object to and port your data. You can exercise these rights at any time by writing to contact@cybersen.net. You may also lodge a complaint with the Commission de Protection des Données Personnelles (CDP).

The CyberSEN Radar is sent every week to people who asked for it. When you subscribe and tick the consent box, your address is added straight away to the mailing list for your country in our management tool (Odoo), and a welcome email is sent to you; it contains a one-click link to cancel the subscription if you did not request it. Your address is only used for this newsletter and is never sold or passed on. Every edition contains a one-click unsubscribe link.

The "Radar" section of the home page shows an automatic selection of articles published by third-party news sources (title, summary provided by the source, link). Reading them on our website sends no data to these sources; when you open the full article, you leave our website for the source's, which applies its own policy.

10. Cookies and local storage

The website uses no advertising or audience measurement cookies. Only strictly necessary items are used:

cs_sid: technical session for forms (anti-replay token), deleted when the browser is closed;
cs_mkt: country chosen;
cs_lang: display language chosen (French or English);
cs_quiz: list of the emails already shown in the game, so they are not repeated (no personal data);
cs-theme (browser local storage): display theme chosen.

On pages with a form, Cloudflare Turnstile may set technical items needed for the anti-robot check. The live chat (Odoo, on the home page) keeps a conversation identifier in your browser only if you open it; the exchanges are processed by Odoo on our behalf. You can configure or refuse cookies at any time in your browser settings.

11. Changes to this policy

CyberSEN may change this policy to reflect legal, regulatory or technical developments. Any change is published on this page with its update date.

12. Contact

For any question about this policy or your personal data: contact@cybersen.net.