Privacy policy
Last updated: 14 November 2026
Cyber Saclay-Team takes the protection of your personal data seriously. This site was designed to collect as little as possible: no advertising trackers, no third-party analytics, fonts hosted on our own server, and no data sold or transferred.
1. Data controller
Cyber Saclay-Team, a non-profit association governed by the French law of 1 July 1901, 54 boulevard Desgranges, 92330 Sceaux, France, represented by Sam Borhani, president of the association. Contact for any question about your data: contact@cybersaclayteam.fr.
The association is not required to appoint a data protection officer; requests are handled by the Governance Committee.
2. Data processed, purposes and legal bases
| Processing | Data | Purpose | Legal basis | Retention period |
|---|---|---|---|---|
| Contact form | Name or organisation, phone, email, subject, message, how you found us | To answer your request | Consent (art. 6.1.a) and pre-contractual steps | 36 months after the request, then automatic deletion |
| Company and Institution forms | Representative, organisation, phone, email, wishes, details | To consider a partnership or collaboration | Consent and the association's legitimate interest in developing partnerships (art. 6.1.f) | 36 months after the request |
| Student form | First name, last name, email, faculty, programme, goals | To offer you opportunities and invite you to events | Consent | 36 months after the request |
| Newsletter | Email address, date and proof of confirmation | To keep you informed of news and events | Consent, collected by double opt-in | Until you unsubscribe, which you can do at any time |
| Event programmes | Speakers' name, position, organisation, photograph, LinkedIn link | To present events and their speakers | Legitimate interest; speakers may object at any time | As long as the event page is online |
| Security and technical log | Truncated IP address (last octet removed), date, page, browser, response code | Site security, abuse detection, internal traffic statistics | Legitimate interest (art. 6.1.f) and the obligation to secure data (art. 32) | 12 months, then automatic deletion |
| Abuse prevention | Irreversible hash of the IP address | To block mass submissions and repeated login attempts | Legitimate interest | 1 hour at most |
Required fields are marked with an asterisk: without them, the request cannot be processed. No automated decision-making or profiling is carried out on this data. Our forms are intended for adults; minors must have their parents' permission before writing to us.
3. Recipients
Data is accessible only to authorised members of Cyber Saclay-Team, each within the limits of their role (access rights granted section by section, protected login). It is never sold, rented or transferred. It is also processed, on our behalf and on our instructions, by our technical processor:
- Hostinger International Ltd (61 Lordou Vironos Street, 6023 Larnaca, Cyprus): hosting of the site and its data, and sending of the site's emails when the host's mail server is used, on servers located in the European Union.
Data may be disclosed to public authorities where required by law.
4. Transfers outside the European Union
No data collected by this site is transferred outside the European Union by the association. The third-party services described below are only contacted by your own browser, and only if you choose to use them.
5. Cookies and local storage
- Public site : no cookies are set. Your theme choice (light or dark) is saved in your browser (local storage) and never sent to our servers. This setting, strictly necessary for the service you request, does not require consent.
- Administration area (authorised members only): a session cookie, strictly necessary for authentication, valid for 8 hours at most and deleted on logout.
No consent banner is therefore displayed: there is nothing to accept or refuse.
6. Third-party content and services
- Map (Contact page): provided by OpenStreetMap, which receives your IP address when it is displayed.
- Videos : served by YouTube in privacy-enhanced mode (youtube-nocookie.com), loaded only after you click; Google may then process data under its own policy.
- Event registrations, portal, social networks, partner sites : these are separate services, subject to their own privacy rules.
7. Security
Connections to the site are encrypted (HTTPS). The administration area is protected by strong passwords and, for accounts that enable it, two-factor authentication; every access and change is logged. Uploaded files are checked and photo metadata (GPS location, device) is removed. Data is backed up daily. In the event of a data breach posing a risk to your rights, the CNIL and, where applicable, the persons concerned are notified under the conditions set out in articles 33 and 34 of the GDPR.
8. Your rights
Under Regulation (EU) 2016/679 (GDPR) and the amended French Data Protection Act of 6 January 1978, you have the right to access, rectify, erase, restrict, object to and port your data, the right to withdraw your consent at any time (without affecting processing already carried out), and the right to set instructions regarding your data after your death.
To exercise them, write to contact@cybersaclayteam.fr or by post to the association's registered office. We reply within one month, which may be extended by two months for complex requests. If there is reasonable doubt about your identity, proof may be requested. For the newsletter, every email contains an instant unsubscribe link.
If, after contacting us, you believe your rights have not been respected, you can lodge a complaint with the French data protection authority (CNIL): cnil.fr (new tab), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.
9. Changes
This policy may change, in particular when a new service is added or regulations evolve. The date of the last update appears at the top of the page.