Privacy policy
This policy explains how CybrOps handles personal data when you visit this website and when you request a briefing about ADA. We collect as little as we can and use it only for the purposes described here.
In short
- No analytics, advertising trackers, social media plugins or third-party scripts. Fonts and images are served from this site.
- We receive personal data only when you send the briefing form, plus the technical data any website needs to be delivered and protected.
- We never sell your data or use it for advertising.
1. Who is responsible
The controller of your personal data is CybrOps, Luxembourg (cybrops.lu). For any question about this policy or your data, write to hello@adasec.ai.
2. When you browse this website
The site is hosted on Cloudflare's network. To deliver pages and protect the site against attacks and abuse, Cloudflare processes connection data such as your IP address, the page requested, the time of the request, your browser's user agent and the referring page.
We do not build visitor profiles and we do not log page views ourselves. The legal basis is our legitimate interest in running a secure and reliable website (Article 6(1)(f) GDPR).
3. When you request a briefing
The briefing form asks for:
- your name, work email address and organisation (required);
- a message describing what you would like to cover (optional).
When you submit the form, the following is attached automatically:
- the language version of the site you used and the date and time of the request;
- your IP address and the approximate location derived from it (city and country);
- the name and number (ASN) of the network you connected from;
- your browser's user agent.
We use this information to answer your request, prepare and hold the briefing, and recognise spam, fraudulent or abusive submissions. The request is delivered by email to our team, and a copy of the submission is recorded briefly in the hosting provider's operational logs.
Processing your contact details and message is necessary to take the steps you asked for before any contract (Article 6(1)(b) GDPR). The technical data is processed on the basis of our legitimate interest in protecting the form from abuse and understanding where requests come from (Article 6(1)(f) GDPR). Providing the information is voluntary, but we cannot reply without a name, an email address and an organisation.
4. Cookies and browser storage
We use no advertising or analytics cookies. The site stores only the following:
| Name | Type | Purpose | Duration |
|---|---|---|---|
lang | First-party cookie | Remembers the language you chose, so the site opens in that language next time. | 12 months |
theme | Local storage in your browser | Remembers whether you chose the light or dark display. It is never sent to us. | Until you clear it |
Cloudflare security cookies, such as __cf_bm | Cookie set by our hosting provider | Set only when needed to tell people from automated attacks. | Up to 30 minutes |
These items are strictly necessary for the site or remember a choice you made. You can delete them at any time in your browser settings; the site keeps working, but will forget your preferences.
5. Who receives your data
Your data is accessible only to the CybrOps staff who handle briefing requests. We use the following service providers, who act on our instructions:
- Cloudflare for hosting, security and delivering form submissions by email;
- our email provider, which stores the messages we receive and send.
We share data with authorities only where the law requires it. We do not sell personal data or share it with third parties for their own marketing.
6. Transfers outside the European Economic Area
Cloudflare operates a global network, so some data may be processed outside the European Economic Area. Where this happens, the transfer is covered by the EU-U.S. Data Privacy Framework or by the European Commission's Standard Contractual Clauses.
7. How long we keep it
- Briefing requests: as long as needed to handle your request and any follow-up. If it does not lead to a business relationship, we delete it at the latest 24 months after our last exchange. If it does, we keep what is needed for that relationship and for our legal record-keeping obligations.
- Hosting logs: kept by Cloudflare for a short period, typically a few days, then deleted automatically.
- Cookies and local storage: for the durations listed in section 4.
8. Security
The site is served only over encrypted connections (HTTPS with HSTS), runs a strict content security policy that blocks outside scripts, and limits access to submissions to the people who need it.
9. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and receive a copy;
- have inaccurate data corrected;
- have your data erased;
- restrict how we process it;
- object to processing based on our legitimate interests;
- receive the data you gave us in a portable format.
To exercise any of these rights, email hello@adasec.ai. We reply within one month and may ask you to confirm your identity first.
You can also lodge a complaint with the Luxembourg data protection authority, the Commission nationale pour la protection des données (cnpd.public.lu), or with the supervisory authority in the EU country where you live or work.
10. Automated decisions
We do not make decisions about you based solely on automated processing, and we do not profile visitors.
11. Changes to this policy
If we change how we handle personal data, we update this page and the date at the top.