Personal data
Privacy policy
What this site collects, why, for how long, and what you can demand. This describes the website itself: data processed as part of our services is governed by the contract with each client.
In short
- No advertising cookies, no third-party trackers on page load.
- Analytics run without cookies and without any persistent identifier.
- The booking widget only loads after your explicit agreement.
- You can access, correct or delete your data at any time.
Data controller
SECOPS FORCES is the controller for the processing described below.
For any request about your data: dpo@secopsforces.com. We reply within one month, as required by the General Data Protection Regulation.
Analytics
We use Matomo, an analytics platform hosted in the European Union, configured without cookies and with IP anonymization. No identifier lets us recognize you from one visit to the next, and no data is passed to any third party for advertising.
In this configuration, analytics fall under the consent exemption recognized by the French data protection authority: they exist only to tell us which pages get read, and they start without asking you anything.
Your browser’s "Do Not Track" signal is honored: when it is on, no measurement takes place.
| Data | Purpose |
|---|---|
| Anonymized IP address | Distinguish visits, estimate country-level origin |
| Page viewed, referring page | Understand reading paths |
| Device type, browser, language | Check the site works everywhere |
Booking a meeting
The contact page offers a booking widget provided by TidyCal. It is third-party content: it loads only after your explicit agreement, collected through the banner provided for that purpose.
If you book a slot, the details you enter — name, email address, possibly company and message — are processed by that provider, established in the United States, on the basis of your own request. They reach us so we can arrange the conversation.
You can decline that load and write to us directly: the contact link stays visible in all circumstances and requires no prior agreement.
Free tools and report delivery
Our public tools analyse a domain name using information already available to anyone: DNS records and unauthenticated endpoints. Running a scan requires no address and keeps nothing.
If you ask to receive the report by email, your address is used to send it. We then keep the date, the domain scanned, the score and your address — in a tracking sheet accessible to our team only — so we can respond if you come back to us about it.
That address then receives our writing on Microsoft 365 and email security, once or twice a month. The basis is business-to-business prospecting: we tell you at the point where you enter your address, the subject matches your role, and every message carries a one-click unsubscribe link. You can also object at any time by writing to us.
Report delivery only accepts work addresses: consumer mailbox providers are refused, and nothing is collected or kept in that case. The scan result stays on screen, free and complete.
Our emails measure opens and clicks, using a tracking image and redirected links. We use it to know which subjects are read and to stop writing about those that are not — not to build a profile of you. You can object at any time by writing to us, or unsubscribe: the link is in every message and stops the measurement along with the rest.
The report stays readable for 90 days at the address sent to you, then it is deleted. Anyone holding the link can read it: only pass it to those who should see it.
Your decision on third-party content
Your choice is stored in your browser’s local storage, with its date and the version of the text it relates to. It is not a cookie: nothing is sent to a server, and the information never leaves your device.
If we add a new third-party service, the version changes and you are asked again. You can change your mind at any time by clearing site data in your browser.
Hosting and technical logs
The site is delivered by Cloudflare, which keeps technical connection logs to ensure availability and security. Those logs are that provider’s own processing, based on our legitimate interest in keeping the site online and protected from attack.
Retention periods
| Data | Period |
|---|---|
| Traffic statistics | 13 months, then aggregated with no way back to detail |
| Meeting request or message | 3 years from the last exchange, unless a contract is running |
| Third-party content decision | Until you clear it yourself |
| Domain scan report | 90 days, then deleted |
| Address subscribed to our writing | Until you unsubscribe |
Your rights
You have the right to access, rectify, erase, restrict and object, as well as the right to data portability.
To exercise them, write to dpo@secopsforces.com. No justification is required for an access or erasure request.
If our answer does not satisfy you, you may lodge a complaint with the French data protection authority (cnil.fr).
Transfers outside the European Union
Analytics are hosted in the European Union. The booking widget and the site hosting involve providers established in the United States, covered by the European Commission’s standard contractual clauses.
No data processed as part of our services — your environment configuration, audit reports — passes through this site or these providers.
Changes
This text changes whenever the site changes materially: a new third-party service, a new purpose, a new retention period. The last update date appears at the top of this page, and the full history of changes is public in the site’s code repository.