CyTrusted Request a private walkthrough

Privacy Policy – CyTrusted

Last updated: 18 October 2026

Who we are

CyTrusted is a European cybersecurity technology company providing continuous cyber assurance for supplier ecosystems.

The websites https://cytrusted.eu and https://cytrusted.com are operated by:

CyTrusted SAS
38 rue des Mathurins
75008 Paris, France

Contact: contact@cytrusted.eu
Privacy enquiries: privacy@cytrusted.eu

CyTrusted SAS is the data controller for personal data processed in connection with these websites.

Personal data collection

We do not operate public user accounts, contact forms, or comment functionality on this website.

However, certain technical information is processed automatically when you visit the website, including IP addresses, browser and device information, requested pages, timestamps, and security-related information.

This information is used to operate, secure, maintain, and improve the website.

Website infrastructure and service providers

Our website relies on the following technologies and service providers.

WordPress

The website is built using WordPress, an open-source content management system.

WordPress provides website publishing and administration functionality. Authentication cookies are used for authorised website administrators. Public visitors do not need a WordPress account.

Kinsta – Website hosting

Kinsta provides managed WordPress hosting, website infrastructure, caching, backups, and technical monitoring.

Kinsta may process technical information such as visitor IP addresses, requested URLs, timestamps, and server logs to ensure website availability, performance, and security.

Cloudflare – Website security and performance

Cloudflare provides network security and performance services, including content delivery, protection against malicious traffic, and automated threat detection.

Cloudflare may process IP addresses, HTTP request information, browser characteristics, and security-related indicators.

Depending on the security mechanisms activated, Cloudflare may use strictly necessary cookies to distinguish legitimate visitors from potentially malicious automated traffic.

Google Site Kit – Website analytics and search performance

We use Google's Site Kit plugin to integrate website performance and analytics services into our WordPress administration interface.

These services include Google Analytics and Google Search Console.

Complianz – Cookie consent management

We use Complianz to present cookie information, collect and record consent preferences, and allow visitors to change or withdraw their consent to optional cookies. Complianz uses necessary preference cookies to remember these choices.

Website analytics

We use Google Analytics 4 to understand website usage, including page visits, approximate geographical location, referral sources, device characteristics, and visitor interactions.

Google Analytics may use cookies and online identifiers to distinguish visitors and sessions.

Analytics cookies are subject to visitor consent, in accordance with applicable data protection and cookie regulations.

We also use Google Search Console to analyse our website's visibility in Google Search results. Search Console provides search performance information to authorised website administrators. Its integration through Site Kit does not, by itself, require visitor-tracking cookies.

We do not sell visitor information or use website analytics for targeted advertising.

Cookies

Our website may use two categories of cookies.

Strictly necessary cookies

These support website security, availability, and essential functionality.

Examples may include Cloudflare security cookies such as __cf_bm and cf_clearance, depending on the security features activated.

These cookies are not used by CyTrusted for advertising and do not require consent where they are strictly necessary to provide the website's requested services.

Analytics cookies

Google Analytics may use cookies such as _ga and _ga_* to distinguish visitors and measure website usage.

These cookies require prior consent and should only be activated in accordance with your preferences. Their duration depends on the configured Analytics settings.

You can accept or refuse optional analytics cookies and withdraw your consent at any time through Cookie Settings, managed by Complianz.

For the detailed cookie inventory, purposes and retention periods, consult our Cookie Policy, maintained in Complianz.

You may also manage cookies through your browser settings. Disabling strictly necessary cookies may affect some website functionality.

Scheduling meetings

If you request a meeting or product demonstration, you may be redirected to Google Calendar scheduling services.

Google processes the information you provide according to its own privacy policy.

CyTrusted may receive and retain relevant appointment details, including your name, email address, organisation, and meeting information, in order to organise and follow up on the requested meeting.

This information is not collected through a WordPress contact form.

Legal basis for processing

We process website-related personal data on the following legal bases under Article 6 of the GDPR:

Legitimate interests (Article 6(1)(f)): operating, maintaining, securing, and improving the website, preventing malicious activity, and responding to business enquiries.

Consent (Article 6(1)(a)): using non-essential analytics cookies and associated tracking technologies.

Pre-contractual measures (Article 6(1)(b)): where applicable, responding to requests related to a potential business relationship.

You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Embedded content and external links

Our website may contain links to external websites or embedded third-party content, such as videos or images.

When you interact with third-party content or follow an external link, the relevant provider may process personal data and use cookies according to its own privacy policy.

Where third-party content requires non-essential tracking technologies, applicable consent requirements apply.

Data sharing

We do not sell personal data.

Technical website information may be processed by our hosting, security, and analytics providers, including Kinsta, Cloudflare, and Google, for the purposes described in this policy.

Information is disclosed only as necessary to provide these services, fulfil legitimate operational requirements, or comply with applicable legal obligations.

Data retention

We retain or allow our service providers to retain personal data only for as long as necessary for the purposes described in this policy.

Kinsta's standard server log files are retained for up to four days. Kinsta also documents retention of access-log information, including IP addresses, in its hosting analytics systems for up to 30 days.

Cloudflare retains technical information according to the relevant services, settings, and applicable retention policies.

Google Analytics data is retained according to our configured Analytics retention settings and Google's applicable policies.

Meeting-related information is retained for the time needed to manage the enquiry, conduct appropriate follow-up, and satisfy applicable record-keeping obligations.

International data processing

Our website infrastructure and service providers may process technical information within or outside the European Economic Area.

Kinsta, Cloudflare, and Google operate international infrastructure and services. Consequently, certain information may be processed in countries outside the European Union, including the United States.

Where applicable, international transfers are subject to appropriate data protection safeguards, such as recognised adequacy mechanisms or Standard Contractual Clauses under the GDPR.

Your rights

Under applicable data protection legislation, including the GDPR, you may have the right to access, rectify, erase, or restrict the processing of your personal data, object to certain processing activities, and request data portability where applicable.

You also have the right to withdraw consent for optional analytics processing.

To exercise your rights or ask a privacy-related question, contact:

privacy@cytrusted.eu

You may also lodge a complaint with the French data protection authority, the Commission Nationale de l'Informatique et des Libertés (CNIL):

https://www.cnil.fr

Security

CyTrusted applies appropriate technical and organisational measures to protect its website and associated information.

These include encrypted HTTPS connections, managed hosting, access controls, security monitoring, and protection against malicious traffic.

Changes to this policy

We may update this Privacy Policy to reflect changes to our website, service providers, processing activities, or applicable legal requirements.

The date of the latest revision will be indicated above.

Further information