Website policies
Privacy notice
This notice explains how information submitted through the website is handled and which publication details still require confirmation.
Last updated: 1 October 2026
Controller and contact
This website operates under the Cydem Security name. A verified contact route for privacy questions and data-rights requests must be added before production publication.
The registered legal entity acting as controller, its postal address, country of establishment, and the relevant supervisory authority have not yet been supplied to this website project. Those details must be completed before production publication.
Current website behaviour
The Request a quote form validates entries in the browser and on the website server. When production delivery is configured, the server sends the enquiry through Resend to Cydem's private receiving inbox. The website does not place form entries in a customer database or browser storage and does not log the submitted message.
The website code does not currently add analytics, advertising pixels, behavioural profiling, or marketing cookies. Production hosting may create standard access and security logs. The selected host, log fields, locations, and retention settings must be documented here before deployment.
Information and purposes
If you contact Cydem directly, the enquiry may contain your name, business contact details, company, requested service, approximate scope, timing, and any other information you choose to provide. That information is used to understand and respond to the enquiry and, where requested, to prepare a quote.
Quote-form information is used only to review the request, reply to the sender, discuss scope, and prepare a quote where requested.
Lawful bases
Depending on the context, enquiry data may be processed because it is necessary to take steps at your request before entering into a contract under GDPR Article 6(1)(b). Business correspondence and website security may rely on legitimate interests under Article 6(1)(f), after confirming that those interests are not overridden by individual rights. Information may also be processed where a legal obligation applies under Article 6(1)(c).
Cydem does not currently use the public quote form for marketing consent or automated profiling.
Recipients and transfers
Enquiry data may be processed by the website hosting provider, Resend as the transactional email delivery provider, and the provider of Cydem's private receiving inbox. Access is limited to the providers needed to deliver and respond to the enquiry.
The controller must confirm the selected production provider locations, any transfer outside the European Economic Area, and the applicable transfer safeguard before publication.
Retention
The website does not maintain a separate database of enquiries. Delivered enquiries remain in Cydem's receiving mailbox according to the mailbox and business correspondence retention settings selected by Cydem.
A final retention schedule for business correspondence and production access or security logs has not been supplied. That schedule, or the criteria used to determine it, must be added before production publication.
Your GDPR rights
Privacy and data-rights requests may be submitted through the website form by selecting Other and identifying the request as a privacy matter. Rights depend on the circumstances and the lawful basis used. You may also complain to the data protection authority in the country where you live or work, or where you believe an infringement occurred.
- Be informed about how personal data is used.
- Request access to personal data held about you.
- Request correction of inaccurate or incomplete data.
- Request erasure or restriction where the legal conditions apply.
- Object to processing based on legitimate interests.
- Request portability where processing is automated and based on consent or contract.
- Withdraw consent at any time where consent is the lawful basis.
Required information and decisions
Using the website and making an enquiry are optional. A reply generally requires a working contact address and enough non-sensitive context to understand the request. The website does not make decisions with legal or similarly significant effects and does not profile visitors.
Sensitive information
Do not put passwords, tokens, keys, source code, reports, architecture diagrams, internal addresses, sensitive URLs, customer datasets, or other confidential system information into the public form or an initial enquiry. An appropriate exchange method can be agreed after scoping.
Changes
This notice will be updated when the production legal entity details, hosting, form delivery, subprocessors, international transfers, and retention practices are confirmed. A material change will be reflected by the date at the top of the page.
