Privacy Policy

1. Data Controller

The controller of the personal data collected on this website is:
Roger Gnanih, Fullstack Software Engineer & Cybersecurity Specialist.
Email: rogergnanih66@gmail.com

Data is processed in compliance with applicable regulations, in particular the General Data Protection Regulation (GDPR 2016/679) and the Digital Code of the Republic of Benin (Law No. 2017-20 / APDP).

2. Data Collected and Purposes

We apply the data minimisation principle: only the data strictly necessary for the stated purposes is collected.

Feature	Data collected	Purpose	Legal basis
Contact form	Name, email, phone (optional), message, IP address	Process and reply to your business or technical request	Legitimate interest / Pre-contractual
Free security mini-audit	Name, email, target website URL, IP address	Run a passive analysis (public HTTP headers, TLS/SSL) and email you the findings	Explicit consent
Technical newsletter	Email address, first name (optional)	Periodic sending of articles, cyber analyses and case studies	Consent (one-click unsubscribe)
Comments & Reviews	Name, email, company, text content	Publishing and moderating community interactions	Voluntary consent
Self-hosted audience measurement	Hashed IP address, pages viewed, referrer, device	Measure the overall performance of the website without cross-site tracking	Legitimate interest / Consent

3. Cookies & Privacy-Friendly Analytics

This website uses no advertising cookies and no intrusive behavioural tracking tools (no Google Analytics, no invasive Facebook pixel).

Essential technical cookies: CSRF tokens (protection against request forgery) and an encrypted session cookie. Required for the website to work.
Proprietary analytics system: Audience statistics are stored and processed directly on our own (self-hosted) server. Visitor identifiers are anonymised and never shared with third parties.
Consent cookie: Records your acceptance or refusal so the banner is not shown again unnecessarily.

4. Data Retention Period

Messages and quote / audit requests: Kept for the duration of the business relationship, then archived for up to 3 years after the last active contact.
Newsletter subscribers: Kept until you unsubscribe (an unsubscribe link is included at the bottom of every email).
Raw connection and security logs: Kept for up to 90 days for incident detection (CSIRT) purposes, then automatically purged.

5. Data Recipients

Your personal data is never sold, rented or transferred to third parties. It is processed only by Roger Gnanih and shared with our essential technical subcontractors:

Contabo GmbH (Germany / EU): Hosting of the servers and the PostgreSQL database.
LWS (France / EU): SMTP servers for sending secure transactional emails.
Cloudflare (EU / International): Anti-DDoS protection and Turnstile bot verification.

6. Exercising Your Rights

Under applicable law, you have the following rights over your personal data:

Right of access and to obtain a copy of your data.
Right to rectification if information is inaccurate or incomplete.
Right to erasure (the "right to be forgotten").
Right to restrict or object to processing.
Right to withdraw your consent at any time.

To exercise any of these rights, simply email your request together with proof of identity to: rogergnanih66@gmail.com. You will receive a reply within 30 working days at most.