Privacy Policy
How we collect, use and protect your personal data.
Data controller
ICS Security Trust, Montée de la Reine Victoria, Tressève, France, is responsible for the processing of personal data described below. Its full identification details appear in our Legal Notice.
For any question relating to your personal data, write to contact@ics-security-trust.com.
Data we collect and why
Contact form
First name, last name, email address, company and the content of your message. Collected to answer your enquiry and, where applicable, to prepare a commercial proposal. Legal basis: your consent, given when you tick the box before sending the form.
Access requests to the reserved area
The identification and professional details you submit when requesting access to our resources and platforms. Collected to assess your request and grant or refuse access. Legal basis: steps taken at your request prior to entering into a contract.
Reserved area accounts
Email address, an irreversible cryptographic imprint of your password with its salt, your role and your last login date. Collected to secure access to reserved content and to trace access to it. Legal basis: performance of the contract. Passwords are never stored in clear text and cannot be recovered from what we hold.
Newsletter
Email address, collected to send our news on industrial cybersecurity. Legal basis: your consent, which you may withdraw at any time.
Retention periods
- Contact messages: three years from our last exchange with you.
- Access requests: three years from the decision, whether access was granted or refused.
- Reserved area accounts: for the duration of the business relationship, then three years from its end.
- Newsletter subscriptions: until you withdraw your consent.
Beyond these periods, data is deleted or archived in a form that no longer allows you to be identified, except where a longer legal retention obligation applies.
Recipients
Your data is intended for the staff of ICS Security Trust in charge of handling your request. It is never sold, rented or transferred for advertising purposes. Two technical service providers process it on our instructions alone:
- Hostinger International Limited — hosting of the website and of the data it holds, on infrastructure located in Paris, France.
- Google Ireland Limited — delivery of the notification emails generated by the contact form, through the Gmail service.
Transfers outside the EU
The website and its data are hosted within the European Union. However, the routing of notification emails through the Gmail service may involve a transfer to Google LLC in the United States. Such transfers are governed by the standard contractual clauses adopted by the European Commission and by the EU–US Data Privacy Framework, to which Google has certified.
Cookies
This website uses no advertising cookie, no audience measurement and no third-party tracker. A single cookie is placed, named ics_access, and only once you sign in to the reserved area. It holds your session, expires after eight hours, is inaccessible to scripts (HttpOnly) and is not sent to third-party sites (SameSite=Lax). It is deleted when you sign out.
Being strictly necessary to provide a service you have expressly requested, this cookie does not require your prior consent.
Your rights
Under the General Data Protection Regulation, you have the right to access, rectify and erase your data, to restrict or object to its processing, and to data portability. Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out beforehand.
To exercise these rights, write to contact@ics-security-trust.com. We may ask you for proof of identity where there is reasonable doubt. We will respond within one month of receiving your request.
If you consider, after contacting us, that your rights have not been respected, you may lodge a complaint with the CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.
Security
Access to reserved content is protected by authentication, exchanges with this website are encrypted in transit, and passwords are stored as salted, irreversible cryptographic imprints. Reserved documents are held outside the publicly served directory and are delivered only after a session check.