vulnward
FRBook a CRA assessmentCRA assessment

Privacy policy

Last updated: 1 November 2026

This English version is provided for convenience. The French version prevails.

Data controller

Ahmed Ben Daamer, sole proprietor (entrepreneur individuel, EI), 3 rue Olympe de Gouges, 94240 L'Haÿ-les-Roses, France. Contact: ahmed.b.daamer@gmail.com.

Data we collect

Only when you fill in the assessment form: full name, work email address, company, job title, company size, types of products shipped, availability, page language.

This website sets no cookies and uses no audience measurement tool or advertising tracker. The hosting provider keeps technical logs (IP address, date, requested page) to keep the website secure and running.

Purposes and legal basis

  • Arranging the assessment you request, acknowledging it and discussing it with you: steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR).
  • Keeping the website secure and preventing abuse of the form: the publisher's legitimate interest (Article 6(1)(f) GDPR).

Recipients and subprocessors

Your answers are accessible only to the publisher. They pass through the following subprocessors:

  • Vercel Inc. (United States): website hosting and form processing, with functions running in Paris.
  • Resend (United States): delivery of the emails related to your request (your answers sent to the publisher, and the acknowledgement sent to you), from its EU region (Ireland).
  • Google (United States): the publisher's Gmail inbox, where the email is received.

Fonts are loaded from Bunny Fonts (BunnyWay d.o.o., Slovenia, European Union), which receives your technical IP address to serve the files, without cookies.

Any transfer of data outside the European Union is covered by the EU–U.S. Data Privacy Framework when the subprocessor participates in it, or by the European Commission's standard contractual clauses. No data is sold or transferred to third parties.

Retention

Your data is kept for at most 3 years after our last exchange, then deleted, unless a contractual relationship is established in the meantime.

Your rights

You have the right to access, rectify, erase, restrict, object to and port your data. To exercise these rights, write to ahmed.b.daamer@gmail.com. We reply within one month.

If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority (cnil.fr), or with the supervisory authority of your country.