Privacy policy

This policy describes how ADISTOS SERVICES (SIREN 102649845) collects, uses and protects personal data, in accordance with Regulation (EU) 2016/679 ("GDPR") and the French Data Protection Act.

1. Data controller

The data controller is ADISTOS SERVICES, represented by its President / founder, DENISSE Brandon Patrick Claude Dylan. Contact: contact@adistos.com.

Registered office: .

2. Data collected

• Identification and contact data (name, organization, email, phone) submitted via our forms;
• Request qualification data (sector, size, tools in place);
• Technical connection data necessary for the operation and security of the site.

3. Purposes and legal bases

• Respond to your requests and contact you (basis: legitimate interest and performance of pre-contractual measures);
• Manage the commercial and contractual relationship (basis: performance of the contract);
• Ensure the security and traceability of the site (basis: legitimate interest);
• Send you, where applicable, communications when you have consented (basis: consent).

4. Role as processor under the GDPR

Within the framework of its cybersecurity services — audit, deployment, MDR/SOC monitoring — ADISTOS SERVICES acts as a processor within the meaning of Article 28 of the GDPR on behalf of its clients, who are controllers of their own data.

As such, ADISTOS SERVICES undertakes to:

• Process data only on the client's documented instructions;
• Implement appropriate technical and organizational measures;
• Inform the client without delay in the event of a data breach;
• Not use a sub-processor without authorization;
• Assist the client in exercising data subjects' rights.

5. Retention period

Data is retained for the period necessary for the purposes described, then within the limits of the applicable legal limitation periods, before deletion or anonymization.

6. Recipients

Your data is accessible only to authorized ADISTOS SERVICES staff and, where applicable, to our technical sub-processors (hosting, tools) strictly necessary for the service. It is never resold to third parties.

7. Transfers outside the European Union

Data is, in principle, processed within the European Union. Any transfer outside the EU would be governed by appropriate safeguards (standard contractual clauses).

8. Your rights

In accordance with Articles 15 to 22 of the GDPR, you have the right of access, rectification, erasure, restriction, portability and objection. You can exercise these rights by writing to contact@adistos.com. You also have the right to lodge a complaint with the CNIL.

9. Data security

ADISTOS SERVICES applies to its own systems the standards it recommends: encryption, access control, multi-factor authentication, logging and security event monitoring.

10. Contact

For any question relating to the protection of your data: contact@adistos.com.