1. Controller
The controller of the personal data collected on this website is TFCyber CV (TFCYBERCV.COM). For any privacy question or to exercise your rights, write to info@tfcybercv.com.
We process data in accordance with the data protection legislation that applies to each person: the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679), when you contact us from the European Union or the European Economic Area, and the Cabo Verde regime (Law No. 133/V/2001, as amended by Laws No. 41/VIII/2013 and No. 121/IX/2021), the country where we are established.
2. Data we collect
Data you provide to us
When you fill in the contact form, we collect your name, organization (optional), email, phone number (with the country code), type of request and message. We also receive any data you decide to include in the message, so we ask that you do not send sensitive or confidential information (see the Terms and Conditions).
If you write to us directly at info@tfcybercv.com, we receive your email address and the content of the message.
Technical data
To protect the form and the website, we process your IP address and technical data about your browser. This happens in two ways: in the Cloudflare Turnstile security check (which confirms that the person sending the message is human) and in the normal server logs of the server where the website is hosted. Google Fonts typefaces are also loaded from Google servers, which therefore receive your IP address when you open the website.
What we do not do
We do not use analytics, advertising or social media cookies, we do not create profiles, and we do not make automated decisions about you. The threat map uses only public data aggregated by country, unrelated to visitors to the website.
3. How we use the data
| Purpose | Data | Legal basis |
|---|---|---|
| Reply to your request, prepare an initial assessment or a proposal | Name, organization, email, phone number, type of request, message | Your consent when you submit the form and pre-contractual steps taken at your request |
| Protect the form and the website against spam, abuse and attacks | IP address and technical browser data, server logs | Legitimate interest in the security of the website |
| Comply with legal obligations and defend rights in the event of a dispute | The data strictly necessary | Legal obligation and legitimate interest |
We only use the data for the purposes above and, if we wish to use it for another purpose, we will inform you beforehand and, where required, ask for your consent. Whether you contacted us in a personal capacity or on behalf of an organization, we do not add you to marketing lists without your express consent.
4. Who receives the data
Your data is accessed by the TFCyber CV team members who need it to reply to you. We use service providers who process it on our behalf and only according to our instructions:
- Hosting and email service of the website (cPanel), where the form is processed and the message is delivered to us by email.
- Cloudflare (Turnstile), which performs the form's security check.
- Google (Google Fonts), which provides the typefaces and receives the visitor's IP address.
- SMS provider: phone verification by SMS is currently disabled. If it is enabled, the phone number will be sent to the SMS provider only to send the confirmation code, and this policy will be updated.
We do not sell or transfer your data to third parties for commercial purposes. We only disclose it to authorities when the law requires.
5. International transfers
Some of the providers above, such as Cloudflare and Google, process data in several countries, including outside Cabo Verde and the European Economic Area. When this happens, we use providers that undertake to protect the data with appropriate safeguards, such as standard contractual clauses or equivalent mechanisms. You can ask us for more information at the email address given above.
6. Retention
We keep the data only for as long as necessary:
- Contact requests: for as long as needed to handle the request and, if it does not result in a contractual relationship, for up to 12 months after the last contact. If you become a client, the data is kept for the periods required by the contract and the law.
- Technical data and server logs: for the short period set by the hosting service, normally no longer than a few months.
After these periods, we delete or anonymize the data, unless the law requires us to keep it for longer.
7. Security
We apply appropriate technical and organizational measures to protect the data: encrypted connection (HTTPS), anti-abuse verification on forms, restricted access to incoming messages, and limits on what is stored on the server. No system is completely free of risk, and in the event of a personal data breach that affects your rights, we notify the competent authority and, where required, also the affected data subjects.
8. Your rights
You may, at any time, ask us for:
- access to your data and information about how we process it;
- rectification of inaccurate or incomplete data;
- erasure of the data, when it is no longer necessary or you withdraw consent;
- restriction of processing in certain situations;
- portability of the data you provided to us, in a commonly used format;
- objection to processing based on legitimate interest;
- withdrawal of consent, without affecting processing already carried out.
To exercise these rights, write to info@tfcybercv.com. We may ask for additional information to confirm your identity, and we reply as soon as possible and, as a rule, within 30 days.
9. Complaints
If you believe that the processing of your data violates the law, you have the right to lodge a complaint with the supervisory authority. If you live in the European Union or the European Economic Area, you can complain to the data protection authority of your country of residence, your place of work or the place of the alleged violation. In Cabo Verde, the authority is the National Data Protection Commission (CNPD). We would appreciate it if you first gave us the opportunity to resolve the matter.
10. Minors
Our services are intended for organizations and adults. The website is not directed at persons under 18 and we do not knowingly collect data from minors. If you become aware that a minor has sent us data, contact us so that we can delete it.
11. Changes to this policy
We may update this policy, for example if we change providers or enable new features such as SMS verification. The version in force is always the one published on this page, with the date of the last update at the top. To find out how we use cookies, see the Cookie Policy.