Legal information
Privacy Policy
Updated 24 February 2026 — Compliant with GDPR (EU 2016/679) and French Data Protection Act
1. Data controller
- Company
- HDW Sec — SAS au capital variable
- Registered office
- 178 boulevard Haussmann, 75008 Paris, France
- DPO contact
- contact@hdwsec.fr
2. Data collected and purposes
HDW Sec collects only the data strictly necessary for the purposes described below. No data is collected for commercial prospecting without prior consent.
| Data | Purpose | Legal basis | Retention period |
|---|---|---|---|
| Name, email, phone, message | Processing contact requests | Consent (art. 6.1.a GDPR) | 3 years from last contact |
| IP address, connection logs | Site security and operation | Legitimate interest (art. 6.1.f GDPR) | 12 months |
3. Data recipients
Data collected is intended exclusively for authorised internal teams at HDW Sec and the site's hosting provider (SAS OVH, Roubaix, France) within the strict limits of its contractual obligations.
No data is sold, rented or transferred to third parties. No data transfers outside the European Union are carried out.
4. Your rights
In accordance with GDPR and the French Data Protection Act, you have the following rights over your personal data:
- Right of access : obtain a copy of the data concerning you (art. 15 GDPR).
- Right of rectification : correct inaccurate or incomplete data (art. 16 GDPR).
- Right of erasure : request the deletion of your data (art. 17 GDPR).
- Right to restriction : temporarily restrict a processing operation (art. 18 GDPR).
- Right to portability : receive your data in a structured format (art. 20 GDPR).
- Right to object : object to processing based on legitimate interest (art. 21 GDPR).
- Withdrawal of consent : at any time, without affecting the lawfulness of prior processing.
To exercise these rights, send your request by email to contact@hdwsec.fr. A response will be provided within one month. If you are not satisfied, you may lodge a complaint with the CNIL.
5. Data security
HDW Sec implements appropriate technical and organisational measures to protect your data against any unauthorised access, loss, alteration or disclosure. Connections to the site are secured by the HTTPS protocol (TLS).
6. Policy updates
This policy may be updated at any time. The date of the last update appears at the top of the page. In the event of a material change, affected users will be notified by email or by a banner on the site.