Aller au contenu
BCS — Bema Cyber Security

Data protection

Privacy Policy

The firm applies to its own website the standards it recommends to its clients: data minimization, transparency and security by default. This policy describes how your personal data is processed in accordance with the GDPR.

Last updated: September 2026

  1. Data controller

    Bema Cyber Security, an independent cyber security firm represented by its founder DOSSO Béma Adama, is the data controller for processing carried out through the ddosbema.net website.

    For any question about this policy or your data, write to support@ddosbema.net.

  2. Data collected

    The firm applies the data minimization principle: only strictly necessary data is collected.

    • Contact and consultation forms: name, organization, professional email address, type of need, urgency level and description of the request.
    • Chat assistant: name, email address and subject, only if you ask to be contacted.
    • Candidate and talent portal: profile information you voluntarily provide (background, country, LinkedIn link, areas of interest), with your explicit consent.
    • Training platform: progress, quiz results and qualification attestation references.
    • Technical data: connection and security logs (IP address, timestamp, browser) required to protect the website.

  3. Purposes and legal bases

    Processing is carried out for the following purposes:

    • Answering your requests and preparing potential engagement proposals — pre-contractual measures taken at your request.
    • Managing professional relationships — the firm's legitimate interest.
    • Managing applications, assessments and qualification attestations you request — pre-contractual performance and consent.
    • Ensuring website security and preventing abuse — legitimate interest.

  4. Retention periods

    Contact requests that do not lead to an engagement are kept for a maximum of three years after the last exchange. Engagement-related data is kept for the contractual period, then for the applicable legal limitation period. Technical security logs are kept for a maximum of twelve months. Talent portal data is kept while your file is active and deleted upon simple request.

  5. Recipients and processors

    Data is processed internally by Bema Cyber Security. It may transit through technical processors acting under instruction: the website host, the transactional email service and the form relay service.

    No data is sold, rented or shared with third parties for commercial purposes.

  6. Cookies and trackers

    The website sets no advertising cookies. Only trackers strictly necessary for operation and, subject to your consent through the dedicated banner, privacy-friendly audience measurement may be used. You may withdraw your consent at any time from the cookie banner.

  7. Security

    The website is served exclusively over HTTPS, with a strict content security policy and hardened protection headers. Engagement-related exchanges take place over encrypted channels under a non-disclosure agreement. Data access is limited to the firm's founder.

  8. Your rights

    You have the right of access, rectification, erasure, restriction, objection and portability of your data, as well as the right to withdraw your consent at any time.

    These rights are exercised by email at support@ddosbema.net. The firm undertakes to respond within one month. If you believe your rights are not respected, you may lodge a complaint with the CNIL (www.cnil.fr) or your local supervisory authority.

  9. Changes to this policy

    This policy may be updated to reflect changes to the website or regulations. The version in force is the one published at https://ddosbema.net/en/privacy-policy, together with its last update date.

A question about these terms?

Write to the firm and you will receive a written answer.

Contact us