Privacy & cookies
Controller
Singularity Group B.V., Kraijenhoffstraat 137-A, 1018 RG Amsterdam, the Netherlands (KvK 99939169), on behalf of Cybernova Labs B.V. (in formation), which operates the CyberNovaLabs.io brand. Contact: contact@cybernovalabs.io.
Requests sent through the form or by email
We only collect what you send us: name, company, contact details (email, phone), need and message, plus the page and campaign the request came from. This information is used only to answer and follow up on your request. Legal basis: pre-contractual steps taken at your request (Art. 6(1)(b) GDPR). Retention: 3 years from our last exchange. Trilio waiting list: your email is used only to tell you when it opens; you can unsubscribe at any time.
Cybersecurity section: form, tools and alerts
Cybersecurity form. We collect what you enter (name, company, work email, optional phone, country, company size, topic, message) and, if you used one of our tools, its result (NIS2 check verdict, or the domain checked and its grade). Purpose: to answer your request and, if you wish, send you a proposal. Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR). Retention: 3 years from our last exchange.
Sharing with a partner specialist. Only if you tick the optional box: we pass your request to one cybersecurity specialist established in the European Union, in your country, whose name we tell you before anything is shared. Legal basis: your consent (Article 6(1)(a)), which you can withdraw at any time by emailing contact@cybernovalabs.io. The specialist then processes your data to prepare its own proposal, as a separate controller.
Security Briefing (newsletter). Only if you sign up or tick the optional box: we use your work email to send you a monthly newsletter in English about cybersecurity (NIS2, CRA, email security). Legal basis: your consent (Article 6(1)(a) GDPR), which you can withdraw at any time with the unsubscribe link in every email or by writing to contact@cybernovalabs.io. Sending provider: Brevo (Sendinblue SAS, France, European Union), as processor. Retention: until you unsubscribe.
NIS2 check. The result is computed in your browser: no answer is stored unless you send the form.
Email security check. We only query the public DNS records and public HTTP headers of the domain you enter, through Cloudflare's public DNS resolver. We keep the domain checked, the grade, the date and the daily fingerprint described below (never the IP address), to prevent abuse and produce aggregated statistics. Legal basis: legitimate interest (Article 6(1)(f)). Retention: 13 months.
Email security barometer. For our barometer, we check the public DNS records of company domains. We only publish aggregated statistics (by country and sector), never a ranking that names a company.
Deadline alerts. If you sign up, we keep your email and chosen countries only to tell you when a deadline, a rule or a grant changes. Legal basis: your consent (Article 6(1)(a)). Unsubscribe at any time by email or with the link in every message; your data is deleted when you unsubscribe.
Audience measurement
This site measures its traffic with a tool we built, hosted on Cloudflare, without cookies and without third-party tools: page views, source (referring site, campaign), country, language, screen type and clicks on the main buttons. To count visitors without cookies we compute a fingerprint from the IP address and browser, mixed with a secret key that changes every day: it cannot track you from one day to the next, and the IP address is never stored. Legal basis: legitimate interest in knowing our site's audience (Art. 6(1)(f) GDPR). Retention: 13 months.
Cookies and local storage
| Item | Purpose | Duration | Consent |
|---|---|---|---|
| cnl_consent_v1 (local storage) | Remember your audience-measurement choice | 6 months | Not required (necessary) |
| cnl_lang (functional cookie) | Remember your language, only if you choose one | 12 months | Not required (at your request) |
| cnl_id_v1 (local storage) | Random anonymous identifier to recognise a returning visit | 13 months | Yes — only if you accept |
| cnl_kpi (cookie) | Session of the private area reserved for our team (/connexion) — never set for site visitors | 12 hours | Not required (necessary) |
No advertising cookies, no social networks, no third-party measurement tools. You can change your mind at any time: .
Data about companies we prospect
To identify companies for which our offers (or our clients' offers, within our B2B appointment campaigns) may be useful, we gather business information from public sources: public company registers, public map data, the company's own website. Data concerned: company name, registration identifiers, sector, business address, published business phone and email, information about the existing website. We do not collect personal email addresses. Legal basis: legitimate interest in prospecting professionals for an offer relevant to their business (Art. 6(1)(f) GDPR). A company with no exchange for 3 years is deleted. An objection ends all contact: the details are placed on an exclusion list so that the objection is respected permanently.
Recipients and processors
Hosting and measurement: Cloudflare, Inc. (European Commission standard contractual clauses and EU-US Data Privacy Framework). Email: Google (Gmail). Your data is never sold or rented.
Your rights
Access, rectification, erasure, objection, restriction and portability: write to contact@cybernovalabs.io. You may lodge a complaint with the Autoriteit Persoonsgegevens (the Netherlands) or with the authority of your country.