Privacy Policy

Data Controller

Data Controller
Franck Lemarié
franck@cybersiam.com

Cybersiam
Legal name: [to be completed]
Legal form: [to be completed]
Registered office: [full address to be completed], Thailand
Registration number: [to be completed]
Tax identification number: [to be completed]

Personal data collected

Contact form

When you use the contact form, Cybersiam may collect the following information:

• Name: required
• Company: optional
• Email address: required
• Phone number: optional
• Message: required

Please do not include sensitive personal data or information that is not necessary to handle your request in the free-text field.

Technical and browsing data

When you browse the website, certain technical information may be processed to operate and secure it. This may include your IP address, the date and time of the request, the requested resource, information about your browser or device, the referring address, and information required for server diagnostics.

Hosting is currently provided by o2switch. Raw Apache logs available to the hosting account holder are, by default, deleted after being processed by statistical tools unless archiving is explicitly enabled. O2switch may retain certain technical, connection or traffic data for up to one year where required to meet its own legal obligations.

Audience measurement data

Cybersiam uses Burst Statistics to obtain statistical information about how the website is used. The tool is configured in private mode without a persistent tracking cookie. Information about cookies and similar technologies is provided on the Cookie Management page.

Sources of data

Personal data is primarily collected directly from you or generated technically when you use the website.

• information entered in the contact form;
• information provided during email exchanges;
• technical information generated by requests sent to the server;
• language preference recorded by the website.

Purposes and legal bases of processing

Responding to your requests

Information sent through the form or by email is used to understand your request, respond to you and continue any necessary exchanges. When your request concerns a potential service or engagement, processing may also be necessary to take steps at your request before entering into a contractual relationship. Depending on the context, processing is based on this pre-contractual necessity or on Cybersiam’s legitimate interest in responding to people who contact it.

Operating and securing the website

Certain technical data may be used to operate cybersiam.com, detect anomalies, prevent abuse, secure the service and perform the operations required for its administration. This processing is based on Cybersiam’s legitimate interest in operating a functional and secure website.

Measuring website usage

Statistical data may be used to understand overall website usage and improve its operation or content. Burst Statistics is configured in private mode without a persistent tracking cookie.

Meeting applicable obligations

Certain information may be retained or used where necessary to comply with a legal obligation, handle a request concerning your rights, or establish, exercise or defend legal claims.

Required and optional information

The “Name”, “Email” and “Message” fields are required to allow Cybersiam to identify your request and respond to it. The “Company” and “Phone” fields are optional. If you do not provide the required information, Cybersiam may not be able to process your request.

Recipients of personal data

Access to personal data is limited to people and service providers who need it to perform operations related to the purposes described in this policy. Data may in particular be accessible to:

• Franck Lemarié and people expressly authorised to act for Cybersiam;
• o2switch, which currently hosts the website, its database and the associated email service;
• technical service providers used by Cybersiam where access to data is necessary for their intervention;
• administrative, judicial or regulatory authorities where disclosure is required by law.

The WordPress plugins used by the website, including Ninja Forms and Burst Statistics, currently run within the WordPress environment hosted for Cybersiam. Their presence does not, by itself, mean that the data collected is transmitted to their publishers. Cybersiam does not sell personal data collected through the website and does not disclose it to third parties for their own marketing purposes.

Current location of data

The website, its database and the email service currently used by Cybersiam are hosted in France by o2switch. Information sent through the form may therefore be stored on this infrastructure and transmitted by email through it. Where processing involves a service provider located outside Thailand, Cybersiam takes into account the PDPA requirements applicable to international transfers of personal data. The hosting provider’s contact details are provided in the Legal Notice.

Retention periods

Cybersiam applies retention periods proportionate to the purposes pursued:

• Form enquiries: 12 months from the last exchange where they do not lead to a commercial or contractual relationship.
• Email correspondence: 24 months from the last meaningful exchange where no contractual relationship is established.
• Language preference: the pll_language cookie may be retained for up to one year to remember the selected language.
• Requests concerning data subject rights: 3 years after the request is closed.
• Technical logs: raw Apache logs available to the hosting account holder are deleted by default after statistical processing unless archiving is explicitly enabled. O2switch may retain certain technical or traffic data for up to one year to meet its own obligations.
• Technical backups: copies of deleted data may temporarily remain in backups during the rotation cycle of the subscribed o2switch plan. Current o2switch plans provide retention periods ranging from 30 to 90 days depending on the plan.

When a contractual relationship is established, information required for that relationship is retained for its duration and, where applicable, for the periods required by legal, accounting or tax obligations, or as necessary to defend Cybersiam’s rights. At the end of the applicable retention periods, data is deleted, anonymised or rendered permanently non-identifiable.

Data security

Cybersiam implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration or unlawful disclosure. Access to data is limited to people or service providers who need it to perform their duties. Security measures are adapted according to the nature of the data, the processing performed, the risks identified and changes in the technical solutions used.

Cookies and similar technologies

The cookies and similar technologies actually used, their purposes and their duration are described on the Cookie Management page. Under the current configuration, the website does not use advertising cookies, marketing pixels or third-party analytics cookies requiring a preference manager.

Your rights

Subject to the conditions of the PDPA and depending on the processing concerned, you may in particular have:

• a right of access to personal data concerning you;
• a right to rectification of inaccurate, incomplete or outdated information;
• a right to erasure where the conditions provided by the PDPA are met;
• a right to restrict the use of your data in certain circumstances;
• a right to object to certain processing activities;
• a right to data portability where the conditions provided by the PDPA are met;
• the right to withdraw your consent where processing is based on consent.

Withdrawing consent does not affect processing lawfully carried out before the withdrawal. The exercise of certain rights may be restricted where a legal obligation, the establishment or defence of legal claims, or another exception provided by the PDPA requires or permits the retention or use of the information concerned.

Exercising your rights

Cybersiam may request information reasonably necessary to verify the applicant’s identity and prevent unauthorised access to data concerning another person. Requests are handled in accordance with the conditions and time limits provided by the PDPA.

Complaints

If you believe that your personal data is not being processed in accordance with the PDPA, you may contact Cybersiam to request a review of your situation. You may also lodge a complaint with Thailand’s Office of the Personal Data Protection Committee (PDPC). Official information and services are available at gppc.pdpc.or.th.

Changes to this policy

This policy may be updated when Cybersiam’s processing activities, website features, service providers or applicable requirements change. The version published on this page is the version applicable to the website.

Last updated: 22 August 2026.