Privacy policy
We collect as little personal data as possible, and never sell it. This page explains what we hold, why, and your rights under the GDPR.
Who we are
ExtremeScan is the data controller for this website. For any privacy request, contact contact@extremescan.eu. (Controller legal entity and address to be confirmed.)
What we collect, and why
- Newsletter email. If you subscribe, we store your email address (and preferred language) to send our releases. Delivery is handled by Brevo with double opt-in. Legal basis: your consent.
- Security logs. Our host (Cloudflare) keeps short-lived server logs to keep the site available and secure. Legal basis: legitimate interest.
- Analytics. We use Google Analytics to understand site usage. It runs only if you accept the cookie banner (Consent Mode v2, denied by default). Legal basis: your consent.
Who processes your data
We rely on a small number of processors acting on our instructions: Brevo (newsletter), Cloudflare (hosting/CDN), and Google (analytics, only after consent). Where a provider processes data outside the EU, it does so under appropriate safeguards such as the EU Standard Contractual Clauses. (Specific safeguards to be confirmed.)
How long we keep it
We keep your newsletter email until you unsubscribe or ask us to delete it. Server logs are retained briefly and then deleted. Analytics data is retained per the configured Google Analytics retention period.
Your rights
- access, correct, or delete the data we hold about you;
- withdraw consent at any time — every newsletter has one-click unsubscribe, and you can decline analytics in the cookie banner;
- receive a copy of your data, or restrict and object to its processing;
- lodge a complaint with your national data protection authority.
To exercise any of these, email contact@extremescan.eu.