Privacy policy
Last updated 5 October 2026
Data controller
The data controller is CLUSIR Réunion Océan Indien (CLUSIR ROI), a non-profit association under the French law of 1901 (SIREN 539 437 426), headquartered at Immeuble Altea, 41 rue de la Pépinière, 97438 Sainte-Marie, La Réunion. It organises Cyber Tour Réunion 2026 and publishes the cybertour.re website.
For any question about your data: evenement@clusir-roi.org.
What the website itself does
The cybertour.re website has no forms, creates no accounts and sets no cookies. Two kinds of processing take place during your visit:
- technical logs kept by the host, GitHub (IP address, date, requested page, browser), retained by GitHub for the security of the service;
- cookieless audience measurement, described below.
Contact links open your email client. An email you send us is used only to reply to you.
Processing in detail
| Processing | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Registration for the North, West and South stages (Weezevent ticketing) | Last name, first name, email address | Record your registration, organise your welcome, send you practical information about the stage | Steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) | Five years in the Weezevent ticketing platform, or until you ask for deletion |
| Information about our offers and services | Last name, first name, email address | Keep you informed of upcoming CLUSIR ROI events and services | Your consent (Art. 6(1)(a)), given by ticking the box provided at registration | Three years from your latest registration, or until you withdraw consent |
| Event statistics | Aggregated, anonymised data | Review of the edition (attendance, participant profiles) | Legitimate interest (Art. 6(1)(f)) | Anonymised at the end of the Cyber Tour |
| Website audience measurement | Pages viewed, referring site, device and browser type, country | Understand website traffic | Legitimate interest (Art. 6(1)(f)) | Aggregated statistics only, with no data that identifies you |
| Host logs | IP address, date, requested page, browser | Website security | Legitimate interest (Art. 6(1)(f)) | As per GitHub’s policy, which states no retention period |
| Email exchanges | Email address, message content | Reply to your request | Legitimate interest (Art. 6(1)(f)) | As long as needed to handle your request |
| Exercise of your rights | Identity, contact details, subject of the request | Handle your request and be able to prove the reply | Legal obligation (Art. 6(1)(c)) | As long as needed to handle the request and keep proof of it |
The information box is optional: leaving it unticked has no effect on your registration.
Audience measurement
The website uses Plausible Analytics, installed by Kodetis on a server hosted by OVHcloud in Roubaix (France). Traffic goes through the network of Cloudflare, Inc., which protects that server.
Plausible sets no cookies, reads nothing on your device and does not store your IP address. To count unique visitors, it computes a fingerprint from the IP address and browser, mixed with a random value that is renewed and deleted every day: the same visitor cannot be tracked from one day to the next.
Who receives your data?
Only people who need your data can access it:
- members of the CLUSIR ROI organising committee;
- the organisation hosting the stage you registered for, which receives only your first and last name for the welcome list;
- our technical processors, acting on our instructions (listed below).
- Weezevent SAS (14 rue de l’Est, 21000 Dijon, France): ticketing, data hosted by Amazon Web Services in Ireland;
- GitHub, Inc. (San Francisco, United States): website hosting;
- Kodetis (10 chemin Cassenti, 97480 Saint-Joseph, La Réunion): audience measurement, on an OVHcloud server in Roubaix;
- Cloudflare, Inc. (San Francisco, United States): delivery network used by Kodetis.
Your data is neither sold nor rented. Event partners and sponsors have no access to it.
The stages run by Expernet, Epitech and EDN handle their own registrations, under each organiser’s own privacy policy.
Transfers outside the European Union
Registration data stays in the European Union: Weezevent hosts it in Ireland.
Two providers are based in the United States: GitHub, which logs visitors’ IP addresses for the security of the service, and Cloudflare, through which audience measurement traffic passes. These transfers rely on the European Commission adequacy decision of 10 July 2023 (EU-U.S. Data Privacy Framework), to which GitHub and Cloudflare state that they adhere. Both companies also provide for the European Commission’s standard contractual clauses.
If you start the replay video, YouTube (Google) receives your IP address under its own rules. The video does not load until you click.
Security
CLUSIR ROI takes appropriate measures: collection limited to what is needed, access restricted to the organising committee, website served over HTTPS only, anonymised statistics. In the event of a data breach likely to result in a high risk to you, we will inform you without undue delay, as required by Article 34 GDPR.
Your rights
You have the following rights over your data:
- access, rectification and erasure (Articles 15 to 17 GDPR);
- restriction of processing (Article 18);
- portability of the data provided at registration (Article 20);
- objection to processing based on legitimate interest (Article 21);
- withdrawal of consent at any time, without affecting processing already carried out;
- instructions on what happens to your data after your death (Article 85 of the French Data Protection Act).
To exercise them, write to evenement@clusir-roi.org or to the CLUSIR ROI head office (address above). We reply within one month. We only ask for proof of identity if we have reasonable doubts about who you are.
If, after contacting us, you believe your rights have not been respected, you can lodge a complaint with the CNIL, the French data protection authority: cnil.fr/fr/plaintes, or by post at 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.
Cookies
The website sets no cookies. Details are in the cookie policy.
Changes
This policy may change, for example if a new provider starts working on the website. The update date at the top of the page applies.