Privacy Policy
Privacy Policy
Last updated: September 2026.
Who controls your data
This website is published by the IRIT Cybersecurity Team, part of IRIT (Institut de Recherche en Informatique de Toulouse), a joint research unit of CNRS, Université Toulouse III – Paul Sabatier, Université Toulouse Jean Jaurès, Université Toulouse Capitole, INP Toulouse and INSA Toulouse. For questions about this policy or your data, contact us at contact-cybersecurite@irit.fr or by post at IRIT, 118 route de Narbonne, 31062 Toulouse Cedex 9, France.
What data we collect
This site does not include any public sign-up, comment or contact form — contacting the team (general enquiries or job applications) happens by email, outside of this website, and is governed by the recipient's own mailbox policies rather than this site.
On the site itself, we collect:
- Strictly necessary data: a session cookie is set only when a team member signs in to the content admin (
irit_token) and a local preference to remember your cookie choice. These are never used to track visitors and are not shared with third parties. - Optional analytics data (only with your consent): anonymized page-view statistics, used solely to understand which content is useful and improve the site. No analytics run before you consent, and you can withdraw consent at any time from the "Cookie preferences" link in the footer. See the Cookies section below for the current list.
Legal basis and purpose
- Necessary cookies are used under our legitimate interest in operating the site securely (Art. 6(1)(f) GDPR).
- Optional analytics cookies are used only with your freely given, specific consent (Art. 6(1)(a) GDPR), which you can withdraw at any time without affecting the lawfulness of processing before withdrawal.
How long we keep data
Your cookie consent choice is kept in your browser until you change it or clear your browser data. Analytics data, when enabled, is retained according to the analytics provider's default retention period, never used to re-identify individual visitors, and never sold or shared with third parties for advertising purposes.
Cookies
| Purpose | Cookie / storage | Duration | Consent required |
|---|---|---|---|
| Admin session | irit_token | Session / until logout | No — strictly necessary, admins only |
| Cookie preference | cookie-consent (local storage) | Until cleared | No — strictly necessary |
| Audience analytics | analytics cookies (only if enabled by the team and accepted by you) | Provider default | Yes |
Data Protection Officer
As a joint research unit, IRIT operates under the data protection officers (DPO / Délégué à la Protection des Données) of its supervising institutions. For processing carried out on this site, the designated contact is the DPO of Université Toulouse III – Paul Sabatier: dpo@univ-tlse3.fr, 118 route de Narbonne, 31062 Toulouse Cedex 9, France. You can also reach IRIT's own data protection contact at rgpd@irit.fr.
Your rights
Under the GDPR, you have the right to access, rectify, erase or restrict the processing of your personal data, to object to processing, and to data portability. You can exercise these rights by writing to contact-cybersecurite@irit.fr or to the DPO above. If you believe your rights are not respected, you may lodge a complaint with the French data protection authority, CNIL.
Hosting and data location
This site is self-hosted by IRIT, at IRIT, 118 route de Narbonne, 31062 Toulouse Cedex 9, France.
Changes to this policy
We may update this policy as the site evolves. The "last updated" date above reflects the most recent revision.