Privacy Policy

Last updated: January 2025

EYACOM ("EYACOM", "we", "us") operates the SOC4ALL managed security service and this website. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website or engage with our services.

⚠️ This document is a working template. It must be reviewed by qualified legal counsel and updated to reflect your actual data practices before publication.

1. Data Controller

The data controller for personal data collected through this website is:

EYACOM

Tanit Business Center, Rue de la Feuille d'Érable, Les Berges du Lac II, Tunis, Tunisie

Email: contact@soc4all.com

2. Data We Collect

We may collect the following categories of personal data:

  • Contact and identification data: Name, company name, job title, email address, phone number — provided when you fill in contact forms or request a demo.
  • Usage data: Pages visited, time spent on the site, clicks, referral source — collected via analytics tools (see Section 7).
  • Technical data: IP address, browser type, device type, operating system — collected automatically when you visit the site.
  • Communication data: Messages, emails, and other communications you send us.

3. Legal Basis and Purpose of Processing

Legitimate Interest (Art. 6(1)(f) GDPR)
Analysing site usage to improve our service; responding to contact requests; marketing communications to business contacts who have shown genuine interest.
Consent (Art. 6(1)(a) GDPR)
Analytics and non-essential cookies; marketing emails (where opt-in is required).
Contractual necessity (Art. 6(1)(b) GDPR)
Processing contact and service enquiries that may lead to or are part of a contractual relationship.

4. Data Retention

We retain personal data only as long as necessary for the purposes described above, or as required by applicable law. Contact enquiry data is typically retained for [PLACEHOLDER: e.g., 3 years] unless a commercial relationship develops. Analytics data is retained in accordance with the settings of the analytics platform used.

5. Data Sharing and Third Parties

We do not sell personal data to third parties. We may share data with:

  • Service providers acting as data processors on our behalf (e.g., CRM platforms, email services, hosting providers) — under data processing agreements.
  • Legal or regulatory authorities where required by law.
  • [PLACEHOLDER: List any specific third-party platforms used, e.g., HubSpot, Google Analytics, etc.]

6. International Data Transfers

Data may be processed in Tunisia and in countries where our service providers operate. Where data is transferred outside the European Economic Area (EEA), we apply appropriate safeguards, including Standard Contractual Clauses (SCCs) as approved by the European Commission.

7. Cookies and Tracking

This site uses cookies and similar technologies. These include:

  • Essential cookies: Required for site functionality. Cannot be disabled.
  • Analytics cookies: Used to understand site usage patterns (e.g., [PLACEHOLDER: Google Analytics, Plausible, Matomo]). Require consent.
  • Marketing cookies: Used for advertising and retargeting (if applicable). Require consent.

You can manage your cookie preferences via the consent banner displayed on your first visit, or by clearing cookies in your browser settings.

8. Your Rights

Under applicable data protection law (including GDPR), you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request erasure ("right to be forgotten") where applicable
  • Object to or restrict certain processing activities
  • Data portability (where technically feasible)
  • Withdraw consent at any time (without affecting prior processing)
  • Lodge a complaint with a supervisory authority

To exercise these rights, contact us at: contact@soc4all.com

9. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

10. Children's Data

Our services are directed to business professionals. We do not knowingly collect personal data from individuals under the age of 18.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will indicate the date of the most recent update at the top of this page. Significant changes will be communicated via a notice on the website.

12. Contact

For any data protection queries or requests, please contact us at:

EYACOM — Data Protection

Tanit Business Center, Rue de la Feuille d'Érable, Les Berges du Lac II, Tunis, Tunisie

Email: contact@soc4all.com