Cybermatch (SyncSight SASU) recruits cybersecurity experts for its clients. This business is built on trust: here, without jargon, is what data we process, why, for how long, with whom, and how to exercise your rights.

SyncSight SASU, trading as Cybermatch, SIREN 980 598 262, represented by its president Guillaume Séraphine (full legal information in our legal notice and on the French government’s Annuaire des Entreprises. Contact for any question about personal data: contact@cybermatch.jobs.

We process the data you send us (CV, cover letter, contact details, salary expectations, availability, exchanges) and the data we collect as part of a direct approach from public professional sources (LinkedIn, company websites, conferences, publications). Purposes: presenting you with opportunities that match your profile, assessing your application, presenting it to a client with your prior consent, and keeping a record of our exchanges. Legal basis: our legitimate interest in carrying out a recruitment activity, then your consent for any presentation to a client and for keeping your profile beyond a given search.

We process your business contact details, the content of your requests and the history of our assignments. Purposes: responding to your requests, performing the contract, commercial follow-up and invoicing. Legal basis: performance of the contract or pre-contractual measures, legitimate interest for commercial follow-up, legal obligations for invoicing.

The contact form collects your first name, last name, company, email address and message, solely to reply to you. Audience measurement (Google Analytics) and campaign tracking (Google Ads) are only activated after your consent via the cookie banner; without consent, no cookies other than technical cookies are set.

Cybermatch operates as a collective of independent recruiters specialised in cybersecurity and relies on a committee of active experts (CISOs, cybersecurity directors, technical practitioners). In an executive search assignment, your background may be reviewed by a member of this committee, bound by contractual confidentiality and with access only to the information strictly necessary for the assessment. You are informed before the assessment. For the most sensitive roles, reference checks or due diligence are only carried out with your written consent.

• Applications and profiles: two years from the last contact, unless you request earlier deletion or agree to a longer retention period (CNIL recommendation for recruitment files)
• Client and prospect data: duration of the relationship, then three years from the last exchange for prospecting
• Accounting and contractual documents: ten years (legal obligation)
• Contact form messages: one year
• Audience measurement cookies: thirteen months maximum; your consent choice is kept for six months

Your data is accessible to the Cybermatch collective recruiters working on your file, to expert committee members for assessments, and to our clients only after your consent to a named presentation. Our technical processors are Automattic (WordPress.com hosting, United States), Google (Workspace, Analytics, Ads, United States) and Leonar (applicant tracking software and CV database, hosted in the European Union); these transfers outside the European Union are based on the European Commission’s standard contractual clauses and, for certified companies, on the Data Privacy Framework. We never sell or rent any data.

You have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to withdraw your consent at any time and to set instructions for what happens to your data after your death. To exercise these rights, write to contact@cybermatch.jobs specifying your request; we reply within one month. You can also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).

The list of cookies used by the website, their purpose and their duration are detailed below and can be changed at any time using the cookie settings button on every page.

Data is hosted by a certified provider and transmitted in encrypted form (HTTPS). Access to application files is limited to authorised people, individually authenticated. In the event of a data breach likely to pose a risk to your rights, we will inform you and notify the CNIL within the legal deadlines.

This policy may change with our practices or regulations; the version in force is the one published on this page. See also our legal notice.

Last updated: 25 September 2026