Privacy policy

SecurityNews respects your privacy. This policy explains what personal data is processed when you visit https://securitynews.ms, and how you stay in control. It is written for the EU General Data Protection Regulation (GDPR / AVG). Cookies and browser storage are explained in the cookie policy.

Who is responsible

The controller for the processing described here is SecurityNews (Farid Kalaidji). You can reach us at the address on our contact page.

What this website does not do

• There are no user accounts, no newsletter sign-up and no comments, so no profile is kept about you. The only form is the contact form.
• The website shows no advertising and does not sell, rent or share personal data.
• Analytics tools (Google Analytics and Microsoft Clarity) are only loaded after your consent, with their advertising features switched off.
• Fonts are served from this website itself, not from Google Fonts or another font service.

What we process and why

Visiting the website

Data: IP address, browser and device information, the page requested and the time of the request.
Why: to deliver the pages and protect the website against attacks and abuse.
Who: our hosting provider Cloudflare, as processor.
Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in a secure, working website.
Retention: Cloudflare keeps these technical logs for a limited period under its own retention rules. We do not keep our own visitor logs.

Visitor statistics without cookies

If Cloudflare Web Analytics is switched on, it counts page views and reports which pages are read, from which country and on which type of device. It does this without cookies, without local storage and without identifying you, and it does not follow you across other websites.
Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in knowing which pages are useful.
Retention: aggregated reports only, under Cloudflare’s retention rules.

Statistics and usage insights (only with consent)

Data: pages visited, how you got to the website, approximate location (country/city), device and browser type, and with Microsoft Clarity also clicks, scrolling and mouse movement on pages. Text typed in forms is masked and not recorded.
Why: to understand which pages are useful and improve the website.
Who: Google Ireland Limited (Google Analytics 4) and Microsoft Corporation (Microsoft Clarity).
Legal basis: your consent (Art. 6(1)(a) GDPR), given in the cookie banner. You can withdraw it at any time via Cookie settings at the bottom of every page or on the cookie policy.
Retention: Google Analytics keeps event data for 14 months. Microsoft Clarity keeps session replays for 30 days and aggregated reports for up to 13 months.

Search

The search box runs entirely in your browser, using an index downloaded from this website. What you type is not sent to us or to anyone else.

Contact form

Data: your name, email address, subject, the page you mention (optional) and your message, plus a security check by Cloudflare Turnstile, which processes technical data such as your IP address and browser characteristics.
Why: to answer your correction, source suggestion or question, and to keep the form free of spam and abuse.
Who: the form is processed by a Cloudflare Worker and delivered to our mailbox by email through Mailgun (EU region). Turnstile is provided by Cloudflare and loads on the contact page only. Nothing is stored in a database.
Legal basis: your consent (Art. 6(1)(a) GDPR), given with the checkbox in the form, for using your details to answer you; legitimate interest (Art. 6(1)(f) GDPR) for the spam check.
Retention: messages are deleted when they are no longer needed, at the latest two years after the conversation ends. Mailgun keeps delivery logs for a limited period under its own retention rules.

Emailing us

Data: your email address, name if you give it, and the content of your message.
Why: to answer your question, correction or source suggestion.
Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in answering messages you send us.
Retention: messages are deleted when they are no longer needed, at the latest two years after the conversation ends.

Links to other websites

Almost every item on SecurityNews links to Microsoft’s own publication (Microsoft Learn, the Microsoft Security Blog, Tech Community, Azure Updates, the Security Update Guide or GitHub). These are ordinary links: nothing from those websites loads until you click, after which their own privacy policies apply.

Who receives data

Only Cloudflare (hosting, the contact form function and Turnstile), Mailgun (delivering contact-form messages, EU region) and, only with your consent, Google and Microsoft process data on our behalf, under data processing agreements. We do not share data with anyone else unless the law requires it.

Transfers outside the EU

Cloudflare, Mailgun (Sinch), Google and Microsoft may process data in the United States. These companies participate in the EU-U.S. Data Privacy Framework, and transfers are additionally covered by the European Commission’s Standard Contractual Clauses.

Your rights

You have the right to:

• access the personal data we hold about you;
• have it corrected or deleted;
• restrict or object to its processing;
• receive it in a portable format (data portability).

Send your request to the address on our contact page. We respond within one month. If you are not satisfied with how we handle your data, you can file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

Security

The website is static and served over HTTPS only. It has no logins or databases; the contact form sends your message straight to our mailbox and stores nothing on the website. Access to the mailbox and service accounts is protected with multi-factor authentication. Found a security issue? See our responsible disclosure policy.

Children

This website is aimed at security professionals and is not intended for children under 16.

Changes to this policy

We update this policy when the website or the services it uses change. The date at the top shows the latest version.