Privacy notice

Last updated: 15 November 2026

Who we are

CyberCounsel EU is an independent email newsletter about EU public tenders and grant calls for cybersecurity companies. It is run by Kansu Otman, who is responsible for the data described here.

For any question about your data, write to contact@cybercounseleu.com.

What we collect

• Your email address, when you subscribe.
• The date you subscribed, and whether you opened an email or followed a link in it. Our email provider records this.
• If you buy Pro: your name, company name, billing address and, if you give it, your VAT number. You enter these at checkout. Your card details go straight to Stripe; we never see them.

For the free email we do not ask for your name, company or any other detail.

Why we use it

We use your email address to send you the newsletter you asked for. The legal basis is your consent, which you give when you subscribe. We look at opens and clicks in total to learn which notices are useful.

If you buy Pro, we use your details to provide the subscription and to invoice you. The legal basis is our contract with you, and our legal duty to keep invoices and payment records.

Who handles your data

• Buttondown, our email provider, stores the subscriber list and sends the emails. Buttondown is based in the United States.
• GitHub hosts this website. Like any web host, it can see the IP address of a visitor.
• Cloudflare Web Analytics counts page views and visits to this website. Cloudflare states that it does not track individual visitors.
• Cloudflare also runs the small service behind the sign-up form. It receives your email address and passes it to Buttondown.
• Google Fonts supplies the typefaces on this website, so Google can see the IP address of a visitor.
• Stripe processes payments for Pro and sends invoices and receipts. For customers in Europe this is Stripe Payments Europe, based in Ireland.
• Brevo sends the daily email to Pro members. It receives the member's email address and records whether the email was delivered and opened. Brevo is based in France.

We do not sell your data and we do not share it with advertisers.

Cookies and tracking

This website sets no cookies. We count page views and visits in total with Cloudflare Web Analytics, which works without cookies. We do not use advertising trackers.

If you choose a language in the menu at the top, your browser remembers the choice on your device. It is not sent to us.

How long we keep it

We keep your email address until you unsubscribe. Every free email has an unsubscribe link, and it works in one click. Pro members stop the daily email by cancelling in the customer portal or by writing to us.

We keep invoices and payment records for as long as tax law requires, which in Poland is usually five years from the end of the year of payment.

Your rights

You can ask us for a copy of your data, ask us to correct or delete it, or withdraw your consent at any time. You can also complain to the data protection authority in your country.