Legal notice and privacy policy
Last updated: May 2026
Publisher
NIS2SupplierKit is a service published by Léandro Sierra, individual, based in France.
Hosting
The site is hosted on European cloud infrastructure managed by the publisher.
Intellectual property
The content of this site (texts, tools, policy templates, questionnaires) is protected by copyright. Any reproduction or distribution without prior authorisation is prohibited.
Privacy policy (GDPR)
Data collected
NIS2SupplierKit is usable without an account. Without signing in, questionnaire results are computed in the browser and not stored. If you create an account and sign in, your assessments (score, band, supplier name, date) are saved on our servers to give you a history. No personal data is collected during anonymous browsing.
Analytics
If audience measurement is enabled, the site uses GoatCounter, a self-hosted analytics solution on European infrastructure, with no tracking cookies and compliant with GDPR. No audience data is shared with third parties.
Advertising
If contextual advertising is enabled, Google AdSense may place advertising cookies in your browser. You can manage or decline these cookies via the Google ad settings dashboard (adssettings.google.com).
Cookies
Aside from Google AdSense (if enabled), no technical or tracking cookies are placed in your browser by this site.
Data subject rights (GDPR)
Under the General Data Protection Regulation (GDPR — EU 2016/679), you have the right to access, rectify, erase, restrict and object to the processing of your personal data. To exercise these rights, contact: leandrosierra1@gmail.com. You may also lodge a complaint with the relevant supervisory authority.
Data controller
Léandro Sierra — leandrosierra1@gmail.com — France
Compliance disclaimer
Information, tools and templates provided on NIS2SupplierKit are for practical, informational purposes only. They do not constitute legal advice, official NIS2 certification or a regulatory compliance guarantee. Adapt all content to your contractual, regulatory and organisational context. Consult a qualified professional (lawyer, cybersecurity expert, DPO) for any decision involving your liability.
Contact
For any questions about the site, its content or the protection of your personal data, use the contact button below.