Legal Mentions
Privacy Policy
Last updated: May 19, 2025
Data Controller
SAS CERTEAFILES, 189 Rue de Gourette, 64121 Serres-Castet, France
Data Protection Officer (DPO): dpo@certeafiles.io
Data Collected & Purposes
| Data collected | Purpose | Legal basis | Retention period |
|---|---|---|---|
| Browsing data (IP, pages visited) | Audience measurement and optimization via Google Analytics, IP anonymized | Consent (Art. 6.1 a GDPR) | 24 months |
| Contact form details (name, email…) | Responding to information requests | Performance of a contract (Art. 6.1 b GDPR) | 3 years after last interaction |
| Email address (alerts/newsletters) | Sending alerts and commercial communications | Consent (Art. 6.1 a GDPR) | Until unsubscribe |
Data recipients
Certeafiles internal team; Google LLC (USA) – under EU standard contractual clauses
Transfers outside the EU
Data related to Google Analytics is transferred to the United States with appropriate safeguards (standard contractual clauses).
Security
Implementation of technical (HTTPS, database encryption, backups) and organizational (access control) measures to protect your data.
Your rights
- Right of access, rectification, erasure, and restriction of processing
- Right to object and withdraw consent
- Right to data portability
To exercise these rights: contact@certeafiles.io or postal mail to the registered office
Recourse
In case of unresolved dispute, you may file a complaint with the CNIL (www.cnil.fr).