Privacy policy · Azetria

Data controller

Azetria SAS, 12 rue de la Fontaine au Roi, 75011 Paris, is the controller for the processing described below. For any question about your data: [email protected].

Data collected and purposes

Contact form and quote configurator: Name, email, phone, company, budget, project description and any attachment. Purpose: answering your enquiry and preparing a proposal. Legal basis: pre-contractual steps taken at your request.
Newsletter: Email address and language. Purpose: sending the monthly newsletter. Legal basis: your consent, revocable at any time.
Job applications: Identity, contact details, CV and professional links. Purpose: reviewing your application. Legal basis: pre-contractual steps.
Analytics: Pages viewed, traffic source, device type. Purpose: understanding how the site is used. Legal basis: your consent, collected via the cookie banner.
Technical logs: Hashed IP address, user agent, timestamp. Purpose: security and abuse detection. Legal basis: legitimate interest.

Retention periods

Enquiries with no follow-up: 3 years from last contact.
Clients: for the duration of the contract, then 5 years for accounting obligations.
Job applications: 24 months with your consent, otherwise deleted within 6 months.
Newsletter: until you unsubscribe, then deleted within 30 days.
Technical logs: 12 months.

Recipients and processors

Your data is accessible only to the Azetria staff who need it. We rely on the following processors: hosting provider (European Union), transactional email service, newsletter platform and analytics tool. Each is bound by a contract compliant with Article 28 GDPR. No data is sold or shared for advertising purposes.

Transfers outside the European Union

Some analytics tools may involve a transfer to the United States, governed by the European Commission's standard contractual clauses and the EU–US Data Privacy Framework. These tools are only activated after your consent.

Your rights

You have the right to access, rectify, erase, restrict, object and port your data, as well as to set directives on what happens to it after your death. To exercise them: [email protected]. We respond within one month. In case of disagreement, you may lodge a complaint with the French data protection authority (CNIL, www.cnil.fr).

Security

TLS encryption in transit, encryption of sensitive data at rest, restricted and logged access, encrypted backups, annual security review. IP addresses are stored in hashed form. In the event of a data breach presenting a risk, we notify the CNIL within 72 hours and inform the individuals concerned.