Privacy policy

Data controller

The controller for data collected on allaux.fr is Emre Ucak, independent e-commerce developer.

• Contact: contact@allaux.fr
• Address: 110 Grand Rue, 67130 Schirmeck, France

What data is collected, and where it comes from

Personal data processed comes from three sources:

• The qualification form: first name, surname, email, phone, company name and project description, provided voluntarily when requesting a quote.
• The client area: login details, billing information and communications relating to service follow-up, for clients with dedicated access.
• Server logs: IP address, date and time of connection, pages viewed, generated automatically by the hosting server during browsing.

Why this data is collected, and on what legal basis

• Responding to a quote request: processing necessary for pre-contractual steps taken at the request of the person concerned.
• Carrying out and following up a service: processing necessary for performance of the contract with the client.
• Producing accounting and tax records: processing necessary to comply with a legal obligation.
• Ensuring the security and proper operation of the site: legitimate interest in preventing fraudulent use and keeping the service running.
• Measuring site audience, once consent is given: processing based on consent, detailed in the cookie policy.

How long this data is kept

Retention periods vary by purpose:

• Prospects (quote request with no resulting contract): 3 years from the last contact.
• Clients: for the duration of the contractual relationship, then archived only for as long as needed to meet legal obligations.
• Accounting documents and invoices: 10 years, under a legal retention obligation. This period applies even if the person concerned asks for their data to be deleted: the right to erasure cannot override a legal retention obligation, but access to the data is restricted to what's strictly necessary during that period.
• Connection logs: 12 months, in line with security recommendations.

Who has access to this data

Data is never sold or passed on to third parties for commercial purposes. It may be shared with the following service providers, strictly limited to what's needed for their role:

• o2switch (hosting the site and its data), Chemin des Pardiaux, 63000 Clermont-Ferrand, France.
• An email delivery service, for transactional communication and, where applicable, sending information — o2switch, déjà cité ci-dessus : les e-mails transactionnels sont acheminés par son serveur SMTP, aucun service tiers d’envoi n’est utilisé.

These providers act as data processors and are contractually required to comply with applicable data protection regulations.

Data transfers outside the European Union

Some of the processors mentioned above may be based outside the European Union, or may transfer data as part of their technical infrastructure. À ce jour, l’hébergement du site et l’acheminement des e-mails sont assurés en France par o2switch : ces traitements n’impliquent aucun transfert hors de l’Union européenne. Les éventuels transferts liés aux outils de mesure d’audience sont détaillés plus bas, dans la section « Outils de mesure d’audience actifs », qui est établie automatiquement à partir de la configuration du site et reflète donc l’état réel à l’instant où vous lisez cette page. In the absence of such a transfer, data remains hosted within the European Union.

Your rights

Under the General Data Protection Regulation (GDPR) and French data protection law, you have the following rights over your personal data:

• right of access;
• right to rectification;
• right to erasure, within the limits noted above for documents subject to a legal retention obligation;
• right to restriction of processing;
• right to data portability;
• right to object, notably for processing based on legitimate interest;
• right to set guidelines for what happens to your data after your death.

To exercise any of these rights, simply write to contact@allaux.fr stating your request. A reply is provided within one month at most, which may be extended by two months for complex requests.

Complaints to the CNIL

If you believe your rights are not being respected, you can lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL), the French data protection authority:

CNIL — 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.