Privacy notice.

Who is responsible for your data

DIGINOV is the data controller for the personal data described in this notice. You can contact us about privacy or exercise your rights at:

Information you send us

When you use our contact form, we collect your name, email address and message. These fields are required so that we can review and respond to your inquiry. You may also provide your company name and telephone number, but these fields are optional.

If you contact us directly by email or telephone, we process the contact details and information you choose to provide.

We use this information to review and respond to your inquiry and to manage any related exchanges. The legal basis is our legitimate interest in receiving and handling business inquiries.

Form submissions are delivered to our Google Workspace mailbox. The website does not maintain a separate contact database.

Website operation and security

Our hosting and security infrastructure may process technical connection data, such as your IP address, the date and time of a request, the requested page and browser information. This processing is necessary to deliver the website, maintain its security and prevent abuse. It is based on our legitimate interest in operating a secure and reliable website.

The contact form uses Cloudflare Turnstile to distinguish legitimate visitors from automated submissions. Cloudflare receives the technical signals needed to perform this security check. This protection is strictly necessary and does not depend on your analytics choice.

Audience measurement and cookies

We use Google Analytics 4 only if you give your consent. Google Analytics is not loaded and analytics cookies are not set before you accept.

If you accept analytics, Google may process online identifiers, device and browser information, approximate location information and details of how you interact with the website. We use this information to understand how the website is used and improve its content and performance. Advertising personalization and Google signals are disabled in our implementation.

A strictly necessary local record remembers your choice for six months. Analytics identifiers are configured to expire after thirteen months. Refusing analytics does not affect your access to the website.

Who receives your data

Personal data is accessible only to people at diginov who need it for the purposes described above and to service providers required to operate the website:

• OVHcloud provides website hosting and form delivery.
• Cloudflare provides network delivery and security.
• Google Workspace provides business email.
• Google Analytics provides audience measurement after consent.

We do not sell personal data.

International transfers

Cloudflare and Google may process personal data in the United States and other countries outside the European Economic Area. Transfers to participating organizations in the United States may rely on the EU-US Data Privacy Framework. Where no adequacy decision applies, transfers are protected by safeguards such as the European Commission's Standard Contractual Clauses. Further information is available in Cloudflare's Data Processing Addendum and Google's data transfer frameworks.

How long we keep your data

If an inquiry does not lead to a business relationship, we keep the related information for no longer than three years after our last meaningful contact.

If a business relationship is established, relevant data is kept for the duration of that relationship and then for any additional period required to meet contractual, accounting, tax or legal obligations, or to establish, exercise or defend legal claims.

Google Analytics user-level and event-level data is retained in accordance with the retention period configured for the property, which we limit to what is necessary to compare website usage over time. Aggregated reports may remain available for longer.

Technical logs are retained by our providers for the period reasonably necessary to operate and secure their services, investigate incidents, prevent abuse and comply with legal obligations. Retention periods vary according to the type of log and the applicable security or legal requirement.

Your rights

Depending on the processing concerned, you may ask us to:

• access your personal data;
• correct inaccurate or incomplete data;
• erase your data;
• restrict its processing;
• object to processing based on our legitimate interests;
• receive data you provided in a portable format, where applicable;
• withdraw your consent at any time.

Withdrawing consent does not affect processing carried out before the withdrawal. To exercise your rights, contact hello@diginov.io. We may ask for information reasonably necessary to verify your identity.

If you believe that your rights have not been respected, you may lodge a complaint with the French data protection authority, the Commission nationale de l'informatique et des libertés.

Changes to this notice

We may update this notice when our practices or legal obligations change. The date shown at the top indicates the latest revision.