This page describes the personal data this website collects, what it is used for, and the rights you have. It is written to be read: no wording here is meant to say less than it appears to.
Data controller
FenuaTech, 12 esplanade Jacques Chirac, 92150 Suresnes — contact@fenuatech.wf. No data protection officer has been appointed: the organisation is not required to have one. Requests are handled directly at that address.
What we collect, and why
| Contact form |
First name, surname, email address, subject and message. Purpose: to answer your enquiry. Legal basis: your consent, given through the tick box on the form. |
|---|---|
| Quote simulator |
First name, surname, email address, telephone (optional) and your answers
to the questionnaire: profile, need, current situation, scope, ongoing
support, content readiness and budget. Purpose: to prepare a costed proposal suited to your project. Legal basis: your consent, and pre-contractual steps taken at your request. |
| Client area |
Billing details, contractual documents, exchanges and activity records,
email address and password fingerprint. Purpose: to perform the contract and keep accounting records. Legal basis: performance of the contract, and our legal accounting obligations. |
| Marketing communications |
Email address, if and only if you have expressly agreed through a
dedicated tick box, separate from the one allowing us to reply to your
message. Legal basis: your consent, which you may withdraw at any time. |
| Site security |
Attempt counters and irreversible fingerprints of IP addresses, linked to
sign-ins and document downloads. Purpose: to prevent brute-force sign-in attempts and abuse of the forms. Legal basis: our legitimate interest in protecting the service and our clients' accounts. |
Nothing is collected without your knowledge: this site carries no advertising tracker, no third-party analytics tool, and no social network button loaded from an external server. The fonts and libraries it uses are hosted alongside the site.
How long data is kept
| Contact messages | 3 years from the last exchange, then deletion |
|---|---|
| Quote requests | 3 years from the request if it does not lead to a contract |
| Client records | for the whole duration of the contract, then 10 years for accounting records (article L123-22 of the French Commercial Code) |
| Security logs | 12 months for anti-abuse counters and IP address fingerprints |
Files placed in the client area vault are encrypted and removed from the server as soon as they have been downloaded once.
Who has access
Your data is accessible to FenuaTech alone. It is never sold, rented or passed on for commercial purposes. Two technical providers host or carry it, with no other use:
- OVH SAS — hosting of the website and database, in France (2 rue Kellermann, 59100 Roubaix, France).
- The mail service attached to the domain, to deliver email.
No data is transferred outside the European Union.
Cookies
This site sets no advertising or analytics cookie. The only ones used are:
- a session cookie, created only when you sign in to the client area or the administration. It is strictly necessary for the service to work and expires when you sign out;
- a language preference, stored in your browser if you switch language. It never leaves your device.
These uses are exempt from prior consent (article 82 of the French Data Protection Act). No banner is therefore imposed on you: there is nothing to accept.
Your rights
You have the right to access, rectify, erase, restrict, object and port your data, as well as the right to withdraw your consent at any time — withdrawal does not affect what was done beforehand.
To exercise them, write to contact@fenuatech.wf, or by post to the registered office shown in the legal notice. You will receive an answer within one month. You may be asked to prove your identity if there is reasonable doubt.
If the answer does not satisfy you, you may refer the matter to the French data protection authority: cnil.fr.
Security
Exchanges with this site are encrypted (HTTPS). Passwords are never stored in plain text, access to the administration and the client area is protected by two-factor authentication, and contractual documents are served from a closed directory, never from a guessable address.
Changes
This policy may change along with the site. The date of the last update appears at the top of the page. Where a change affects your rights, the people concerned are informed by email.