Data protection
Privacy policy
What personal data we collect on this website, why we collect it and how you can exercise your rights under the GDPR.
Who is responsible for your data
NEPTUNEGROUP, a French simplified joint-stock company (SAS) registered under number 935 080 218, with its registered office at 1 avenue du Général de Gaulle, 68300 Saint-Louis, France, is the controller of the personal data collected on this website. You can reach us through the contact form on this website.
What we collect
We only collect the data you choose to send us through the contact form:
- your first name and last name;
- your work email address;
- your company;
- the subject you select and your message.
When you visit the website, our hosting provider also processes technical data, such as your IP address and browser details, to deliver the pages and keep the service secure.
If you accept audience measurement, Google Analytics also collects browsing data (see Cookies).
Why we use it
We use the data from the contact form to answer your request and, if you wish, to discuss how we can help you. The legal basis is the steps you ask us to take before a possible contract and our legitimate interest in answering the people who contact us. Technical data is processed for the security and proper operation of the website, based on our legitimate interest.
Audience measurement helps us improve the website. Its legal basis is your consent, which you can withdraw at any time.
Who receives it
Your data is only read by the NEPTUNEGROUP team members who handle your request. We do not sell it or share it for marketing purposes. Our service providers process it on our behalf and under our instructions:
- Netlify, Inc. (United States) hosts the website and receives the contact form submissions.
- Google Ireland Limited (Ireland) provides Google Analytics, only if you accept audience measurement. Google may transfer data to the United States; these transfers are covered by the EU-U.S. Data Privacy Framework, under which Google LLC is certified, and by Google's data processing terms.
Netlify is based in the United States. Transfers of personal data to Netlify are covered by its data processing agreement, which includes the safeguards required by the GDPR.
How long we keep it
We keep contact form data for as long as needed to handle your request, and for no more than three years after our last exchange with you. Technical data is kept by our hosting provider for a limited time, for security purposes.
Google Analytics data is kept for 14 months.
Cookies
With your consent, we use Google Analytics 4 to measure the audience of this website: pages viewed, approximate location (country, city), device and browser type, and how you arrived on the website. Google Analytics sets the cookies _ga and _ga_ELMFNJB5RV, kept for 13 months at most. Nothing is set and no data is sent to Google before you accept. You can change your choice at any time with the "Cookie settings" link at the bottom of every page; if you withdraw your consent, these cookies are deleted. Your choice itself is stored in your browser for 6 months, after which we ask again.
Your rights
Under the GDPR, you can ask to access your data, correct it, delete it, restrict its use, object to its use or receive it in a portable format. To exercise these rights, contact us through the contact form. We will answer within one month.
If you believe your rights are not respected, you can lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).
Changes to this policy
We may update this policy, for example when we add a new service. The date at the top of the page shows the latest version.