Privacy policy.
We handle your data with care, in compliance with the GDPR and the French Data Protection Act (loi Informatique et Libertés). This translation is provided for information only; the French version prevails.
1. Introduction
The purpose of this privacy policy is to inform you of how Inekto collects and processes your personal data when you browse the inekto.fr website or get in touch with us. It applies in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).
We attach particular importance to protecting your privacy and limit the data we collect to what is strictly necessary for our purposes.
2. Data controller
The data controller is:
Inekto SARL, a French limited liability company (société à responsabilité limitée) with share capital of 300 euros, registered with the Paris Trade and Companies Register (RCS) under number 891 119 745, whose registered office is at 229 rue Saint-Honoré, 75001 Paris.
For any question about the protection of your data, you can write to us at: contact@inekto.fr.
3. Data collected
We collect two main categories of data.
Data you give us directly, when you fill in a contact or appointment booking form, or when you write to us. This includes your first and last name, your email address, your telephone number, your company and your role, as well as the content of your message.
Data collected automatically while you browse, through cookies and trackers. This includes your IP address, cookie identifiers, the pages you view, the duration and date of your visit, the type of browser and device you use, and where your visit came from. This data is collected only once you have given your consent, except for trackers that are strictly necessary for the website to function.
We do not collect any sensitive data (ethnic origin, opinions, health, etc.) and do not knowingly target minors.
4. Purposes and legal bases
Your data is processed for the following purposes.
Responding to your requests, arranging the appointments you book and managing the business relationship. The legal basis is the performance of pre-contractual measures taken at your request, and our legitimate interest in handling incoming enquiries.
Measuring the website’s audience and understanding how it is used, through Google Analytics. The legal basis is your consent.
Analysing browsing on the website (session recordings with form input masked, heatmaps) in order to improve it, through Microsoft Clarity. The legal basis is your consent.
Running and measuring our advertising campaigns, through Google Ads, including conversion tracking and retargeting of website visitors. The legal basis is your consent.
Complying with our legal and accounting obligations. The legal basis is compliance with a legal obligation.
5. Cookies and other trackers
On your first visit, a banner lets you accept, refuse or customise cookies. No audience measurement or advertising cookie is set before your consent has been obtained. You can change your choices at any time using the cookie management link on the website.
We use four categories of trackers.
Strictly necessary trackers, essential for the website to function and to remember your consent choices. They do not require your consent.
Audience measurement trackers, set by Google Analytics, which allow us to compile visitor statistics.
Browsing analysis trackers, set by Microsoft Clarity, which allow us to understand how visitors move through the website. Form fields are masked in the recordings: no name, address or message appears in them.
Advertising trackers, set by Google Ads, which allow us to measure the effectiveness of our campaigns and to show you relevant advertising, including outside our website.
| Tracker | Provider | Purpose |
|---|---|---|
| Google Analytics | Google Ireland Limited | Audience measurement and visitor statistics |
| Google Ads | Google Ireland Limited | Ad delivery, conversion tracking and retargeting |
| Microsoft Clarity (cookies _clck, one year; _clsk, one day) | Microsoft Corporation | Session recordings and heatmaps |
Cookies set on your device last no longer than thirteen months. Your consent is kept for a maximum of six months, after which you are asked for it again.
6. Recipients and processors
Your data is intended for the Inekto staff authorised to process it. It may also be disclosed to the following service providers, acting as processors or recipients:
- Google Ireland Limited and Google LLC, for the Google Analytics and Google Ads services.
- Microsoft Corporation, for the Microsoft Clarity service.
- Calendly LLC, for appointment booking.
- Our hosting provider, OVH SAS, for hosting the website and sending the emails generated by the contact form, in France.
- Google Ireland Limited, for Inekto’s email service (Google Workspace), which receives your requests.
We do not sell or rent your data to third parties.
7. Data transfers outside the European Union
Some of our service providers, in particular Google, Microsoft, Calendly, may transfer data to the United States. These transfers are covered by appropriate safeguards within the meaning of the GDPR, in particular the European Commission’s Standard Contractual Clauses and, where applicable, these providers' participation in the EU–US Data Privacy Framework.
8. Retention periods
Data from contact and prospecting forms is kept for a maximum of three years from the last contact to which you did not respond.
Client data is kept for the duration of the contractual relationship, then archived in line with the applicable statutory periods, particularly for accounting purposes.
Audience measurement data is kept for a maximum of twenty-five months.
9. Data security
We implement appropriate technical and organisational measures to protect your data against loss, unauthorised access, disclosure or alteration. Access to data is restricted to authorised persons only.
10. Your rights
In accordance with the applicable regulations, you have the following rights over your data: the right of access, the right to rectification, the right to erasure, the right to restriction of processing, the right to data portability, the right to object, the right to withdraw your consent at any time, and the right to give instructions on what happens to your data after your death.
To exercise these rights, you can write to us at contact@inekto.fr. If there is reasonable doubt about your identity, we may ask you for proof of identity.
If, after contacting us, you consider that your rights have not been respected, you can lodge a complaint with the French data protection authority (CNIL), 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or via its website, www.cnil.fr.
11. Changes to this privacy policy
We reserve the right to amend this policy at any time to reflect legal, regulatory or technical developments. The applicable version is the one in force at the time of your visit, the date of which appears at the top of this document.