Privacy policy.

1. Introduction

The purpose of this privacy policy is to inform you of how Inekto collects and processes your personal data when you browse the inekto.fr website or get in touch with us. It applies in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).

We attach particular importance to protecting your privacy and limit the data we collect to what is strictly necessary for our purposes.

2. Data controller

The data controller is:

Inekto SARL, a French limited liability company (société à responsabilité limitée) with share capital of 300 euros, registered with the Paris Trade and Companies Register (RCS) under number 891 119 745, whose registered office is at 229 rue Saint-Honoré, 75001 Paris.

For any question about the protection of your data, you can write to us at: contact@inekto.fr.

3. Data collected

We collect three main categories of data.

Data you give us directly, when you fill in a contact or appointment booking form, or when you write to us. This includes your first and last name, your email address, your telephone number, your company and your role, as well as the content of your message.

Data collected automatically while you browse, through cookies and trackers. This includes your IP address, cookie identifiers, the pages you view, the duration and date of your visit, the type of browser and device you use, and where your visit came from. This data is collected only once you have given your consent, except for trackers that are strictly necessary for the website to function and for the reading measurement described below.

On the pages presenting our offers, the website also measures, without cookies, how they are read: the parts of the page displayed, starting to fill in a form and the names of fields rejected on validation (never their content), clicks on the phone number, email address or links within the page, and display time. Each item is a request sent to our server, which our hosting provider’s access log records with your IP address, browser type and time, as for any page viewed.

Business data about the people we contact by email to offer them our services: last name, first name, job title, company and business email address. It comes from public sources, in particular the French government’s company directory (INSEE, national business register), and from business data enrichment tools, Dropcontact and Apollo.io.

We do not collect any sensitive data (ethnic origin, opinions, health, etc.) and do not knowingly target minors.

4. Purposes and legal bases

Your data is processed for the following purposes.

Responding to your requests, arranging the appointments you book and managing the business relationship. The legal basis is the performance of pre-contractual measures taken at your request, and our legitimate interest in handling incoming enquiries.

Offering you, by email, services related to your professional role. This purpose is based on our legitimate interest in making our services known to businesses. You may object at any time, without giving a reason, by replying to one of our messages or by writing to commercial@inekto.fr: we will then stop writing to you.

Measuring the website’s audience and understanding how it is used, through Google Analytics. The legal basis is your consent.

Producing statistics on how our pages are read, from our hosting provider’s access log and the cookieless reading measurement described above, in order to improve them. The legal basis is our legitimate interest in understanding how our website is used; this is audience measurement of the kind the CNIL exempts from consent. The data is used only to produce statistics, is not passed on to any third party other than our hosting provider, and cannot be used to follow your browsing on other websites. You can object to it at any time (section 5).

Analysing browsing on the website (session recordings with form input masked, heatmaps) in order to improve it, through Microsoft Clarity. The legal basis is your consent.

Running and measuring our advertising campaigns, through Google Ads and LinkedIn Ads and ChatGPT Ads, including conversion tracking and retargeting of website visitors. The legal basis is your consent.

Complying with our legal and accounting obligations. The legal basis is compliance with a legal obligation.

5. Cookies and other trackers

On your first visit, a banner lets you accept or refuse cookies. No audience measurement or advertising cookie is set before your consent has been obtained. You can change your choices at any time using the cookie management link on the website.

We use four categories of trackers.

Strictly necessary trackers, essential for the website to function and to remember your consent choices. They do not require your consent.

Audience measurement trackers, set by Google Analytics, which allow us to compile visitor statistics.

Browsing analysis trackers, set by Microsoft Clarity, which allow us to understand how visitors move through the website. Form fields are masked in the recordings: no name, address or message appears in them.

Advertising trackers, set by Google Ads and by the LinkedIn Insight Tag (LinkedIn Ads) and by the ChatGPT Ads pixel (OpenAI), which allow us to measure the effectiveness of our campaigns and to show you relevant advertising, including outside our website.

Cookies set on your device last no longer than thirteen months. Your consent is kept for a maximum of six months, after which you are asked for it again.

The reading measurement on our pages sets no cookie and writes nothing to your browser, except, if you ask for it, a record of your objection. It does not run if your browser sends the Global Privacy Control signal. You can also object to it in this browser using the button below.

6. Recipients and processors

Your data is intended for the Inekto staff authorised to process it. It may also be disclosed to the following service providers, acting as processors or recipients:

• ▪Google Ireland Limited and Google LLC, for the Google Analytics and Google Ads services.
• ▪Microsoft Corporation, for the Microsoft Clarity service.
• ▪OpenAI, OpCo, LLC, for conversion tracking of ChatGPT Ads campaigns.
• ▪LinkedIn Ireland Unlimited Company and LinkedIn Corporation, for the LinkedIn Ads service.
• ▪Calendly LLC, for appointment booking.
• ▪Dropcontact, in France, and Apollo.io, in the United States, to find and verify the business email addresses of the people we contact.
• ▪Our hosting provider, OVH SAS, for hosting the website, keeping its access log and sending the emails generated by the contact form, in France.
• ▪Google Ireland Limited, for Inekto’s email service (Google Workspace), which receives your requests.

We do not sell or rent your data to third parties.

7. Data transfers outside the European Union

Some of our service providers, in particular Google, Microsoft, LinkedIn, OpenAI, Calendly, Apollo.io, may transfer data to the United States. These transfers are covered by appropriate safeguards within the meaning of the GDPR, in particular the European Commission’s Standard Contractual Clauses and, where applicable, these providers’ participation in the EU–US Data Privacy Framework.

8. Retention periods

Data from contact and prospecting forms is kept for a maximum of three years from the last contact to which you did not respond.

Client data is kept for the duration of the contractual relationship, then archived in line with the applicable statutory periods, particularly for accounting purposes.

Audience measurement data, including the server access log and the reading measurement, is kept for a maximum of twenty-five months.

9. Data security

We implement appropriate technical and organisational measures to protect your data against loss, unauthorised access, disclosure or alteration. Access to data is restricted to authorised persons only.

10. Your rights

In accordance with the applicable regulations, you have the following rights over your data: the right of access, the right to rectification, the right to erasure, the right to restriction of processing, the right to data portability, the right to object, the right to withdraw your consent at any time, and the right to give instructions on what happens to your data after your death.

To exercise these rights, you can write to us at contact@inekto.fr. If there is reasonable doubt about your identity, we may ask you for proof of identity.

If, after contacting us, you consider that your rights have not been respected, you can lodge a complaint with the French data protection authority (CNIL), 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or via its website, www.cnil.fr.

11. Changes to this privacy policy

We reserve the right to amend this policy at any time to reflect legal, regulatory or technical developments. The applicable version is the one in force at the time of your visit, the date of which appears at the top of this document.