Privacy policy. What happens to your data.

Data controller

Loïc Legrand, sole proprietor (EI), who operates under the trade name DigitalCX.

9 bis passage Saint-Ambroise, 75011 Paris, France
contact@digitalcx.fr

No data protection officer has been appointed, as this is not required for this activity. For any questions, write to contact@digitalcx.fr.

Data processed, purposes, and legal bases

Appointment request (Contact page)

• Data: first name, last name, email address, phone number with country code, team size, revenue range, main challenge, AI maturity, timeline, planned budget, project description, preferred time slot, and the date and time of the request.
• Purposes: to respond to your request; to confirm the time slot and send you the video call invitation; to prepare for the call. The phone number is used only to reach you if there is a technical issue.
• Legal basis: steps taken at your request prior to entering into a contract (Article 6(1)(b) of the GDPR). When you act on behalf of a company, DigitalCX’s legitimate interest in responding to requests from businesses (Article 6(1)(f)).
• Required data: your answers are needed to book a time slot online. If you prefer not to provide them, write to contact@digitalcx.fr.

What happens when you send your request. The site’s server immediately forwards it as two emails: the first, with all your answers, to Loïc Legrand (contact@digitalcx.fr); the second, an acknowledgment of receipt that only restates the requested time slot, to the address you provided. The site does not keep your request in a database: it exists only in these two emails. The only exception: if sending fails, a copy is kept on the server, in a location with no public access, so that your request is not lost; it is deleted after 30 days at most. Nothing is added to a calendar automatically: your time slot is confirmed by email.

Correspondence by email

• Data: email address, name, content of messages, and attachments.
• Purpose: to reply to you.
• Legal basis: steps taken at your request prior to entering into a contract, or DigitalCX’s legitimate interest in replying to the messages it receives (Articles 6(1)(b) and 6(1)(f)).

Sales follow-up

After an initial exchange, DigitalCX may write to you about your project or about related services relevant to your professional activity.

• Legal basis: DigitalCX’s legitimate interest (Article 6(1)(f) of the GDPR; Article L. 34-5 of the French Postal and Electronic Communications Code).
• Right to object: you can object at any time, without giving a reason, by replying to one of these messages or by writing to contact@digitalcx.fr.

DigitalCX does not send newsletters and does not sell, rent, or exchange any data.

Clients

If you hire DigitalCX for a project, your data is used to perform the contract, for invoicing, and for bookkeeping. Legal basis: performance of the contract (Article 6(1)(b)) and statutory accounting and tax obligations (Article 6(1)(c)).

Site operation and security

• Data: IP address, date and time of the visit or form submission, page requested, and browser type, recorded in the server’s technical logs.
• Purposes: to operate the site and protect it against abuse and attacks, such as automated form submissions.
• Legal basis: DigitalCX’s legitimate interest in keeping its site secure (Article 6(1)(f)).

The site does not use analytics, does not build any profiles, and does not display any advertising.

Recipients

Only Loïc Legrand reads your data. It also passes through the following technical service providers, which act solely on his instructions:

• Hostinger International Ltd (Cyprus): hosting for the site and the contact@digitalcx.fr mailbox, and delivery of the form’s emails;
• Google (Google Calendar and Google Meet): once the appointment is confirmed, your name and email address are used to send you the video call invitation.

Your data is never sold or passed on. It may be disclosed to an authority only where the law requires it.

Transfers outside the European Union

The site and the mailbox are hosted by Hostinger in a data center located in the European Union.

Google LLC (United States) may receive your name and email address when the video call invitation is sent. This transfer is based on the European Commission’s adequacy decision of July 10, 2023 (EU–U.S. Data Privacy Framework), under which Google LLC is certified.

No other transfer outside the European Union takes place.

Retention periods

• Appointment request or email that does not lead to a project: 3 years after your last message, after which both emails are deleted.
• Clients: contact details for the duration of the contract, then 3 years.
• Contract and correspondence that may be needed in a dispute: archived for 5 years after the contract ends.
• Invoices and accounting records: 10 years, as required by law.
• Objection to sales follow-up: 3 years, to make sure you are not contacted again.
• Server technical logs: 12 months at most.
• Copy of a request that failed to send: 30 days at most.
• Form abuse protection: submission log (date, result, and a hashed fingerprint of the connection, without the form’s content), 3 months; counters (hashed fingerprints of the connection and of the email address), 24 hours.
• Information kept in your browser (see below): until you close the tab.

Your rights

You can:

• access your data;
• have it corrected;
• have it erased;
• request that its processing be restricted;
• object to its processing, including sales follow-up, without giving a reason;
• receive the data you provided in a machine-readable format, where the processing is based on your request or on a contract;
• set instructions on what happens to your data after your death.

To exercise these rights, write to contact@digitalcx.fr. You will receive a reply within one month. This period may be extended by two months for a complex request, in which case you will be notified. Proof of identity will be requested only if there is reasonable doubt about your identity.

If you believe your rights have not been respected, you can file a complaint with the CNIL, the French data protection authority: www.cnil.fr/fr/plaintes (opens in a new window).

Security

The site is served only over an encrypted connection (HTTPS). Access to the mailbox is protected, and your data is not copied into any tool other than those listed under “Recipients.”

Cookies and storage in your browser

The site does not set any cookies.

Only one item is stored in your browser, in its session storage. It records that the small booking window has already been shown to you, so that it does not reappear during your visit. It contains nothing that identifies you, is never sent to the server, and is erased as soon as you close the tab. Its only purpose is display convenience, so it does not require your consent (Article 82 of the French Data Protection Act, loi Informatique et Libertés).

Fonts, scripts, and the video are all served from digitalcx.fr, so your visit sends no data to third parties. The overview video loads only if you click on it.

Links to other sites, such as LinkedIn, take you off digitalcx.fr; those sites’ own policies then apply.

Automated decision-making

No decision about you is based solely on automated processing, and no profiling takes place.

Changes to this policy

This policy may change. The date of the last update appears at the top of the page.