Privacy policy

1. Data controller

The controller of the data collected on this website is orgatypik, a simplified joint-stock company (société par actions simplifiée) with share capital of €5,000, registered with the Toulouse trade and companies register (RCS) under number 108 509 084, whose registered office is at 9 passage Bourguignon, 31130 Balma, France. pylotik is a brand operated by orgatypik.

For any question about your personal data, you can write to contact@orgatypik.fr or use our contact form.

No data protection officer has been appointed: neither the nature, the volume nor the purpose of our processing requires such an appointment under Article 37 of the GDPR.

Your requests relating to your personal data are handled by Charley Fredaigues, legal representative, at contact@orgatypik.fr.

This policy covers the pylotik.com showcase website. The processing of data within the pylotik application platform, where the customer organization is itself the controller and orgatypik is a processor within the meaning of Article 28 of the GDPR, is governed by a separate data processing agreement, concluded with each organization and annexed to its contract. It is provided on simple request to contact@orgatypik.fr.

2. Data we collect

We only collect the data you voluntarily send us. The website has a single form, and no other means of collection: the contact form.

Contact form

• Required: first and last name, business email address, organization, message, consent.
• Optional: your role, the size of your organization, the purpose of your request.

Technical data

• The connection logs kept by our host (IP address, date and time of the request, page requested) for security and for the proper functioning of the website. We do not consult them, and we draw no statistics from them.
• The loading of the FranceSaaS badge shown in the footer: see section 6.

We do not collect any sensitive data within the meaning of Article 9 of the GDPR, and the website is not intended for minors. We ask you not to send, through this form, any confidential data about your projects, your clients or your employees.

3. Purposes and legal bases

Each processing operation rests on an identified legal basis.

• Answering your request (demo, quote, question) and getting back to you: the legal basis is the performance of pre-contractual measures taken at your request (Article 6(1)(b) of the GDPR).
• Ensuring the security and proper functioning of the website: the legal basis is our legitimate interest in protecting our infrastructure (Article 6(1)(f)).

The website does not measure its audience. No traffic statistics are produced, either by us or by a third party.

Your data is not used for any commercial prospecting without your prior agreement, and is not subject to any automated decision-making or profiling.

4. Retention periods

• Contact requests with no follow-up: the time needed to handle your request, then one year from the last exchange.
• Data linked to a contractual relationship: for the whole duration of the relationship, then in line with the applicable legal retention obligations, in particular accounting ones.
• Connection logs kept by our host: 12 months at most.

These periods stay within the limits recommended by the CNIL, the French data protection authority.

5. Recipients of your data

Your data is processed by orgatypik and is neither sold, nor rented, nor transferred to third parties for commercial purposes.

It may be accessible to our technical providers, acting as processors and bound by contract within the meaning of Article 28 of the GDPR:

• our host: OVH SAS, 2 rue Kellermann, 59100 Roubaix, France;
• our email provider: Proton (Proton AG), route de la Galaise 32, 1228 Plan-les-Ouates, Geneva, Switzerland.

There is no other provider for the processing of your data. The website uses no audience-measurement tool. The footer badge is, however, served by a third party: see section 6.

6. Transfers outside the European Union

The website is hosted in France, and the contact form is processed by the website's own server: no provider stands between you and us. The website does not measure its audience and serves its fonts from its own servers. Loading fonts from a third-party service would send your IP address to that service: we do not do it.

One exception to this is the FranceSaaS badge in the footer. pylotik is listed in the francesaas.fr directory, and this badge is an image loaded from their servers: your browser therefore sends it your IP address and the technical information of an ordinary web request (browser, referring page). We receive none of this information. FranceSaaS is published by EATON LANE ADVISORY, with CLICK & DIGITAL as co-publisher, and its main host is Hetzner, in Germany. Its privacy policy states, however, that some of its providers, including Cloudflare for image storage, may process data from countries outside the European Economic Area, on the basis of standard contractual clauses. We do not control that path. If you do not want this request, a content blocker prevents it without removing anything else from the website.

A second exception, and we would rather write it than keep quiet about it: our business email is operated by Proton, in Switzerland. The message you send us is therefore kept there for the duration of our exchange. Switzerland is covered by a European Commission adequacy decision, which recognizes that its law gives personal data a level of protection equivalent to that of the GDPR: this transfer is lawful and requires no additional safeguard.

This choice is not a concession, quite the opposite. Proton is a company under Swiss law, with no US parent company: it is not subject to the US Cloud Act by virtue of its nationality or its shareholders, and your correspondence benefits from Swiss data protection law and the secrecy of telecommunications.

This requirement is not only about compliance: it is the same sovereignty principle that we apply to the application itself. See Hosting & security.

7. Your rights

In accordance with the General Data Protection Regulation and the French Data Protection Act (loi Informatique et Libertés), you have the following rights over your data:

• Right of access: obtain confirmation that your data is being processed, and receive a copy of it.
• Right to rectification: have inaccurate or incomplete data corrected.
• Right to erasure: ask for your data to be deleted, within the limits provided by law.
• Right to restriction: ask for a processing operation to be temporarily frozen.
• Right to object: object to a processing operation based on our legitimate interest, on grounds relating to your particular situation.
• Right to data portability: receive your data in a structured, machine-readable format.
• Right to withdraw your consent at any time, where the processing is based on it.
• Right to set directives on what happens to your data after your death.

To exercise these rights, write to contact@orgatypik.fr. We reply within one month. Proof of identity may be requested if there is reasonable doubt about your identity.

If, after contacting us, you consider that your rights are not being respected, you can lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, 75007 Paris, France, or online at cnil.fr.

8. Cookies and trackers

This website sets no cookies and uses no trackers. It does not measure its audience, shows no advertising, and embeds no social network button. Only the FranceSaaS badge in the footer is loaded from a third-party service (section 6).

No consent is therefore required, and you will not see any banner asking for it on this website.

Fonts are served from our own servers.

9. Security

We implement appropriate technical and organizational measures to protect your data against destruction, loss, alteration, disclosure or unauthorized access: encryption of exchanges over HTTPS, restricted access to data, and regular updates of the website's components.

10. Changes to this policy

This policy may be amended to reflect a change in our processing or in regulations. The date of the last update appears at the top of the page. In the event of a substantial change, we will inform you by an appropriate means.

Contact us

For any question about this policy or your personal data: contact@orgatypik.fr.

See also our legal notice.