Privacy policy

Data controller

The controller is Vertigo Dev, the trading name of Jocelyn ARZUR EI (micro-enterprise), whose registered address is given in the legal notice. For any question about your data: contact@vertigo-dev.com.

No data protection officer has been appointed, as this is not mandatory for the activity of Vertigo Dev.

Processing, purposes and legal bases

Contact requests

Purpose: to receive the contact requests sent through the form, respond to them and follow up on the exchange. Legal basis: pre-contractual measures taken at your request when you ask for a service, and the legitimate interest of Vertigo Dev in replying to any other enquiry. The data is never used for marketing and is never sold or passed on.

Data processed: name, email address, company (optional), type of project and message, together with the date of receipt, the language, the page of origin and the message identifier. No IP address and no information about your browser is attached to the message.

Audience measurement

Purpose: to produce anonymous visit statistics and count the requests sent per page, language and type of project. Legal basis: the legitimate interest of Vertigo Dev. The audience measurement is built into the website, anonymous and tracker-free: it sets no cookie, uses no identifier, allows no tracking across websites and involves no third party.

Website security

Purpose: to protect the website and the form against abuse, diagnose incidents and detect intrusions. Legal basis: the legitimate interest in ensuring the security of the service. Technical logs contain the IP address, the date, the requested page, the response code and the browser identifier, but never the content of the form.

Recipients and processors

Your data is intended solely for the owner of Vertigo Dev. The processor acting on his behalf is OVH SAS (OVHcloud), under its data processing agreement: hosting of the website on a server located in France, including the automatic backup of that server (7 days at most); the OVHcloud email service (Zimbra), which carries the notification and the acknowledgement; storage in France of the website backups, which only receives encrypted copies that cannot be read without a key kept offline by the owner.

The data is hosted in France by OVH SAS. For the purposes of operating the service, sub-processors of OVHcloud may access it, including OVH Hébergement Inc., located in Canada, a country recognised by the European Commission as providing an adequate level of protection (decision 2002/2/EC). Apart from this possible access from Canada, no data is transferred outside the European Union.

Retention periods

• Form messages: 3 years from receipt, then automatic deletion.
• Encrypted backups: 30 days at most; a deleted message disappears from every backup within that period.
• Automatic backup of the server by OVHcloud: 7 days at most.
• Data used to limit the number of submissions: kept in memory in a form that does not reveal your IP address, for 24 hours at most, never backed up.
• Technical logs: 6 months at most, with automatic rotation.
• Audience measurement statistics: 25 months at most.
• Language preference (vd_lang cookie): 13 months at most.

Cookies and trackers

The website sets no tracker that requires consent, and therefore displays no cookie banner. A single cookie may be set, and only after an action on your part (choosing a language with the selector, following or closing the language banner): the vd_lang cookie, which only contains “fr” or “en” and is used to stop showing the language banner. As an interface personalisation choice it is exempt from consent, is read for no other purpose and expires after 13 months at most.

Your rights

You have the right of access to your data, the right to rectification, the right to erasure, the right to restriction of processing, the right to object to processing based on legitimate interest and the right to data portability for data provided in the pre-contractual context. To exercise them, write to contact@vertigo-dev.com: you will receive an answer within one month at most.

You may also lodge a complaint with the French data protection authority (CNIL).

Mandatory information

The Name, Email, Type of project and Message fields are mandatory: without them, Vertigo Dev cannot process or answer your request. The Company field is optional. No automated decision producing legal effects concerning you is made: filtering abusive submissions only has a technical effect.