ENFRLet’s talk PegaContact

Personal data

Privacy policy

This policy explains how EXECTERA processes personal data collected on the website or when you contact us.

Data controller

EXECTERA, a French SASU with share capital of €5,000, registered with the Nice Trade and Companies Register under SIREN 101 270 155 and having its registered office at 5 boulevard Lech Walesa, Les Gobelins bâtiment A, 06300 Nice, France, is the controller for the processing described in this policy.

For any question or request concerning your data: contact@exectera.com.

Legal framework

This information is provided in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR) and amended French Act No. 78-17 of 6 January 1978 on information technology, data files and civil liberties.

Source of the data

Data are collected directly from you when you use the contact form, book a meeting or contact EXECTERA. The website does not collect data from third-party sources for profiling purposes.

Processing activities

Contact form

Data
Name, email address, optional company, message, submission language, IP address, browser, submission time and originating URL.
Purpose
To receive, secure and route your enquiry, respond to it and follow up the exchange.
Legal basis
EXECTERA’s legitimate interest in responding to enquiries addressed to it, under Article 6(1)(f) of the GDPR.
Required information
Your name, email address and message are required to process the enquiry. The company name is optional. Without the required data, EXECTERA cannot respond through this channel.
Retention
The archive of the Formspree account used by EXECTERA currently retains submission history for 30 days. The copy routed to Microsoft 365 is retained for the duration of the exchange, then for up to three years from your last contact. Data may be retained for longer where required by law or to establish, exercise or defend legal claims.

Booking through Cal.com

Data
Name, email address, selected time, time zone and, where applicable, answers to booking questions, rescheduling or cancellation information, and technical connection data.
Purpose
To display availability, create and manage the appointment and communicate the information needed for the meeting.
Legal basis
EXECTERA’s legitimate interest in arranging requested discussions, under Article 6(1)(f) of the GDPR.
Required information
Fields marked as required by Cal.com are needed to create the appointment. The booking cannot be completed without them.
Retention
In Cal.com, booking data are deleted no later than three years after the appointment date during a periodic review. Copies sent to Microsoft 365 are retained for the duration of the exchange, then for up to three years from your last contact. These periods are subject to temporary technical backups and providers’ legal obligations.

Direct contact by email or telephone

Data
The contact details you use, the content of your enquiry and information needed to follow it up. EXECTERA does not record call content.
Purpose
To receive your enquiry, respond to it and follow up the exchange.
Legal basis
EXECTERA’s legitimate interest in responding to enquiries addressed to it, under Article 6(1)(f) of the GDPR.
Retention
For the duration of the exchange, then for up to three years from your last contact, unless longer retention is required by law or needed to establish, exercise or defend legal claims.

Website operation and security

Data
IP address, date and time, requested resource, browser, device and routing information that may appear in the technical logs of the hosting provider, content delivery network or service being requested.
Purpose
To display the website, prevent abuse, keep it secure and diagnose technical incidents.
Legal basis
EXECTERA’s legitimate interest in operating a reliable and secure website.
Retention
The period depends on the type of log and the relevant provider. It is limited to the time needed for security, diagnostics and compliance with applicable legal obligations; those purposes are the criteria used to determine the retention period.

Audience measurement

Data
OpenAI Sites processes technical browsing information to produce aggregate unique visitor and page-view statistics. EXECTERA accesses only those aggregate indicators in the Sites dashboard. OpenAI’s public documentation does not specify the technical identifiers used. In the current configuration, Cloudflare Web Analytics collects performance and traffic measurements through a RUM script only outside the European Union.
Purpose
To measure overall website traffic, understand how its pages are used and operate the website.
Legal basis
EXECTERA’s legitimate interest in measuring and improving its website, subject to the tracker rules described below.
Retention
EXECTERA accesses only the aggregate statistics available in the Sites dashboard and neither exports them nor combines them with other sources. OpenAI retains the underlying technical data for as long as necessary to provide and secure the service and comply with its legal obligations. Cloudflare states that it retains unsampled RUM data for seven days and makes aggregate statistics available for six months.

Recipients and processors

Data are accessible only to people authorised by EXECTERA and to the providers needed for the purposes described above:

  • OpenAI Ireland Ltd, to host the website, retain its artefacts and technical logs and provide the aggregate traffic statistics available in ChatGPT Sites. See OpenAI’s Privacy Policy.
  • Formspree, Inc., to receive, secure, store and route enquiries submitted through the form. See its privacy policy and security information.
  • Cal.com, Inc., to display availability and create and manage appointments. See its privacy policy.
  • Cloudflare, Inc., to deliver and protect the website through its network, caching and security services and, outside the European Union in the current configuration, to provide Cloudflare Web Analytics. See its privacy policy.
  • Microsoft Ireland Operations Limited, to receive messages in EXECTERA’s Microsoft 365 mailbox, add appointments to its calendar and create Microsoft Teams video-conferencing links. See the Microsoft Privacy Statement.

Cal.com may transmit appointment information to the calendar or video-conferencing service connected by EXECTERA, including its subject, times, location and the names and email addresses of the organiser and participants. Data may also be disclosed to competent authorities or advisers where required by law or necessary to defend EXECTERA’s rights.

Transfers outside the European Economic Area

Some providers named in this policy are established outside the European Economic Area or may process data there. Formspree and Cal.com are established in the United States. OpenAI states that ChatGPT Sites does not currently offer data residency for deployed sites, their artefacts or logs. Formspree states that it safeguards its transfers through the European Commission’s Standard Contractual Clauses. Cal.com states that it relies on those clauses or, where applicable, an adequacy mechanism such as the EU-US Data Privacy Framework.

Depending on the services used, Cloudflare and Microsoft may also involve access or processing outside the European Economic Area, subject to their contractual commitments and the safeguards provided by the GDPR. You can request information about the applicable safeguards at contact@exectera.com.

Cookies and audience measurement

OpenAI Sites automatically records traffic to provide EXECTERA with aggregate unique visitor and page-view statistics, without EXECTERA adding audience-measurement software to the website code. Cloudflare Web Analytics is enabled in a mode that excludes data from visitors in the European Union: its RUM script is not injected for those visitors. For other visitors, Cloudflare states that the tool does not use cookies, local storage or individual fingerprinting. EXECTERA does not add any advertising tool to the website.

Cloudflare may place the technical __cf_bm cookie when the bot-protection services that use it are enabled; it expires after 30 minutes of inactivity. The Cal.com booking module uses technical trackers to provide and secure the service, and no optional analytics application is installed on EXECTERA’s account. Formspree’s CAPTCHA is disabled. No access to or storage of information on a user’s device for audience-measurement purposes requiring consent has been identified in the current configuration. The website therefore does not provide a separate Cookies page or consent banner. If a tool or tracker requiring consent is added, this policy will be updated and the tracker will be activated only after consent has been obtained where required.

Your rights

Subject to the conditions set by applicable law, you may request:

  • access to your data and a copy of them;
  • correction of inaccurate or incomplete data;
  • erasure of your data;
  • restriction of processing;
  • objection, on grounds relating to your particular situation, to processing based on legitimate interests;
  • data portability where processing is automated and based on your consent or on a contract;
  • instructions concerning the retention, erasure and disclosure of your data after your death under French law.

To exercise these rights, email contact@exectera.com. If EXECTERA has reasonable doubts about your identity, it may request the additional information needed to verify it. If, after contacting EXECTERA, you believe that your rights have not been respected, you may submit a complaint to the French data protection authority, the CNIL.

Automated decision-making

The processing described in this policy does not involve decisions based solely on automated processing that produce legal or similarly significant effects.

Language and updates

This policy may be amended to reflect changes to the website, providers or law. This English version is provided for information. If an interpretation differs, the French version prevails, subject to applicable mandatory rules.