Data controller
EXECTERA, a French SASU with share capital of €5,000, registered with the Nice Trade and Companies Register under SIREN 101 270 155 and having its registered office at 5 boulevard Lech Walesa, Les Gobelins bâtiment A, 06300 Nice, France, is the controller for the processing described in this policy.
For any question or request concerning your data: contact@exectera.com.
Legal framework
This information is provided in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR) and amended French Act No. 78-17 of 6 January 1978 on information technology, data files and civil liberties.
Source of the data
Data are collected directly from you when you use the contact form, book a meeting or contact EXECTERA. The website does not collect data from third-party sources for profiling purposes.
Processing activities
Contact form
- Data
- Name, email address, optional company, message, submission language, IP address, browser, submission time and originating URL.
- Purpose
- To receive, secure and route your enquiry, respond to it and follow up the exchange.
- Legal basis
- EXECTERA’s legitimate interest in responding to enquiries addressed to it, under Article 6(1)(f) of the GDPR.
- Required information
- Your name, email address and message are required to process the enquiry. The company name is optional. Without the required data, EXECTERA cannot respond through this channel.
- Retention
- The Formspree plan used by EXECTERA provides access to the last 30 days of submission history. This access window does not guarantee that the data are automatically deleted after that period. The copy routed to Microsoft 365 is retained for the duration of the exchange, then for up to three years from your last contact. Data may be retained for longer where required by law or to establish, exercise or defend legal claims.
Booking through Cal.com
- Data
- Name, email address, selected time, time zone and, where applicable, answers to booking questions, rescheduling or cancellation information, and technical connection data.
- Purpose
- To display availability, create and manage the appointment and communicate the information needed for the meeting.
- Legal basis
- EXECTERA’s legitimate interest in arranging requested discussions, under Article 6(1)(f) of the GDPR.
- Required information
- Fields marked as required by Cal.com are needed to create the appointment. The booking cannot be completed without them.
- Retention
- In Cal.com, booking data are deleted no later than three years after the appointment date during a periodic review. Copies sent to Microsoft 365 are retained for the duration of the exchange, then for up to three years from your last contact. These periods are subject to temporary technical backups and providers’ legal obligations.
Direct contact by email or telephone
- Data
- The contact details you use, the content of your enquiry and information needed to follow it up. EXECTERA does not record call content.
- Purpose
- To receive your enquiry, respond to it and follow up the exchange.
- Legal basis
- EXECTERA’s legitimate interest in responding to enquiries addressed to it, under Article 6(1)(f) of the GDPR.
- Retention
- For the duration of the exchange, then for up to three years from your last contact, unless longer retention is required by law or needed to establish, exercise or defend legal claims.
Website operation and security
- Data
- IP address, date and time, requested resource, browser, device and routing information that may appear in the technical logs of the hosting provider, content delivery network or service being requested.
- Purpose
- To display the website, prevent abuse, keep it secure and diagnose technical incidents.
- Legal basis
- EXECTERA’s legitimate interest in operating a reliable and secure website.
- Retention
- The period depends on the type of log and the relevant provider. It is limited to the time needed for security, diagnostics and compliance with applicable legal obligations; those purposes are the criteria used to determine the retention period.
Audience measurement
- Data
- Cloudflare produces, from the technical logs of its network, aggregate traffic statistics (number of requests, pages and files served, errors, bandwidth, geographic distribution) that EXECTERA can consult in its dashboard. EXECTERA accesses only those aggregate indicators. In the current configuration, Cloudflare Web Analytics collects performance and traffic measurements through a RUM script only outside the European Union.
- Purpose
- To measure overall website traffic, understand how its pages are used and operate the website.
- Legal basis
- EXECTERA’s legitimate interest in measuring and improving its website, subject to the tracker rules described below.
- Retention
- EXECTERA accesses only the aggregate statistics available in the Cloudflare dashboard and neither exports them nor combines them with other sources. Cloudflare retains the underlying technical logs for as long as necessary to provide and secure the service and comply with its legal obligations, under the conditions described in its privacy policy. Cloudflare states that it retains unsampled RUM data for seven days and makes aggregate statistics available for six months.
Recipients and processors
Data are accessible only to people authorised by EXECTERA and to the providers needed for the purposes described above:
- Formspree, Inc., to receive, secure, store and route enquiries submitted through the form. See its privacy policy and security information.
- Cal.com, Inc., to display availability and create and manage appointments. See its privacy policy.
- Cloudflare, Inc., to host the website, retain its published files and technical logs, deliver and protect it through its network, caching and security services, provide the aggregate traffic statistics of its dashboard and, outside the European Union in the current configuration, provide Cloudflare Web Analytics. See its privacy policy.
- Microsoft Ireland Operations Limited, to receive messages in EXECTERA’s Microsoft 365 mailbox, add appointments to its calendar and create Microsoft Teams video-conferencing links. See the Microsoft Privacy Statement.
Cal.com may transmit appointment information to the calendar or video-conferencing service connected by EXECTERA, including its subject, times, location and the names and email addresses of the organiser and participants. Data may also be disclosed to competent authorities or advisers where required by law or necessary to defend EXECTERA’s rights.
Transfers outside the European Economic Area
Some providers named in this policy are established outside the European Economic Area or may process data there. Formspree and Cal.com are established in the United States. Cloudflare, Inc. is established in the United States and serves the website from its global network; the published website files and their technical logs may therefore be processed outside the European Economic Area. Cloudflare states that it safeguards its transfers through its data processing addendum, which incorporates the European Commission’s Standard Contractual Clauses. Formspree states that it safeguards its transfers through the European Commission’s Standard Contractual Clauses. Cal.com states that it relies on those clauses or, where applicable, an adequacy mechanism such as the EU-US Data Privacy Framework.
Depending on the services used, Microsoft may also involve access or processing outside the European Economic Area, subject to its contractual commitments and the safeguards provided by the GDPR. You can request information about the applicable safeguards at contact@exectera.com.
Cookies and audience measurement
Cloudflare automatically records the requests received by its network to provide EXECTERA with aggregate traffic statistics, without EXECTERA adding audience-measurement software to the website code. Cloudflare Web Analytics is enabled in a mode that excludes data from visitors in the European Union: its RUM script is not injected for those visitors. For other visitors, Cloudflare states that the tool does not use cookies, local storage or individual fingerprinting. EXECTERA does not add any advertising tool to the website.
Cloudflare may place the technical __cf_bm cookie when the bot-protection services that use it are enabled; it expires after 30 minutes of inactivity. The Cal.com booking module uses technical trackers to provide and secure the service, and no optional analytics application is installed on EXECTERA’s account. Formspree’s CAPTCHA is disabled. No access to or storage of information on a user’s device for audience-measurement purposes requiring consent has been identified in the current configuration. The website therefore does not provide a separate Cookies page or consent banner. If a tool or tracker requiring consent is added, this policy will be updated and the tracker will be activated only after consent has been obtained where required.
Your rights
Subject to the conditions set by applicable law, you may request:
- access to your data and a copy of them;
- correction of inaccurate or incomplete data;
- erasure of your data;
- restriction of processing;
- objection, on grounds relating to your particular situation, to processing based on legitimate interests;
- data portability where processing is automated and based on your consent or on a contract;
- instructions concerning the retention, erasure and disclosure of your data after your death under French law.
To exercise these rights, email contact@exectera.com. If EXECTERA has reasonable doubts about your identity, it may request the additional information needed to verify it. If, after contacting EXECTERA, you believe that your rights have not been respected, you may submit a complaint to the French data protection authority, the CNIL.
Automated decision-making
The processing described in this policy does not involve decisions based solely on automated processing that produce legal or similarly significant effects.
Language and updates
This policy may be amended to reflect changes to the website, providers or law. This English version is provided for information. If an interpretation differs, the French version prevails, subject to applicable mandatory rules.