LEGAL
Version française →

Privacy Policy

FLEAT — Personal data protection (GDPR).

This English translation is provided for information only. The French version of this privacy policy (available at /privacy-policy) is the sole legally binding version. In the event of any discrepancy, the French version prevails.

Article 1 — Purpose

This privacy policy describes how FLEAT (the « Data Controller ») collects and processes the personal data of its visitors, prospects and clients, in accordance with Regulation (EU) 2016/679 of 27 April 2016 (the « GDPR ») and French Act No. 78-17 of 6 January 1978, as amended (the « Data Protection Act »).

It supplements the Terms & Conditions of Sale and applies to the entire fleat.app website as well as to exchanges taking place within the business relationship.

Article 2 — Data Controller

The controller of the personal data is:

  • Company name: FLEAT
  • Legal form: single-member limited liability company (EURL)
  • Registered office: 9 rue des Colonnes, 75002 Paris, France
  • Trade register (RCS): Paris 888 232 543
  • Legal representative / Manager: Wiam Tounsi
  • Contact (to exercise your rights): hello@fleat.app

Given its size and the nature of its processing activities, the Data Controller is not required to appoint a Data Protection Officer (DPO). Any question relating to data protection may be sent to the contact address above.

Article 3 — Data collected, purposes and legal bases

The Data Controller only collects data that is strictly necessary for the purposes pursued:

  • Contact form — name, e-mail address, subject and content of the message. Purpose: to respond to your request and follow up on exchanges. Legal basis: pre-contractual measures taken at your request and the Data Controller's legitimate interest in responding to enquiries (Art. 6.1.b and 6.1.f GDPR).
  • Appointment booking — name, e-mail address and chosen time slot, via the Cal.com booking tool. Purpose: to arrange a meeting or consultation. Legal basis: pre-contractual measures and legitimate interest (Art. 6.1.b and 6.1.f GDPR).
  • Contractual relationship — client identification and billing data (name, contact details, information relating to the service and payment). Purpose: performance of the contract, invoicing and compliance with accounting and tax obligations. Legal basis: performance of the contract and compliance with a legal obligation (Art. 6.1.b and 6.1.c GDPR).
  • Audience measurement — aggregated and anonymised browsing data (pages viewed, device type, country, referring site), via a self-hosted Umami instance. Purpose: to produce traffic statistics in order to improve the site. Legal basis: legitimate interest (Art. 6.1.f GDPR).

No automated decision-making or profiling is carried out. No sensitive data within the meaning of Article 9 GDPR is collected.

Article 4 — Cookies and trackers

The site uses no advertising cookies or tracking cookies. Audience measurement is provided by Umami, a privacy-friendly solution that does not set any cookie and does not collect data allowing a visitor to be directly identified; no prior consent is therefore required in this respect.

The Cal.com booking tool embedded on the appointment page may set its own functional cookies when used, on its own domain and under its own responsibility.

Article 5 — Recipients and processors

Data is never sold, rented or transferred to third parties for commercial purposes. It is processed by the Data Controller and, where applicable, by the following processors acting on its instructions:

  • Hetzner Online GmbH (Germany) — hosting of the dedicated server on which the site is self-hosted.
  • n8n (self-hosted instance) — routing and processing of messages received via the contact form.
  • Cal.com — online appointment-booking service, for scheduling meetings.

Hosting and data processing take place within the European Union. In the absence of any transfer of data outside the European Union, no specific safeguard under Articles 44 et seq. GDPR is required. Where applicable, any transfer by a processor would be governed by the appropriate safeguards provided for by the GDPR.

Article 6 — Retention periods

  • Contact and booking requests: kept for as long as necessary to handle the request, then archived for a maximum of three (3) years from the last contact in the absence of a contractual relationship.
  • Client and contractual data: kept for the entire duration of the contractual relationship.
  • Accounting records and invoices: kept for ten (10) years in accordance with legal obligations (Art. L.123-22 of the French Commercial Code).
  • Audience statistics: aggregated data kept in a form that does not allow visitors to be identified.

Article 7 — Security

The Data Controller implements appropriate technical and organisational measures to protect data against unauthorised destruction, loss, alteration, disclosure or access, in particular the encryption of communications (HTTPS), access restrictions and regular maintenance of its systems.

Article 8 — Your rights

In accordance with the GDPR and the French Data Protection Act, you have the following rights over your personal data at any time:

  • right of access and to a copy of your data;
  • right to rectification;
  • right to erasure (« right to be forgotten »);
  • right to restriction of processing;
  • right to object, in particular to processing based on legitimate interest;
  • right to data portability;
  • right to give instructions regarding the fate of your data after your death.

These rights may be exercised by writing to hello@fleat.app. A reply will be provided within one (1) month. The Data Controller may ask you to prove your identity in the event of reasonable doubt.

Article 9 — Complaint to the CNIL

If, after contacting us, you consider that your rights are not being respected, you may lodge a complaint with the French data protection authority (CNIL) — 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.

Article 10 — Changes

The Data Controller reserves the right to amend this privacy policy at any time, in particular to adapt it to legislative, regulatory or technical developments. The applicable version is the one published on the site at the time of your consultation.