Privacy Policy

Protecting your personal data is important. This policy explains what data is collected and how it is used.

Data Controller

legal.label.name: CRQPT
Status: Sole Proprietor — CRQPT
Address: 334 Rue Nicolas Parent, 73000 Chambéry
Email: asi0@crqpt.com

Data Collected

Contact Form

Name (optional), email address (required), related service, and message (required). Purpose: responding to your inquiry. Legal basis: legitimate interest (Art. 6.1.f GDPR). Retention: 3 years after last contact.

Email address (required), name (optional), preferred language. Purpose: sending CRQPT articles and updates. Legal basis: consent (Art. 6.1.a GDPR). Retention: until you unsubscribe, then 3 years for proof of consent.

Appointment Booking

Data entered during appointment booking is managed through Google Calendar (third-party service). Purpose: scheduling consultations. Legal basis: contract performance or pre-contractual measures (Art. 6.1.b GDPR). Retention: managed by Google per their privacy policy.

Browsing Data

Visit statistics are collected by Umami, a self-hosted analytics solution on our dedicated server in France (Scaleway, Paris), cookie-free and without personal data collection. This data never leaves our server. Anonymously collected data: pages visited, referrer, browser type, operating system, device type, country. Purpose: anonymous audience statistics. Legal basis: legitimate interest (Art. 6.1.f GDPR). Data is aggregated and anonymized.

Local Preferences

Your theme (light/dark) and language choices are stored locally in your browser (localStorage). This data never leaves your device.

Cookies

This site does not use any cookies. Theme (light/dark) and language preferences are stored via your browser's localStorage, a technology that does not constitute a cookie and whose data remains on your device. The Umami analytics solution used is also cookie-free. No consent banner is required.

Data Usage

Contact form data is used solely to respond to your inquiry. It is stored in a secure database and is never shared with third parties.

Data Recipients

Your data is stored on our self-hosted dedicated server in France (Scaleway, Paris). No data is resold or transferred for commercial purposes. The only third-party providers with access to certain data are: useSend (usesend.com) for transactional and newsletter email delivery, and Google (Google Calendar) for appointment management.

International Transfers

As useSend and Google are based in the United States, certain data (email address, appointment information) may be transferred outside the EU. Appropriate safeguards are in place (Data Privacy Framework or EU Commission standard contractual clauses).

Data Retention

Contact form data is retained for a maximum of 3 years from your last contact, unless required by law.

Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, modification, or destruction.

Your Rights

Under GDPR, you have the following rights:

Right of access: obtain a copy of your personal data
Right to rectification: correct inaccurate data
Right to erasure: request the deletion of your data
Right to data portability: receive your data in a structured format
Right to object: oppose processing based on legitimate interest
Right to restriction: request suspension of processing
Right to withdraw consent: at any time for consent-based processing (newsletter)

To exercise these rights, contact us at asi0@crqpt.com.

Response time: 1 month maximum.

Complaints

If you encounter difficulties, you may file a complaint with the CNIL: Commission Nationale de l'Informatique et des Libertés, 3 Place de Fontenoy, TSA 80715, 75334 PARIS CEDEX 07 — www.cnil.fr

Updates

This policy may be updated. The date of the last modification is indicated below.

Last updated: February 2026