Privacy Policy
Last updated: 24 May 2026
This English version is provided for convenience. In case of discrepancy, the French version prevails.
EVAVEO attaches great importance to the protection of your personal data. In accordance with Regulation (EU) 2016/679 (GDPR) and the amended French Data Protection Act (Loi Informatique et Libertés), this policy describes how your data is collected, used and protected on evaveo.com.
1. Data controller
EVAVEO, whose registered office is located at 17 Av. Charles de Gaulle, 69370 Saint-Didier-au-Mont-d'Or, France, is the controller of the personal data collected through the evaveo.com website.
For any question about your data: contact@evaveo.com.
2. Data we collect
We only collect the data strictly necessary for the purposes described below. No audience measurement tool or marketing cookie is used.
| Source | Data collected |
|---|---|
| Contact form | Name, company, e-mail address, telephone number, selected need, free-text message. |
| Project configurator | Name, e-mail address, choices made in the configurator (generated brief). |
| Connection to the website | IP address, browser type, pages viewed, timestamp (standard server logs). |
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Responding to your contact or project request | Pre-contractual steps taken at your request (Art. 6(1)(b) GDPR). |
| B2B business development on similar projects | Legitimate interest (Art. 6(1)(f) GDPR), with a right to object. |
| Website security, prevention of abuse, internal technical statistics | Legitimate interest (Art. 6(1)(f) GDPR). |
| Compliance with legal obligations (accounting, tax) | Legal obligation (Art. 6(1)(c) GDPR). |
4. Recipients and processors
Your data is never sold. It is only accessed by the EVAVEO team and by the following technical processors, bound by a data processing agreement:
- IONOS SE (Germany): hosting of the website and the domain.
- Google Ireland Ltd (EU): Google Workspace, for receiving e-mails sent to contact@evaveo.com and sending form notifications (via authenticated SMTP).
5. Transfers outside the European Union
Your data is processed within the European Union. In the course of operating its Workspace services, Google may transfer data to the United States. These transfers are governed by the European Commission's Standard Contractual Clauses and the EU-US Data Privacy Framework.
6. Retention periods
| Data | Period |
|---|---|
| Messages received through the form | 3 years from the last exchange (CNIL recommendation for B2B business development). |
| Contact details of an active prospect | For as long as the business relationship continues, then 3 years after the last contact. |
| Server logs (IP, access) | 12 months (CNIL recommendation and obligations under the LCEN, the Loi pour la confiance dans l'économie numérique, i.e. the French Act on confidence in the digital economy). |
| Data used for invoicing | 10 years (accounting and tax obligation). |
7. Your rights
In accordance with the GDPR, you have the following rights over your personal data at any time:
- Right of access: obtain confirmation that your data is being processed and a copy of it.
- Right to rectification: correct inaccurate or incomplete data.
- Right to erasure ("right to be forgotten"): request the deletion of your data.
- Right to restriction of processing: freeze the use of your data in certain cases.
- Right to data portability: receive your data in a structured format.
- Right to object: refuse processing, in particular for business development purposes.
- Right to set instructions regarding what happens to your data after your death.
To exercise your rights, write to contact@evaveo.com, stating the subject of your request. You will receive a reply within one month. You may be asked for proof of identity if there is reasonable doubt as to your identity.
If you consider that your rights have not been respected, you may lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés, the French data protection authority), 3 place de Fontenoy, 75007 Paris, www.cnil.fr.
8. Security
EVAVEO implements appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration or disclosure: TLS encryption for all communications with the website (HTTPS), server access restricted to identified staff, and regular backups.
9. Cookies
The evaveo.com website does not place any advertising or audience measurement cookies. Only certain third-party content (Google Maps on the Contact page, YouTube on some Case Studies pages) may place cookies, and only if you give your explicit consent. See our Cookie Policy for details.
10. Changes
This policy may be updated. The date of the last update is shown at the top of this page. In the event of a substantial change, you will be informed by a prominent notice on the website.