Privacy policy

Kevin Vavelin, sole trader trading as Codetics, 3 allée des Orangers, 97421 Saint-Louis, La Réunion, France, SIREN 750 369 803.

For any question about your data: contact@codetics.fr. Codetics has not appointed a data protection officer, as this is not mandatory for its activity (article 37 of the GDPR).

Data: name, email address, company, project type, stage, indicative budget and timeline, description of your needs and any additional information you choose to provide, site language.

How it works: the form is sent through the Resend email delivery service to the Codetics inbox (Microsoft Outlook), and a confirmation copy is sent to the address you entered.

Purposes: answering your request, assessing your project, preparing a proposal and following up the business relationship.

Legal bases: steps taken at your request prior to entering into a contract (article 6.1.b of the GDPR); otherwise, Codetics' legitimate interest in answering requests sent to it (article 6.1.f).

Fields marked as required are needed to reply; without them, the request cannot be handled.

Data: name, email address, billing address, service ordered, amount, date, payment history, choices made when ordering (acceptance of the terms of sale, immediate-performance request). Payment takes place on Stripe's secure page; Codetics never receives full card numbers.

Purposes: collecting payment, issuing the invoice, performing the service, managing the customer relationship, complaints and withdrawals, and evidencing commitments made.

Legal bases: performance of the contract (article 6.1.b); legal accounting, tax and contract-retention obligations (article 6.1.c); legitimate interest in keeping evidence and defending its rights (article 6.1.f).

Stripe also processes some data as a separate controller, in particular for fraud prevention and its regulatory obligations; its privacy policy is available at https://stripe.com/privacy.

During an engagement, Codetics processes the contact details of your staff and the exchanges needed to perform it (performance of the contract, article 6.1.b). Where Codetics accesses data for which you are the controller (for example during an audit or migration), it acts as your processor under the terms of sale.

Only if you accept through the cookie banner: Google Analytics measures site traffic (pages viewed, duration, traffic source, device and browser type, approximate country, cookie identifier); PostHog, hosted in the European Union, measures site usage (pages viewed, clicks, path to checkout) and collects technical errors occurring in your browser so they can be fixed.

Legal basis: your consent (article 6.1.a of the GDPR and article 82 of the French Data Protection Act), which you can withdraw at any time using the "Cookies" button on every page. Declining has no effect on your access to the site.

The site does not use these tools to identify you personally or for targeted advertising, and does not carry out any automated decision-making or profiling within the meaning of article 22 of the GDPR.

On every visit, the host Vercel processes technical data (IP address, date and time, requested page, browser) in server logs, to deliver the site, keep it secure and prevent abuse. The server also records, without personal data, technical events about checkout starts (offer and language concerned), sent to PostHog.

Legal basis: Codetics' legitimate interest in operating the site and keeping it secure (article 6.1.f).

Your data is intended for Codetics. It is shared, only as far as necessary, with the following providers, who act as Codetics' processors unless stated otherwise:

Resend, Inc. (United States): delivery of form emails, with data hosted in the European Union region (Ireland).

Microsoft (Outlook): the Codetics mailbox where requests are received.

Stripe Payments Europe, Ltd. (Ireland): online payment and invoicing, also a separate controller for its own purposes.

Vercel Inc. (United States): site hosting and technical logs.

Google Ireland Limited (Ireland) and Google LLC (United States): Google Analytics audience measurement, after consent.

PostHog, Inc. (United States), with data hosted in the European Union: usage measurement and error diagnostics after consent, technical checkout logs.

Codetics' accountant and advisers, bound by professional secrecy, may also access it for their work, as may authorised authorities on lawful request. Codetics does not sell or rent your data.

Some providers are established in the United States or may access data from there. These transfers rely on the European Commission's adequacy decision of 10 July 2023 on the EU–US Data Privacy Framework for certified providers and, failing that, on the European Commission's standard contractual clauses (article 46 of the GDPR).

You can obtain information about these safeguards by writing to contact@codetics.fr.

Requests that do not lead to a contract: three years from your last contact, in the Codetics mailbox. The email delivery service keeps its delivery logs for a limited period set by its contract.

Customers: for the duration of the relationship, then five years as evidence (article 2224 of the French Civil Code and article L110-4 of the French Commercial Code). Accounting records and invoices: ten years (article L123-22 of the French Commercial Code). Contracts with a consumer of at least €120: ten years (article L213-1 of the French Consumer Code).

Credentials and access shared for an engagement: deleted at the latest at the end of the engagement.

Audience measurement: Google Analytics and PostHog cookies, thirteen months at most; related statistical data, fourteen months at most; the choice made in the cookie banner, six months.

Host technical logs: a limited period set by the host's contract.

Codetics takes appropriate technical and organisational measures to protect your data: encrypted connections (HTTPS), restricted access protected by strong authentication, providers offering sufficient guarantees, and no database on the site.

You have the rights of access, rectification, erasure, restriction, portability and objection (articles 15 to 21 of the GDPR), the right to withdraw your consent at any time without affecting the lawfulness of prior processing, and the right to set instructions about what happens to your data after your death (article 85 of the French Data Protection Act).

To exercise them, write to contact@codetics.fr. Codetics replies within one month, extendable by two months for complex requests (article 12 of the GDPR), and may ask you to prove your identity if there is reasonable doubt.

If, after contacting us, you believe your rights are not respected, you may lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, https://www.cnil.fr, or with the supervisory authority of your EU country of residence.

This policy may be updated to reflect changes to the site or the law. The date of the last update is shown at the top of the page.