Privacy policy

Data controller

ZKYSolutions (WIPIER Ludovic), sole trader (micro-enterprise scheme), SIRET 884 525 726 00029, is the controller of the personal data collected on this site. Contact: contact@zkysolutions.com.

Data collected

The site's contact form collects the following data: name, email address, message content. The site also measures its traffic using a self-hosted statistics tool, with no cookie and no third-party tool (such as Google Analytics), see the dedicated "Audience measurement" section below.

Purpose of processing

Data submitted through the contact form is used exclusively to answer your enquiry and, where applicable, to discuss a project or prepare a quote.

Legal basis

This processing is based on ZKYSolutions' legitimate interest in answering the enquiries addressed to it, as well as on taking pre-contractual steps at the request of the data subject (Articles 6.1.b and 6.1.f GDPR).

Retention period

Data from the contact form is kept for a maximum of 3 years from the last contact, unless a contractual relationship continues beyond that point.

Audience measurement (traffic statistics)

The site uses a statistics tool that we developed and host ourselves: no third-party service, no data sent to any outside partner. For each page viewed it records: the page visited, the site that may have referred you to ours, an estimate of your country and town together with the corresponding approximate geographic coordinates, those of the town, never yours, the type of device, and an automatic distinction between human visits and robots.

No cookie is placed and your IP address is never retained: it is used solely, for the duration of the calculation, to estimate an approximate location from a geolocation database installed on our server, before being immediately discarded. To estimate a number of visitors without identifying anyone, we compute a technical fingerprint from your IP address, your browser and the current date. Because the date is part of that calculation, the fingerprint changes every day: it cannot be used to identify you, nor to follow you from one day to the next, nor from one site to another.

This measurement rests on our legitimate interest in knowing and improving our site’s audience (article 6.1.f of the GDPR). The data is kept for 30 days, then deleted automatically. Because it places no cookie, uses no third-party tool and serves only to produce internal statistics, this measurement does not require your consent.

Data recipients

The data collected is intended exclusively for ZKYSolutions and is not passed to any third party, with the possible exception of the site's technical host (see Legal notice) acting as a technical processor.

Cookies

This site only places cookies that are strictly necessary for it to work: the session that keeps you signed in to your client area, the memory of your chosen language, and a cookie that records that you have read our cookie information message. No advertising cookie, no tracking cookie and no audience-measurement cookie is placed, and the site uses no third-party analytics tool. This is why the banner shown on your first visit is purely informative: it does not ask for your consent, it informs you. Our traffic measurement works without cookies and is described in the "Audience measurement" section above.

Account security and sign-in attempt log

If you have a client account, we record every attempt to sign in to that account, whether it succeeds or not: the date and time, the IP address, the approximate location (city and country), the type of event (password, code sent by email, two-factor authentication, password reset) and, where an attempt fails, the reason for the failure. You can view your own events at any time in the "Sign-in activity" section of your client area.

This log also records attempts made against an email address that matches no account: without this, we would be unable to detect an attack or assess its scope. In that case the address entered is never kept in readable form, but only as an irreversible fingerprint. We record no password in any form, no one-time code, and no browser information. This processing relies on our legitimate interest in keeping accounts secure and detecting incidents (Article 6(1)(f) GDPR). This data is kept for 12 months and then deleted.

Client area (profile, quotes and invoices)

If you create a client account, we collect the information you enter in your profile (name or company name, individual/company profile type, SIRET or VAT number where applicable, address, country, phone, billing email) as well as your quote and invoice history. This data is used exclusively to manage our business relationship (preparing your quotes/invoices, contacting you) and is kept for the duration of that relationship, then for 10 years under the legal obligation to retain accounting records (Article L123-22 of the French Commercial Code). It is never sold or shared with third parties other than the site's technical host (see Legal Notice).

Referral program

If you join the referral program, we additionally collect your full identity, date of birth, address, phone number, and banking details (IBAN/BIC). This information, required by the program's terms, is used exclusively to verify that you are of legal age, to identify you and pay the commissions owed, it is never sold or shared with third parties, other than the bank required to execute the transfer. Banking details are encrypted in the database. This data is kept for the duration of your participation in the program, then under the same legal accounting-record retention obligations described above.

If you join the program as a corporate Referrer (company), instead of date of birth and banking details we collect your company name and registration number. We also keep the PDF invoice you send us for each commission, this document serves as accounting evidence of the corresponding expense and is kept under the same legal retention obligations for accounting records as the rest of our accounts.

Project requests and messages

When you describe a project from your client area, we retain the answers you provide (type of project, line of business, objectives, content you already have, indicative budget, deadline) together with the messages exchanged with us about that request. This information is used solely to understand your needs and to prepare a quote; it is neither sold nor used for advertising. It is retained for the duration of the business relationship, then for three years after the last exchange if no contract is concluded, and in line with the statutory retention periods for accounting records if a quote or invoice results from it.

Commercial prospecting

As part of its commercial activity, ZKYSolutions maintains a file of professionals (craftspeople, retailers, very small businesses) who may need a website or an application. The information recorded is the trading name, the trade, the town, the business email address and telephone number, together with the source of the lead and a record of our exchanges. This information comes from publicly accessible professional sources, shop sign, website, directory, storefront, and not from the person concerned; we tell you exactly where your details were found in our very first message. It is used solely to send you a commercial proposal, most often together with a mock-up designed for your business. This processing rests on our legitimate interest in making our services known to professionals likely to find them useful (article 6.1.f of the GDPR). This data is neither sold nor passed on to any third party. It is kept for thirty days from our last contact, then deleted.

At any time, and without having to give a reason, you may ask not to be contacted again by writing to contact@zkysolutions.com. We then immediately stop all prospecting towards you and delete your record. So that we can be certain never to approach you again, including if your details were to be found once more later on, we keep only a technical fingerprint of your email address and telephone number, together with the date of your request. This fingerprint cannot be used to reconstruct your details or to send you a message: it serves solely to check, before any send-out, that you have objected. It is kept for as long as we carry out prospecting, and you may ask for it to be deleted at the same address.

Your rights

In accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act, you have the right to access, rectify, erase, restrict, object to and port your personal data. You may exercise these rights by writing to contact@zkysolutions.com. You also have the right to lodge a complaint with the French data protection authority (CNIL), www.cnil.fr.