ÉquiporaThis translation is provided for information only; only the French version is legally binding. Read the French version
Privacy policy
Template to be completed and reviewed by the publisher: replace each [À COMPLÉTER] placeholder and check that the retention periods match your practices.
Last updated: [À COMPLÉTER : date]
Data controller
[À COMPLÉTER : raison sociale, adresse], reachable at [À COMPLÉTER : adresse e-mail dédiée aux données personnelles].
Data collected and purposes
| Processing | Data | Legal basis | Retention period |
|---|---|---|---|
| Responding to contact, demo and quote requests | Company, name, email, phone, headcount, message | Pre-contractual measures, legitimate interest | [À COMPLÉTER : ex. 3 ans après le dernier échange] |
| Shop customer account | Company, SIRET number, contact name, email, phone, password (hashed) | Performance of the contract | [À COMPLÉTER : durée de la relation + 3 ans] |
| Orders, invoicing, licence keys | Orders, amounts, keys, payment status | Legal obligation (accounting) | 10 years (accounting records) |
| Card payment | Processed directly by Stripe: the publisher never sees your card number | Performance of the contract | According to Stripe's policy |
| Security of the website and the shop | IP address, technical logs, sign-in attempts | Legitimate interest | [À COMPLÉTER : ex. 12 mois] |
Recipients
The data is intended for the publisher. Processors: website host [À COMPLÉTER], host of the publisher's server [À COMPLÉTER], email delivery provider [À COMPLÉTER], Stripe (online payment). No data is sold or transferred.
Transfers outside the European Union
[À COMPLÉTER : aucun transfert, ou garanties applicables (par exemple pour Stripe : clauses contractuelles types)]
Cookies and local storage
No advertising or audience measurement cookies. A strictly necessary session cookie (equipora.shop) is set when you sign in to the customer area; it is deleted when you sign out or when it expires. Your theme preference is saved in your browser's local storage and is never transmitted.
Data processed in the Équipora software
When you use Équipora installed on your own server, you alone are responsible for your employees' data: the publisher has no access to it. For the hosted offering (Équipora Cloud), the publisher acts as a processor within the meaning of Article 28 of the GDPR; a data processing agreement is attached to the contract [À COMPLÉTER].
Your rights
You have the right to access, rectify, erase, restrict, object to the processing of and port your data. Write to [À COMPLÉTER : adresse e-mail]. You may also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).