Privacy policy | orgatypik

1. Data controller

The controller of the data collected on this website is orgatypik, a simplified joint-stock company (société par actions simplifiée) with a share capital of €5,000, whose registered office is at 9 passage Bourguignon, 31130 Balma, France.

For any question about your personal data, you can write to contact@orgatypik.fr or use our contact form.

No data protection officer has been appointed: neither the nature, nor the volume, nor the purpose of our processing requires one under Article 37 of the GDPR.

Your requests about your personal data are handled by Charley Fredaigues, President, at contact@orgatypik.fr.

2. Data we collect

We only collect the data you choose to send us. The website has three forms, and no other means of collection: the request for a free strategic interview, the application to the collective (in French), and the general contact form (in French).

Strategic interview form

Required : first name, last name, business email address, job title, a description of your situation and your organizational challenges, as you write it.
Optional : telephone number, company name, headcount.

Collective application form

Required : first name, last name, email address, nature of your request, description of your background.
Optional : telephone number, area of expertise, region.

The form receives no file: if your background interests us, we ask you for your résumé (curriculum vitæ) in reply, by email.

We never ask whether you have been diagnosed as gifted, nor any data about your health. If that subject matters to you, it is discussed in person.

General contact form

Required : first name, last name, email address, subject of your request, message.

What happens to your messages

The forms are processed by the website's own server, with no third-party service: your message is sent by email to our mailbox, and is stored neither on the server nor in a database. To rule out automated submissions, the server counts recent submissions in a pseudonymized form: an encrypted fingerprint of the IP address, the name and the email address, never their value in clear, and the time of submission. These counters are no longer used after 24 hours and are then purged. The form's operating log contains no personal data. No captcha is used.

Technical data

The connection logs kept by our host (IP address, date and time of the request, page requested), for security and for the proper operation of the website. We do not consult them, and we draw no statistics from them.

We collect no sensitive data within the meaning of Article 9 of the GDPR, and the website is not intended for minors.

3. Purposes and legal bases

Each processing operation rests on an identified legal basis.

Answering your request for an interview and getting back to you: legal basis, the performance of pre-contractual measures taken at your request (Article 6.1.b of the GDPR).
Ensuring the security and proper operation of the website: legal basis, our legitimate interest in protecting our infrastructure (Article 6.1.f).

The website does not measure its audience. No traffic statistics are produced, either by us or by a third party.

Your data is not used for any commercial prospecting without your prior agreement, and is not subject to any automated decision-making or profiling.

4. Retention periods

Contact requests with no follow-up: the time needed to handle your request, then one year from the last exchange.
Applications not accepted, résumé included if we asked for one: 24 months from the last contact.
Data linked to a contractual relationship: for the whole duration of the relationship, then in accordance with the applicable legal retention obligations, in particular accounting ones.
Connection logs kept by our host: 12 months at most.

These periods are those our host applies to its own equivalent processing. They stay within the limits recommended by the CNIL, the French data protection authority.

5. Recipients of your data

Your data is processed by orgatypik and is neither sold, nor rented, nor passed on to third parties for commercial purposes.

It may be accessible to our technical providers, who act as processors and are bound by contract within the meaning of Article 28 of the GDPR:

our host: OVH SAS, 2 rue Kellermann, 59100 Roubaix, France;
our email provider: Proton AG, Switzerland.

There is no other. The forms go through no third-party service, and the website uses no audience measurement tool.

6. Transfers outside the European Union

Your data is hosted in France, by OVH SAS.

The emails you send us pass through Proton AG, established in Switzerland. Switzerland is covered by an adequacy decision of the European Commission: this transfer is governed on that basis, with no additional safeguard required.

This transfer is the only one. The website does not measure its audience, uses no third-party service for its forms, and serves its fonts from its own servers. No other data leaves the European Union.

7. Your rights

Under the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés), you have the following rights over your data:

Right of access: obtain confirmation that your data is being processed, and receive a copy of it.
Right to rectification: have inaccurate or incomplete data corrected.
Right to erasure: ask for your data to be deleted, within the limits provided by law.
Right to restriction: ask for a processing operation to be temporarily frozen.
Right to object: object to processing based on our legitimate interest, on grounds relating to your particular situation.
Right to data portability: receive your data in a structured, machine-readable format.
Right to withdraw your consent at any time, where processing is based on it.
Right to set directives about what happens to your data after your death.

To exercise these rights, write to contact@orgatypik.fr. We reply within one month. Proof of identity may be requested if there is reasonable doubt about your identity.

If, after contacting us, you believe your rights are not being respected, you can lodge a complaint with the French data protection authority, the Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, 75007 Paris, France, or online at cnil.fr.

8. Cookies and trackers

This website sets no cookie and uses no tracker. It does not measure its audience, displays no advertising, and embeds no social network button.

No consent is therefore required, and you will see no banner asking for one on this website.

The fonts are served from our own servers. Loading fonts from a third-party service would send your IP address to that service: we do not do it.

9. Security

We put in place appropriate technical and organizational measures to protect your data against destruction, loss, alteration, disclosure or unauthorized access: encryption of exchanges over HTTPS, restricted access to data, and regular updates of the website's components.

10. Changes to this policy

This policy may be changed to reflect a change in our processing or in the regulations. The date of the last update is shown at the top of the page. In the event of a substantial change, we will inform you by an appropriate means.

Contact us

For any question about this policy or your personal data: contact@orgatypik.fr.