Privacy Policy

1. Introduction

Cimalys ("we", "our", or "us") operates cimalys.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

Nicolas Lejeune
Cimalys
Email: nlej@cimalys.com

3. Information We Collect

3.1 Information You Provide

When you submit our contact form, we collect:

• Name
• Email address
• Company name (optional)
• Message content

3.2 Automatically Collected Information

We may collect:

• IP address
• Browser type and version
• Device information
• Pages visited and time spent on pages

4. How We Use Your Information

We use the collected information to:

• Respond to your inquiries and provide customer support
• Send you information about our services
• Improve our website and services
• Comply with legal obligations

5. Legal Basis for Processing (GDPR)

We process your personal data based on:

• Consent: When you submit the contact form
• Legitimate interests: To respond to inquiries and improve our services
• Contract performance: To provide services you've requested

6. Data Storage and Security

Your data is stored securely using:

• Netlify: Form submissions are stored on Netlify's secure servers
• n8n: Workflow automation for email processing

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, typically:

• Contact form submissions: Up to 2 years or until you request deletion
• Client data: For the duration of the business relationship plus 7 years for legal/tax purposes

8. Your Rights Under GDPR

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we use your data
• Portability: Receive your data in a structured format
• Object: Object to processing based on legitimate interests
• Withdraw consent: At any time, without affecting prior processing

To exercise these rights, contact us at nlej@cimalys.com

9. Third-Party Services

We use the following third-party services:

• Netlify: Website hosting and form handling
• n8n: Workflow automation

These services have their own privacy policies and may collect data independently.

10. Cookies

Our website may use essential cookies for functionality. We do not use tracking or advertising cookies without your explicit consent.

11. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place, such as Standard Contractual Clauses.

12. Children's Privacy

Our services are not directed to individuals under 16. We do not knowingly collect data from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date will reflect the most recent changes. We encourage you to review this policy periodically.

14. Contact Us

For questions about this Privacy Policy or to exercise your rights, contact:

Nicolas Lejeune
Email: nlej@cimalys.com

15. Supervisory Authority

If you believe we have not addressed your concerns, you have the right to lodge a complaint with your local data protection authority.