Privacy policy

Purpose

Flutilliant places particular importance on respecting your privacy and processes your data strictly within the framework of the GDPR and French Act No. 78-17 of January 6, 1978, as amended. This policy informs you of: the data collected, its use, who has access to it, the retention period, our cookie practices, and the rights available to you.

Data controller

The data controller is the company Flutilliant (SAS), whose registered office is at 12 rue Louis Courtois de Viçose, Immeuble Pyrénéa, 31100 Toulouse, France.

For any question about your data or to exercise your rights: contact@flutilliant.com.

Data collected

Data you provide to us

When you fill in a contact form, book an appointment or subscribe to our newsletter, we collect:

• Identity — first and last name.
• Contact details — email address, phone number.
• Professional context — name of your company or organization, and the content of your message.

Data collected automatically

While you browse, and subject to your consent for non-exempt tools (see the Cookies article), we measure in aggregate form: pages viewed, source of visit (search engine, email, direct link), device and browser type. This data helps us understand the site's audience, never to identify you individually.

Purposes & legal bases

We only process your data for specified purposes, each based on a legal basis within the meaning of Article 6 of the GDPR:

• Responding to your contact and appointment requests — basis: pre-contractual measures / legitimate interest in responding.
• Sending the newsletter — basis: your consent, withdrawable at any time via the unsubscribe link.
• Measuring and improving the site's audience — basis: legitimate interest for exempt measurement (cookieless Matomo), consent for non-exempt measurement (Google Analytics).
• Meeting our legal obligations — basis: legal obligation.

No additional data is collected without informing you beforehand.

Retention periods

Your data is not kept longer than necessary for the intended purpose:

• Contact requests / prospects — up to 3 years from the last contact left without follow-up.
• Newsletter subscribers — until you withdraw your consent (unsubscribe).
• Client data — for the duration of the contractual relationship, then according to applicable legal retention obligations.
• Audience measurement — aggregated data kept for a period not exceeding that recommended by the CNIL (25 months maximum).

Sharing & processors

Your data is neither sold, rented, nor transferred to third parties for commercial purposes. It may be:

• Accessible internally only to Flutilliant staff who need it for the intended purpose.
• Processed by technical subprocessors acting on our instructions and offering GDPR-compliant safeguards: hosting (OVH, France), audience measurement (self-hosted Matomo; Google Analytics, subject to consent), appointment booking (online scheduling tool).
• Disclosed if required by law — legal obligation, court proceedings, or protection of Flutilliant's rights.

Security & location

We implement reasonable technical and organizational measures to protect your data against loss, unauthorized access, alteration or disclosure: encryption of exchanges (HTTPS), access controls, trusted hosting.

Your rights

In accordance with Articles 12 to 23 of the GDPR, you have the following rights over your data:

• Access — obtain a copy of the data concerning you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request the deletion of your data.
• Restriction — temporarily restrict processing.
• Portability — retrieve your data in a structured format.
• Objection — object to processing, in particular to prospecting.
• Withdrawal of consent — at any time, without retroactive effect.

To exercise these rights, write to contact@flutilliant.com. A response will be provided as soon as possible and no later than one month. You may also lodge a complaint with the French data protection authority, the CNIL.

Cookies & audience measurement

A cookie is a small file placed on your device when browsing a site. The site uses two audience-measurement tools:

• Matomo — a sovereign, self-hosted solution, configured without cookies and anonymized. It falls under the consent exemption recognized by the CNIL and runs without identifying you.
• Google Analytics 4 — sets cookies; activated only after your explicit consent, collected via the banner shown on your first visit.

You may accept or decline these cookies at any time: your choice is kept on your device and can be changed by clearing the site's data in your browser, which also lets you be notified of cookies or block them (see cnil.fr). Declining does not affect access to content.

Changes to this document

This policy may be amended to stay compliant with the law or to reflect a change in our processing. The date of last update appears at the top of the page; we invite you to consult it regularly. For any question: contact@flutilliant.com.