Privacy Policy

GREENBOOST is operated by [[À COMPLÉTER : raison sociale]], a [[À COMPLÉTER : forme juridique, ex. SASU, EURL]] registered in France under SIREN/SIRET number [[À COMPLÉTER : numéro SIRET]], with its registered office at [[À COMPLÉTER : adresse du siège social]].

GREENBOOST acts as the data controller (“responsable de traitement”) for the personal data described in this policy.

We collect the following categories of personal data:

• Contact form data — name, email address, company name (optional) and the content of your message, submitted voluntarily when you send a project brief, ask a question, or otherwise use the contact form.
• Booking data — when you book a discovery call through our Cal.com scheduling tool, Cal.com collects your name, email address and any details you choose to share about your project.
• Technical data — your IP address is processed transiently for security purposes (rate-limiting the contact form against abuse); it is not stored beyond what is strictly necessary for that purpose.

We do not knowingly collect any special category data (health, political opinions, etc.), and the Site is not directed at children.

We process your personal data on the following legal bases:

• Performance of pre-contractual measures (Art. 6(1)(b) GDPR) — when you send a project brief or request a quote, so that we can respond to your request.
• Legitimate interest (Art. 6(1)(f) GDPR) — to answer general enquiries sent through the contact form, and to keep the Site and contact form secure (e.g. rate-limiting against spam and abuse).
• Consent (Art. 6(1)(a) GDPR) — where applicable, for any non-essential cookies (see Section 7).

• Contact form and project brief messages that do not lead to a client engagement are kept for up to 3 years from your last interaction with us, in line with CNIL guidance on commercial prospecting data, after which they are deleted or anonymised.
• If your enquiry results in a signed engagement, related data is kept for the duration of the business relationship, plus any additional period required by applicable legal, accounting or tax obligations.
• Booking data processed via Cal.com is kept only for as long as necessary to organise and follow up on the call, subject to Cal.com's own retention policy.
• IP addresses used for contact form rate-limiting are held transiently in server memory and are not persisted.

Access to your personal data is limited to GREENBOOST team members who need it to respond to your request. We also rely on the following processors (“sous-traitants”) to operate the Site:

• Hosting: [[À COMPLÉTER : nom de l'hébergeur]], [[À COMPLÉTER : adresse de l'hébergeur]] — hosts the Site and the data transiting through it.
• Resend — used to deliver contact form submissions to our team by email.
• Cal.com — used to manage discovery call bookings.
• [[À COMPLÉTER : éventuel outil d'analytics/CRM/emailing]], if and when such a tool is introduced.

We do not sell your personal data. Where a processor is located outside the European Union, transfers are carried out under appropriate safeguards (such as the European Commission's Standard Contractual Clauses).

Under the GDPR and the French Data Protection Act, you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate or incomplete data;
• Request erasure of your data;
• Object to processing carried out on the basis of legitimate interest;
• Restrict processing in certain cases;
• Request portability of the data you provided to us;
• Withdraw your consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.

To exercise these rights, contact us using the details in Section 8. If you believe your rights are not respected, you also have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés) at www.cnil.fr.

The Site does not currently use any analytics or advertising cookies. Only strictly necessary technical mechanisms are used to make the Site work, such as the temporary, non-persistent measures described in Section 2 to protect the contact form against abuse.

If you choose to book a discovery call, the embedded Cal.com widget may set its own cookies once it loads, governed by Cal.com's own privacy and cookie policy.

Should GREENBOOST introduce an analytics tool in the future ([[À COMPLÉTER : nom de l'outil d'analytics, si applicable]]), this section will be updated accordingly, resulting data will be kept for a maximum of 13 months in line with CNIL recommendations, and, where required, your consent will be requested beforehand via a cookie banner.

For any question about this policy, or to exercise your rights, you can contact us at: [[À COMPLÉTER : email de contact DPO]], or by post at our registered office (see Section 1).

We may update this Privacy Policy from time to time, in particular to reflect changes in our practices or in applicable law. The date at the top of this page indicates when it was last revised. We encourage you to review this page periodically.