Privacy policy

Controller

Omnitrack Labs, Moktar Elab, sole trader

Address

48 rue du Général Bourbaki, 31200 Toulouse, France

Contact

younes@omnitrack-labs.com

No data protection officer is appointed: the business falls under none of the cases where article 37 of the GDPR makes one mandatory. Requests are handled directly at the address above.

No cookies, no local storage, no browser fingerprint. That is why no banner met you on arrival: article 82 of the French Data Protection Act governs reading from and writing to your device, and nothing is written to yours.

The booking button takes you to cal.com, which is a different site with its own trackers and its own policy. For as long as you stay here, nothing is stored.

Traffic is measured with Cloudflare Web Analytics, which works without any client-side state. The following is collected in aggregate:

• the page viewed and the referring page
• an approximate country, derived from the IP address without storing it
• the type of device, browser and operating system
• load times and performance metrics

Cloudflare states that it uses no client-side state, neither cookies nor local storage, and does not fingerprint visitors from their IP address or browser. Raw data is kept for seven days, then aggregated. This processing rests on the legitimate interest in measuring the site's audience under article 6.1.f of the GDPR, and cannot identify you.

Booking a slot goes through Cal.com, Inc. What you enter there is collected by Cal.com and passed on to Omnitrack Labs:

• your name and email address
• the slot you chose and your time zone
• anything you add freely in the form

This processing rests on pre-contractual steps taken at your request, under article 6.1.b of the GDPR. Cal.com, Inc. is established in the United States: the transfer is covered by the European Commission's Standard Contractual Clauses.

If you write to the contact address, your message and your details are kept for as long as it takes to answer, on the basis of the legitimate interest in responding to a professional enquiry. These messages are never reused for automated prospecting.

Cloudflare, Inc. hosts the site and keeps connection logs, including the IP address, for a short period and solely to route requests and secure the service. This processing rests on the legitimate interest in keeping the service available and protected. The transfer to the United States is covered by the European Commission's Standard Contractual Clauses, incorporated into Cloudflare's data processing agreement.

Your data is never sold, rented or passed on for advertising. The only third parties with access are the providers the site needs to function, each acting as a processor:

• Cloudflare, Inc.: hosting and audience measurement
• Cal.com, Inc.: booking

Audience measurement

7 days raw, then aggregated

Bookings and exchanges

3 years from the last contact

Contractual and accounting records

10 years, legal obligation

Technical logs

short period set by the host

You have the right to access, rectify, erase, restrict, object and port your data, as well as the right to leave instructions on what happens to it after your death. Exercise them by email to the contact address; you will get an answer within one month.

If that answer does not satisfy you, you can lodge a complaint with the CNIL: 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or online at cnil.fr.

This policy may change, in particular if a new tool is added to the site. The date at the top marks the current version. Any change that reintroduced cookies would be clearly announced before anything was stored.