Skip to content
ORTHODROMECONSULTING
GDPR

Privacy policy

How your personal data is processed, in compliance with the GDPR.

Data controller

Orthodrome Consulting (details in the legal notice). Point of contact: contact@orthodrome.fr.

Data collected & purposes

Contact form: name, email, company, message — to handle and answer your request (legal basis: pre-contractual steps taken at your request, art. 6.1.b GDPR).

Client area: identity and project data — to perform the service (legal basis: contract).

Client-area security logs: IP address, date and type of authentication event — to protect accounts and detect fraudulent access (legal basis: legitimate interest in securing the service).

Retention period

Contact requests: 24 months, then automatic deletion. Security logs: 12 months, then IP anonymisation. Client data: duration of the contractual relationship, plus applicable statutory retention obligations.

Your rights

Access, rectification, erasure, restriction, portability, objection — exercised by writing to contact@orthodrome.fr. Complaints may also be lodged with the CNIL.

Processors & sovereignty

Providers located within the European Union only (OVHcloud France hosting, EU transactional email). No transfers outside the EU.