Privacy policy

Data controller

CoreFactor is responsible for the processing described in this policy. You can contact us at:

Data concerned

• Contact form: first name, last name, email address, optional phone number, and message content, as voluntarily provided by you.
• Newsletter: email address voluntarily provided when subscribing.
• Technical data: the website infrastructure and dashboard may record metadata such as the IP address, date and time, requested URL, browser or user agent, and error or security events.

Purposes and legal bases

• Responding to and following up on requests: steps taken before entering into a contract when the request concerns our services, or CoreFactor’s legitimate interest in managing professional relationships and responding to enquiries.
• Sending CoreFactor news: your consent, which you may withdraw at any time.
• Operating, diagnosing, and securing the website and its services: CoreFactor’s legitimate interest in protecting its infrastructure and, where applicable, compliance with relevant obligations.

Recipients

Data is accessible to authorised CoreFactor staff and to technical providers strictly required for hosting, the dashboard, email delivery, and the management of forms or the newsletter.

CoreFactor does not sell or rent this data and does not disclose it to advertising networks.

Retention

• Contact requests are retained for the time needed to process and follow up on them, and then as required by applicable legal obligations.
• The address used for the newsletter is retained until consent is withdrawn. Evidence of consent or objection may then be retained on a restricted basis for the time required to meet our compliance obligations.
• Technical logs are retained according to the hosting provider’s policy and for the time needed for security, diagnosis, and incident handling.

Your rights

Depending on the processing concerned and the conditions set by applicable law, you may request access, rectification, erasure, restriction, or portability of your data, and object to its processing.

You may withdraw your newsletter consent at any time without affecting processing already carried out. To exercise your rights, write to contact@corefactor.fr.

If you believe that your rights have not been respected, you may lodge a complaint with the French Commission Nationale de l’Informatique et des Libertés (CNIL).

Audience measurement and trackers

The website does not load any audience measurement or advertising tool. As there is no non-essential tracker, no consent banner is displayed. If this changes, this policy and the consent mechanism will be updated before any tracker requiring consent is used.

Policy changes

This policy may be updated to reflect changes to the website, our processing activities, or applicable obligations. The version published on this page is the version currently in force.