Legal notice & GDPR

Data controller

Naolis, SARL, SIREN 527 918 171, 37 rue Octave Gauthier, 41400 Le Controis-en-Sologne.

Contact: contact@naolis.com

Data collected

• First name, last name
• Business email
• Company name
• Phone (optional)
• Message and explicit consent

Purposes of processing

• Handling demo requests
• B2B commercial exchanges
• Prospect relationship follow-up
• Continuous improvement of service quality

Legal bases

Consent (Art. 6(1)(a) GDPR): via the checkbox in the contact form.

Legitimate interest (Art. 6(1)(f) GDPR): to handle professional requests and ensure commercial follow-up.

Recipients

Authorised Naolis internal teams and technical processors (hosting, emailing, automation) to the extent necessary for the purpose.

Transfers outside the EU

May occur depending on the tools used. Where so, they are governed by appropriate safeguards (standard contractual clauses or an adequacy mechanism in force).

Audience measurement

With your consent (the “Analytics” preference in the cookie panel), we measure site traffic with Google Analytics 4, loaded through Google Tag Manager (Google Ireland Limited). Until you accept, no Google measurement script is loaded and no data is sent. If you accept, two cookies are set (_ga and _ga_<identifier>) for at most 13 months; they are used to count visits and page views and to measure how the site is used (scrolling, button clicks, form submissions), without any form content. Visit counters and the source of your first visit are also kept locally in your browser, under the same consent. Data is kept for 14 months in Google Analytics. You can withdraw your consent at any time from “Manage my cookie preferences”: measurement stops and the cookies are deleted. Google may process this data outside the European Union, with appropriate safeguards (standard contractual clauses or an adequacy mechanism in force).

Spam protection for forms

To protect our forms against automated submissions, we use Google reCAPTCHA v3 (Google Ireland Limited), on the basis of our legitimate interest (Art. 6(1)(f) GDPR). It is only loaded when you start filling in a form, regardless of your audience measurement preferences. It assesses in the background whether the submission comes from a person, using technical information about your browser and your interaction, which is sent to Google. This data is subject to Google's Privacy Policy (policies.google.com/privacy) and Terms of Service (policies.google.com/terms).

Technical monitoring of the site

“Technical monitoring” is a separate, optional preference that you set in the cookie preferences panel. Until you turn it on, no monitoring data leaves your browser. If you turn it on, the diagnostic of errors encountered on the site is sent to Sentry, hosted by Naolis on its own infrastructure — no data is handed to a third-party service for this purpose. What is then sent: the browser, the operating system and the device type, the device's language and time zone, the page concerned, the error diagnostic and the trail of technical actions that preceded it. URL parameter values and form contents are stripped before sending. No cookie is set, no identifier follows you from one visit to the next, your browsing is not recorded and no performance measurement is collected. This preference is independent of audience measurement: accepting one does not enable the other, and you can change your mind at any time.

Retention periods

• Contact form data: 24 months from the last active commercial exchange.
• Non-identifying analytics data: 25 months maximum.
• Technical logs: 12 months maximum, unless a legal obligation requires otherwise.
• Technical monitoring events (Sentry), if that preference is enabled: 90 days.

Your rights

• Access to your data
• Rectification
• Erasure (“right to be forgotten”)
• Restriction of processing
• Objection
• Portability
• Withdrawal of consent at any time

Exercise your rights: contact@naolis.com

Complaint: you may lodge a complaint with the CNIL (French data protection authority) if needed.