Privacy policy
I collect only what is necessary, solely to reply to you. Your data is neither shared nor sold. Here, in plain terms, is what that means.
Last updated: 7 August 2026 · Courtesy translation; the French version prevails.
1. Data controller
The controller of the data collected on this site is Evolibra, a French simplified joint-stock company (SASU) with share capital of €1,000, represented by Julien Mariani, with its registered office at 3 rue de Montigny, 77240 Cesson, France, registered with the Melun Trade and Companies Register under number 941 632 929. For any question about your data: contact@evolibra.com.
2. What data is collected
We only collect data you send us voluntarily via the contact form:
- your first name (optional);
- your email address;
- the subject of your enquiry and the content of your message.
The "message" field is free text. We do not ask you for any sensitive data and invite you not to share any at this stage: a few lines are enough to arrange a first conversation.
To prevent automated submissions, the site stores a fingerprint of your IP address, computed with a secret key. This fingerprint is pseudonymised data: it does not identify you directly, but it remains personal data under the GDPR. It is never linked to the content of your message and serves two purposes: limiting the number of submissions within a single day, and making it possible to establish abusive use of the form after the fact. It is deleted after 30 days. The legal basis for this processing is legitimate interest (Article 6.1.f GDPR): protecting the form against abuse and ensuring the security of the site. Connection logs may also be processed by the host for security purposes.
3. Why this data is used
Your data is used solely to:
- reply to your enquiry and contact you;
- where applicable, prepare an engagement (pre-contractual steps);
- ensure the security and monitoring of the site.
4. Legal basis
Processing is based on your consent, obtained by ticking the box provided before submitting the form (Article 6.1.a GDPR). You may withdraw it at any time, without having to give a reason — see section 7.
5. Retention period
Your contact data is kept for as long as needed to handle your enquiry, then deleted at the latest 12 months after our last exchange, unless an engagement continues — in which case the retention periods specific to that relationship apply — or unless you request deletion earlier. Contractual and accounting documents are kept for the applicable statutory periods.
6. Recipients
Only the site publisher has access to your data. No third-party form processing service is involved: your message is delivered directly to our mailbox, without being stored on the website's server.
Two technical providers are involved, both acting as processors under the GDPR:
- Hostinger International Ltd (Cyprus, European Union) hosts the website. Your message passes through its server while being sent, without being stored there.
- Proton AG (Switzerland) hosts our mailbox and therefore stores your message once received. Switzerland benefits from an adequacy decision of the European Commission: your data is protected there at a level equivalent to the GDPR.
No transfer takes place to a country without an adequacy decision. Your data is never sold or transferred to third parties for commercial purposes.
7. Your rights
Under the GDPR and the French Data Protection Act, you have the following rights:
- right of access;
- right to rectification;
- right to erasure ("right to be forgotten");
- right to restriction of processing;
- right to object;
- right to data portability;
- right to withdraw your consent at any time.
To exercise these rights, email contact@evolibra.com. A reply will be provided within one month at most.
8. Complaint
If, after contacting us, you believe your rights are not respected, you may lodge a complaint with the CNIL: www.cnil.fr — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.
9. Cookies
This site is designed to run with a minimum of cookies. It uses no advertising cookies or non-essential third-party trackers. Only cookies strictly necessary for the site to function may be placed; these do not require consent.
10. Security
The site is served entirely over an encrypted connection (HTTPS). The form is processed by the website's own server, and the message is transmitted to our mailbox over an authenticated, encrypted connection. No database stores your messages. Reasonable technical and organisational measures are in place to protect your data against unauthorised access, alteration or disclosure.