Privacy policy
What we collect, why, how long we keep it, and who else has access to it. Plainly: if a piece of data is not listed here, we do not hold it.
Who is responsible for your data
The company Les Artisans du Rendez-Vous, a French simplified joint-stock company (SAS) whose registered office is at 40 avenue André Diligent, 59100 Roubaix, operating the Traxo service, is the controller of the processing described on this page.
No data protection officer has been appointed: the company exceeds none of the thresholds that would require one. Any request concerning your data is handled at contact@traxo.fr.
What we collect, and why
Each row corresponds to something you do. We build no file bought or enriched elsewhere.
| What you do | What we collect | Legal basis · retention |
|---|---|---|
| You ask for your website or a call back | Name, business, trade, telephone, email, town, message | Legitimate interest in answering your request · 3 years after the last contact |
| You become a client | Contact details, business, account credentials, content you publish on your website | Performance of the contract · the term of the subscription, then 3 years |
| You pay for your subscription | Amounts, invoices, payment status. Card details are entered at Stripe and do not pass through our servers | Performance of the contract and accounting obligation · 10 years for accounting records |
| You book an appointment with us | Name, email, chosen slot, through the embedded Cal.com module | Legitimate interest in arranging the conversation · 1 year |
| You write in the website's chat | Content of the conversation, email address if you leave one | Legitimate interest in replying to you · 1 year |
| You view a page of the website | Cookieless audience measurement: page viewed, previous page, where the link came from (utm parameters), device type, browser, country. Nothing is written on your device | Legitimate interest in measuring the website's audience · 25 months |
| You open the demonstration website prepared for your business | The same measurements, linked to your business: date opened, the channel the link reached you through, steps of the guided tour, pages viewed afterwards on traxo.fr | Legitimate interest in business prospecting · 25 months, or until you object |
| You simply visit the website | Technical server logs: IP address, page requested, timestamp | Legitimate interest in the security of the service · 6 months |
No field marked as optional is needed to get an answer. We collect neither health data nor sensitive data within the meaning of the GDPR, and the service is not intended for minors.
Who else has access
Internally, only the people who need it in order to reply to you or to run the service. Externally, only the providers below, each bound by a processing agreement compliant with Article 28 of the GDPR:
| OVH SAS | Hosting of the website and of the data — France |
| Stripe | Collection of subscriptions and of your clients' payments, fraud prevention — Ireland and United States |
| Cal.com | Online appointment booking — European Union and United States |
| Live chat | Conversations started from the website — European Union |
Audience measurement does not appear in this table because it has no recipient: the tool that produces it runs on our own servers, alongside the website, and that data is passed on to nobody.
We do not sell, rent or exchange any data. It may be disclosed to a third party in two cases only: a judicial or administrative order we are required to comply with, and the transfer of accounting records to our accountant.
Transfers outside the European Union
Your data is hosted in France. Two providers — Stripe and Cal.com — may process certain data in the United States. Those transfers are governed by the European Commission's standard contractual clauses and, where applicable, by those companies' certification under the EU–US Data Privacy Framework.
Your rights
You have the right of access, rectification, erasure, restriction, objection and portability over your data, as well as the right to withdraw consent already given and to give directions on what becomes of your data after your death.
A request to contact@traxo.fr is enough, with no formality. We reply within one month, extendable by two months if the request is complex, in which case we tell you so. Proof of identity may be requested where there is reasonable doubt as to who you are, and for that purpose alone.
If our answer does not satisfy you, you may refer the matter to the Commission nationale de l'informatique et des libertés, the French data protection authority: 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or cnil.fr.
Security
Traffic encrypted over HTTPS, passwords stored as hashes, access to data limited to authorised staff, regular backups and hosting in European data centres. In the event of a data breach likely to create a risk to your rights, we notify the CNIL within 72 hours and inform you directly where the risk is high.
Changes to this policy
This page is updated as soon as a processing activity or a provider changes. The date at the top of the page indicates the latest version. A change that concerns you directly — a new purpose, a new recipient — is notified to you by email if you are a client.
Want to know what we hold about you, or ask for it to be deleted? An email is enough.
Exercise my rights