Legal information

Privacy policy

This page describes the data processed when you visit crisis-orbit.fr, why it is processed, and how to exercise your rights.

The essentials

The only cookies on this site are those of audience measurement, and they are placed only with your agreement. None is used for advertising, none for cross-site tracking, and no profiling is carried out.
Two audience measurements run side by side, under different rules: one writes nothing to your device and runs for everyone, the other - Google Analytics - places cookies and starts only once you have accepted. You can change that choice at any time from the footer.
Fonts and images come from the site's own domain. Three exceptions, cookieless audience measurement, the anti-robot check on the forms and Google Analytics audience measurement: The cookieless measurement is loaded from Cloudflare servers, from the first page read. The anti-robot check is loaded from Cloudflare servers, and only at the point where you start filling in a form - never on simply reading the page. Google Analytics is loaded from Google servers, and only after you have accepted: if you refuse, or if you do not answer, no request is ever sent to Google.
The demonstration request form sends your information to our contact address alone. Nothing is kept beyond the handling of your enquiry.
No data is sold, rented or transferred for commercial purposes.

Data controller

The data controller is SECALYS, a SASU with share capital of 15 000 €, whose registered office is at 2 rue des Iris, 85750 Angles, registered under SIREN number 999766892.

For any question about your data, write to contact@secalys.fr.

Processing carried out

Six processing activities apply to this site.

Site delivery

Data concerned: IP address, user agent, page requested and timestamp
Purpose: Deliver the pages requested, protect the site against attacks and robots.
Legal basis: The publisher's legitimate interest in providing an available and secure site.
Retention: Technical logs kept by Cloudflare and SCALEWAY according to their own retention periods. The cookie placed on that occasion is described below.

Audience measurement

Data concerned: display performance measurements, page viewed, referring page and browser type
Purpose: Understand which pages are viewed and detect performance problems, in the form of aggregated statistics.
Legal basis: The publisher's legitimate interest in improving its site. You may object at any time.
Retention: detailed data kept for 7 days, then aggregated

Google Analytics audience measurement

Data concerned: page viewed, referring page, device and browser type, approximate country inferred from the IP address, and a random identifier placed on your device that makes your browser recognisable from one visit to the next. If you use the pricing calculator, the configuration you build there is added: the plan, billing period, term, number of entities, options selected and the step of the journey reached. None of the information you enter afterwards - organisation identifier, registered name, signatory contact details - is sent to Google
Purpose: Understand how the site is used - pages viewed, journeys, traffic sources - in order to improve its content and organisation. Google Analytics advertising features and Google Signals are switched off: the data is used neither for advertising nor for targeting.
Legal basis: Your consent, collected through the banner shown on your first visit. You can withdraw it at any time from the "Cookies and local storage" section of this page: measurement stops and the cookies already placed are erased.
Retention: Fourteen months from your last visit, the maximum retention set on the property. The cookies placed expire no later than two years after they were last written, and are erased immediately if you withdraw your consent.

Anti-robot check on the forms

Data concerned: IP address and technical browser signals, sent at the point where you submit a form.
Purpose: Prevent automated submissions, which would saturate our inbox and stop genuine enquiries reaching us.
Legal basis: The publisher's legitimate interest in protecting a means of contact against automated abuse.
Retention: Kept by Cloudflare, according to its own retention periods. None of this data is kept by us, and the mechanism writes nothing to your device.

Online subscription

Data concerned: The organisation's SIREN or SIRET identifier, registered name, legal form, address and VAT number, then the signatory's first and last name, job title, work telephone number and email address, the capacity in which they bind the organisation, the delegation document where you attach one, the billing details, the configuration ordered, and acceptance of the contractual documents.
Purpose: Draw up the order form, then issue and collect the invoices. The SIREN or SIRET identifier you enter is sent to the public business register kept by the French State, in order to retrieve your organisation details and save you re-entering them. A one-time code is sent to the signatory's email address, to check that it is indeed theirs.
Legal basis: Performance of the contract you are subscribing to, and the publisher's legal obligation regarding invoicing and the retention of accounting records.
Retention: The term of the contract, then ten years for accounting and contractual records, in accordance with article L123-22 of the French Commercial Code.

Demonstration request and email exchanges

Data concerned: First and last name, email address, organisation, nature of the need and message content, as you enter them in the form or send them to us by email.
Purpose: Answer your enquiry and, where relevant, arrange a demonstration.
Legal basis: Pre-contractual steps taken at your request.
Retention: Three years from the last contact, unless a contractual relationship has begun in the meantime.

Cookies and local storage

4 pieces of information are written to your device. Two of them serve audience measurement and are placed only with your agreement; the others are strictly necessary to the service you asked for, which exempts them from your prior consent. None serves advertising or cross-site tracking.

Display preference
Remember the light or dark theme you chose, so as to give it back to you on your next visit.
Type
Local storage
Duration
Until you erase it
Technical identifier
orbit-theme
Your choice on audience measurement
Remember that you accepted or refused Google Analytics audience measurement, so the question is not put to you again on every page. It is written as soon as you answer, whichever way you answer.
Type
Local storage
Duration
Until you erase it
Technical identifier
orbit-consentement
Audience measurement identifier
Tell visitors apart, so as to count visits rather than page views. Placed by Google Analytics, and only if you accepted audience measurement.
Type
Cookie
Duration
Two years after the last visit
Technical identifier
_ga
Audience measurement session
Group the pages you view into a single visit. Placed by Google Analytics, and only if you accepted audience measurement.
Type
Cookie
Duration
Two years after the last visit
Technical identifier
_ga_QR5YB5S0LK

You can erase this information at any time from your browser settings, or browse in private mode. The site will remain fully usable.

For audience measurement, the surest route is to change your choice below: the cookies concerned are erased, and are no longer placed unless you accept again.

Recipients and processors

The data is accessible only to authorised staff at SECALYS. Four providers are involved as processors, in connection with delivering the site and routing your enquiries:

SCALEWAY: Site hosting, in France (Paris).
Cloudflare: Delivery, protection against attacks, audience measurement, and routing of the enquiries and orders submitted through the forms. European Union data localisation is enabled on the delivery service.
Microsoft: Hosting of the mailbox that receives the enquiries and orders submitted through the forms, the documents attached to them, and the exchanges that follow.
Google: Audience measurement for the site, at your request only. Involved solely if you accepted audience measurement, and no longer involved if you withdraw that agreement.

No data is passed on for advertising or commercial purposes, nor transferred to a third party.

Transfer outside the European Union

Google Analytics audience measurement involves a transfer of data to Google LLC in the United States. That transfer is covered by the EU-US Data Privacy Framework, to which Google LLC is certified, and by the European Commission’s standard contractual clauses. It takes place only if you accepted audience measurement; absent that, no data leaves the European Union.

Your rights

Under Regulation (EU) 2016/679 and French Act no. 78-17 of 6 January 1978, you have the following rights:

Of access: obtain a copy of the data concerning you.
Of rectification: have inaccurate data corrected.
Of erasure: ask for your data to be deleted.
To restriction: ask for a processing activity to be temporarily frozen.
To object: object to processing based on legitimate interest.
To portability: receive your data in a reusable format.

To exercise them, write to contact@secalys.fr. You will receive a reply within one month.

If, after contacting us, you consider that your rights are not being respected, you may lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or at cnil.fr.

Updates

This policy may change if the processing changes, in particular if a new tool were put into service or if the routing of enquiries were modified. The version in force is the one published on this page.