DATA &PRIVACY.

Data controller

The controller of the personal data collected on this site is:

Jewel IT Solutions, SARL — Maison de la Technopole, 6 rue Léonard de Vinci, 53810 Changé, France

No Data Protection Officer (DPO) is designated: requests about your personal data are handled directly by the controller, via the contact form.

Data we collect

The only personal data collected on this site is what you enter in the contact form:

• Name
• Email address
• Message
• Subject (optional)
• Company (optional)
• Preferred language

Purpose and legal basis

This data is used solely to answer your enquiry and follow up on any resulting exchange. Processing is based on our legitimate interest (Article 6(1)(f) GDPR) in responding to people who contact us. Your data is never used for marketing without your consent.

Recipients and processors

Your data is processed by Microsoft, our processor, for email delivery (Azure Communication Services), website hosting (Microsoft Azure) and the business mailbox where your enquiry is stored (Microsoft 365 / Exchange Online).

Your contact data is stored in the European Union. We do not transfer your contact data outside the European Union: Microsoft processes it under its EU Data Boundary commitment.

There is no database and no CRM: your enquiry is stored only in our business mailbox.

Our application logs and telemetry contain no personal data — no name, no email address, no message.

Contact-form protection (anti-abuse)

To protect the contact form against bots and abuse, it uses a security challenge provided by Cloudflare, Inc. (Cloudflare Turnstile). Cloudflare is therefore a recipient of data — on the contact form only, nowhere else on this site.

This processing is based on our legitimate interest (Article 6(1)(f) GDPR) in protecting the contact form: it is a strictly necessary security measure. The challenge processes your IP address and technical characteristics of your browser and device. This data is processed only for the duration of the check; we never store challenge data ourselves — Cloudflare's handling as recipient is governed by its own privacy policy.

Cloudflare, Inc. is a US company: this transfer is safeguarded by Cloudflare's certification under the EU-US Data Privacy Framework and by standard contractual clauses (SCCs).

The challenge runs only when you interact with the form: merely reading the contact page sends no data to Cloudflare.

Your network address and the origin of your request may also be processed transiently, to detect abuse and keep the site and its contact form available — a strictly necessary security measure, on the same legitimate-interest basis. They are handled in a salted, unrecoverable form, are never stored in readable form and are never written to our logs.

Retention

Your enquiry is kept only as long as needed to handle it and any resulting exchange and, in any case, no longer than 12 months after the last contact; it is then deleted.

Your rights

Under the GDPR, you have the following rights over your personal data:

• Right of access — obtain a copy of the data we hold about you.
• Right to rectification — have inaccurate or incomplete data corrected.
• Right to erasure — ask us to delete your data.
• Right to restriction of processing — ask us to temporarily freeze the use of your data.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on our legitimate interest.

To exercise these rights, contact us through the contact form. Our email address is also published in the legal notice.

If you believe your rights are not being respected, you can lodge a complaint with the CNIL (the French data protection authority): www.cnil.fr

No profiling, no sale

Your data is not subject to any automated decision-making or profiling, and we never sell it.

Cookies and trackers

This site uses no non-essential cookies, no trackers and no client-side analytics. No consent banner is therefore required. This site’s information notice tells you of that absence of tracking: it asks you for nothing and records no decision — closing it means you have read it, nothing more. The contact form's security check (Cloudflare Turnstile, described above) sets no cookies and is exempt from consent as a strictly necessary security measure — reading the site remains entirely tracker-free.

Two strictly necessary items are saved on your device and shared with no third party: your language preference (ji-lang), so the site displays in the language you chose; and the fact that the information notice above has been seen (ji-notice), so it does not reappear on every visit. The second holds no identifier, no date and no decision — only a version marker for the statement above.