Privacy policy
Last updated: 12 October 2026
This English translation is provided for convenience. Only the French version is legally binding.
This policy explains what personal data IBSIA collects, why, how long it is kept and how to exercise your rights, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.
Data controller
IBSIA, a French simplified joint-stock company (SAS) registered with the Paris Trade and Companies Register under number 131 201 287, 66 avenue des Champs-Élysées, 75008 Paris, France — contact@ibsia.fr — +33 7 50 69 97 31.
Data we process
| Why | What data | Legal basis | How long |
|---|---|---|---|
| Answering your requests (form, email, phone) | Name, email, phone, profile (individual or business), service of interest, message | Pre-contractual steps taken at your request, or legitimate interest in answering your questions | 3 years after our last exchange |
| Issuing quotes, contracts and invoices, and running projects | Identity, contact details, billing and payment information | Performance of the contract and legal obligations | Duration of the relationship, then 10 years for accounting records |
| Hosting and securing the website | IP address and technical connection data | Legitimate interest: running the website and protecting it against attacks | Technical logs kept for a limited period by our hosting provider |
Fields marked with an asterisk in the form are required for us to reply. We never sell or rent your data, and we make no automated decisions about you.
Recipients
Your data is only accessible to authorised IBSIA staff and to our technical providers, within the limits of their tasks:
- Cloudflare, Inc.: website hosting and security, contact form processing;
- Resend: email delivery of contact form messages;
- our email service provider.
Transfers outside the European Union
Cloudflare and Resend are based in the United States. Data transfers to these providers are covered by the safeguards provided for by the GDPR: the European Commission’s adequacy decision (EU–US Data Privacy Framework) for providers that participate in it, or standard contractual clauses adopted by the European Commission.
Security
The website is served over HTTPS only and protected by strict security headers. Access to data is restricted to the people who need it.
Your rights
You can at any time access your data, have it corrected or erased, request restriction of its processing, object to its processing, request its portability and set instructions for what happens to it after your death. Email us at contact@ibsia.fr: we will reply within one month.
If you believe your rights are not being respected, you can lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).
Cookies
See our cookie policy.