Privacy & cookie policy

This policy explains what personal data eucalex.com collects, why, how long we keep it and how to exercise your rights. We collect as little as we can, and nothing for advertising.

Who is responsible

EUCALEX is the controller of the data described below. For any question, or to exercise your rights, write to contact@eucalex.com. We have not appointed a data protection officer; your message will reach the person in charge.

What we collect and why

Contact form. When you use the form on the Contact page, we receive your name, email address, company (optional) and message, with the date and the IP address of your connection. We use them to answer you and to follow up any discussion that results. Legal basis: steps taken at your request before a possible contract, and our legitimate interest in answering business enquiries (GDPR, Art. 6(1)(b) and (f)). The message is kept in a file on our web server, in a folder blocked from web access, and is sent to our mailbox.

Self-assessment. The questionnaire on the Self-Assessment page is filled in and saved in your browser only. When you press “Calculate my results”, the answers you selected — the status and the deployment band, never your comments, your company name or your contact details — are sent to our web server to compute the score, and are used for nothing else: they are not stored, not written to any log and not linked to you. Nothing else reaches us unless you press “Send to EUCALEX”. If you do, and tick the consent box, we receive the report you filled in together with your name, email address, phone number (if you give one), company and site, plus the date and the IP address of your connection. We use them to read your report and answer you. Legal basis: your consent, and steps taken at your request before a possible contract (GDPR, Art. 6(1)(a) and (b)). The report arrives in our mailbox as an attachment; it is not stored on our web server. Only the record of your consent (name, address, company, date) is written to a file on the server, in a folder blocked from web access.

New-article emails. When you enter your email address in the “Stay informed” box at the end of an article and tick the consent box, we receive your email address, the date and time, the page you signed up from and the IP address of your connection. Your subscription starts at once, and we send you a welcome email with a link to unsubscribe in one click, so that the owner of an address entered by someone else can remove it straight away. After that, we send you our new articles and technical insights by email, at most once a week and only when there is something new. Legal basis: your consent (GDPR, Art. 6(1)(a)), which you can withdraw at any time with the unsubscribe link at the bottom of every email, by replying “unsubscribe” or by writing to contact@eucalex.com. The list of subscribers is kept on our web server, outside the part of the server that can be reached from the web, and each request is also recorded in a folder blocked from web access, as proof of your consent; we are notified in our mailbox of each subscription and unsubscription. The emails are sent from contact@eucalex.com through our host’s email service: we do not use an external mailing service. Our emails contain no tracking pixel and no tracked links: we do not know whether you open them or click on them.

Protection against abuse. To stop spam, the contact form and the new-article sign-up each accept at most five requests per hour from the same connection. To count them, it records the time of each message under a pseudonymised identifier derived from the IP address. Legal basis: our legitimate interest in keeping the service secure.

Job applications. The form on the Careers page sends nothing to our server: it opens your own email program with a pre-written message, and you decide what to send, including your CV. We use your application only to assess it. Legal basis: steps taken at your request before a possible contract.

Email, phone and WhatsApp. If you contact us directly, we use your details to answer you.

Audience measurement — only if you accept. If you click “Accept” in the cookie banner, we use Google Analytics to count visits and see which pages are read, so we can improve the site. It collects the pages you view, the date and time, the site you came from, the type of device and browser, an approximate location (country or city) and interactions such as scrolling, clicks on external links and file downloads. Google Analytics does not store IP addresses. We have not enabled any advertising feature, and sharing of this data with Google for its own purposes is turned off. Legal basis: your consent (GDPR, Art. 6(1)(a)), which you can withdraw at any time. If you click “Refuse”, Google Analytics is not loaded at all.

Technical logs. Like any web server, our host records technical data (IP address, date, page requested, browser) to operate and secure the site. Legal basis: our legitimate interest in running a secure website.

Fonts and tag manager. Our pages load the Sora and Inter fonts from Google Fonts, and Google Tag Manager. To deliver these files, Google receives your IP address and browser details. Google Tag Manager sets no cookie; it is the tool that starts Google Analytics, and only after you accept. Legal basis: our legitimate interest in a website that displays and works correctly.

Cookies and similar technologies

• eucalex-consent — stored in your browser (local storage), set by eucalex.com. Remembers whether you accepted or refused audience measurement, for 6 months; after that, we ask again. Strictly necessary, so it does not require consent.
• _ga — Google Analytics cookie that tells visitors apart. Lasts 2 years. Set only if you accept.
• _ga_PBPDZFYDV1 — Google Analytics cookie that keeps track of the current visit. Lasts 2 years. Set only if you accept.

You can change your choice at any time with the “Cookies” link at the bottom of every page, or with the button below. When you refuse or withdraw consent, the Google Analytics cookies are deleted and measurement stops.

Change my cookie choice

Who receives your data

• The EUCALEX team members who handle your request.
• Hostinger International Ltd (Cyprus), which hosts the site, the contact-form and sign-up files and the list of subscribers, and provides our email service (contact@eucalex.com), including the sending of new-article emails, acting on our behalf.
• Google, for Google Analytics (only after your consent), Google Tag Manager and Google Fonts.

We do not sell your data and do not use it for advertising.

Transfers outside the European Union

Google may process data in the United States. These transfers rely on the EU–U.S. Data Privacy Framework (European Commission adequacy decision of 10 July 2023), under which Google LLC is certified, and on the European Commission’s standard contractual clauses.

How long we keep your data

• Contact messages and business correspondence: as long as needed to handle your request, and at most 3 years after our last contact with you.
• Self-assessment reports you send us: as long as needed to handle your request, and at most 3 years after our last contact with you. The record of your consent is kept for 3 years.
• New-article emails: until you unsubscribe. The record of your request (address, date, page) is kept as proof of your consent for 3 years after you unsubscribe.
• Job applications: at most 2 years after our last contact with you, unless you join us.
• Google Analytics data: 2 months; cookies as listed above.
• Your cookie choice: 6 months.
• Technical logs: for the limited period set by our host.

Your rights

Under the GDPR and the French Data Protection Act, you can access your data, have it corrected or erased, restrict or object to its use, receive it in a portable format and withdraw your consent at any time. You can also give instructions on what should happen to your data after your death. Write to contact@eucalex.com; we answer within one month.

If you believe your rights have not been respected, you can lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).

Security

The whole site is served over HTTPS. The contact-form and sign-up files are kept in a server folder that is blocked from web access, and only EUCALEX can open them.

Changes to this policy

We update this page when our practices change. The date at the top shows the current version.