Privacy policy

Data controller

• WeeSoft
• Sole proprietorship (French micro-entreprise regime)
• Saint-Raphaël, France — SIRET 500 640 388 00079
• Contact: contact@weesoft.fr

Given the nature of the activity and the limited volume of data processed, WeeSoft is not required to designate a Data Protection Officer (DPO). Any question relating to data protection may be addressed to the contact above.

Data collected via the website

The weesoft.fr website is a static showcase site. It contains no contact form, no user account system, and no advertising tracker. Specifically:

• No cookies are placed on your device for advertising or analytics purposes.
• No personal data is collected by the mere act of browsing the site.
• If you write to contact@weesoft.fr, your contact details (email address, name if provided) and the content of your message are collected solely to respond to your request.

Purposes and legal basis

• Responding to a request sent by email — legal basis: legitimate interest (GDPR article 6.1.f) and, where applicable, performance of pre-contractual measures at the request of the data subject (article 6.1.b).
• Security and proper operation of the infrastructure — legal basis: legitimate interest (limited technical logs).

Retention period

• Email exchanges: kept for the duration of the relationship, then archived for a maximum of 3 years.
• Technical logs (host side): 12 months maximum.
• If a contractual relationship begins, data is retained as required by legal obligations (10 years for accounting records).

Recipients and processors

Your data is never sold, leased or shared with third parties for marketing purposes. The technical providers below may have indirect access to data for hosting and routing purposes:

• Google Cloud EMEA Limited (Ireland) — hosting of the website infrastructure.
• IONOS SE (Germany) — domain name registration and hosting of the email service associated with weesoft.fr (DNS, MX, SMTP, IMAP).

Transfers of data outside the European Union

IONOS SE is a German company: email data is processed within the European Union. Google Cloud's parent company is a US-based company; it may, in some cases, through its US entities, be subject to requests from US authorities (CLOUD Act). These transfers rely on the Standard Contractual Clauses approved by the European Commission, supplemented by additional technical and organisational measures:

• Google Cloud DPA — cloud.google.com/terms/data-processing-addendum
• IONOS DPA — ionos.com/terms-gtc/terms-privacy

Your rights

Under the General Data Protection Regulation (GDPR) and the French loi Informatique et Libertés, you have the following rights:

• Right of access to your data.
• Right to rectification.
• Right to erasure (the "right to be forgotten").
• Right to restriction of processing.
• Right to object.
• Right to data portability.
• Right to set guidelines regarding the fate of your data after death.

To exercise these rights, contact contact@weesoft.fr. A response will be provided within one month.

If you believe your rights are not respected, you may lodge a complaint with the French data protection authority (CNIL): cnil.fr/en/home .

Security

The site is served exclusively over HTTPS (TLS encryption). Mailboxes use the SPF, DKIM and DMARC standards. Administrative access to the infrastructure is protected by strong authentication.

Changes

This policy may be updated at any time to reflect legal, technical or organisational developments. The "last updated" date is shown at the top of this page.