Legal
Privacy policy
CLAZA IT takes the protection of personal data seriously. This policy explains which data is processed when you use claza.cloud, why, and how to exercise your rights under Regulation (EU) 2016/679 (GDPR) and the amended French Data Protection Act of 6 January 1978. This English version is a courtesy translation; the French version prevails.
Data controller
CLAZA IT, SASU with a share capital of €1,000, RCS Bobigny 999 855 646, 5 rue du Roussillon, 4th floor, apartment A42, 93330 Neuilly-sur-Marne, France, represented by Houssem Ben Dhaou, President.
Contact for any question about your data: [email protected].
CLAZA IT is not required to appoint a data protection officer (DPO); the President is your direct point of contact.
Data collected
Contact form. Name, business email address, company (optional) and message, together with the page language, the selected profile if any (e.g. "CIO / CTO") and the page address. When you use one of the website's tools (self-assessment, FinOps estimate, configurator) and then choose to send your request, a summary of the result is attached to the message.
Emails. The data you send when writing directly to [email protected].
Technical data. On every visit, the hosting provider and the content delivery service log connection data (IP address, date and time, requested page, browser) for security and operational purposes.
The interactive tools run entirely in your browser: nothing is sent until you click a send button.
Purposes and legal bases
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| Answering your request, preparing a proposal | Pre-contractual steps taken at your request (6.1.b) |
| Following up the business relationship and sending professional information related to your role | CLAZA IT's legitimate interest in developing its business (6.1.f) |
| Securing the website and preventing abuse | Legitimate interest (6.1.f) |
You may object at any time, without giving reasons and free of charge, to receiving commercial information, by replying to a message or writing to [email protected].
No automated decision-making or profiling with legal effects is carried out.
Recipients
Your data is intended solely for CLAZA IT. It is never sold or transferred. It is processed on CLAZA IT's behalf by the following technical providers:
| Provider | Role | Location |
|---|---|---|
| Scaleway SAS | Hosting of the website, the request automation tool (n8n) and the CRM (Twenty), both self-hosted by CLAZA IT | France |
| Cloudflare, Inc. | Content delivery, protection against attacks | European Union and United States |
| OVH SAS | Email ([email protected]) | France / European Union |
Any transfers to the United States (Cloudflare) are covered by the European Commission's EU-US Data Privacy Framework adequacy decision, to which Cloudflare has self-certified, and by standard contractual clauses.
Retention periods
- Requests that do not lead to a contract (prospects): 3 years from your last contact, then deleted.
- Customers: for the duration of the contract, then 5 years (general limitation period); accounting records are kept for 10 years (Article L123-22 of the French Commercial Code).
- Technical connection data: 12 months maximum.
Cookies and local storage
The website uses no cookies, no audience measurement tool and no advertising trackers, which is why no consent banner is shown.
To remember your display preferences, the website stores the following in your browser's local storage (localStorage), only if you change them, and in its session storage (sessionStorage), which is deleted when the tab closes:
| Key | Content |
|---|---|
claza.theme | Chosen light or dark theme (local storage) |
claza.motion | Reduced-motion preference (local storage) |
claza.persona | Selected profile (CIO / CTO, CISO / security, CFO / finance, Executive leadership) (local storage) |
claza.logo | Records that the homepage logo animation has already played, so it is not repeated (session storage, deleted when the tab closes) |
This information stays on your device, is never transmitted and is strictly necessary for the service you request. It is therefore exempt from consent (Article 82 of the French Data Protection Act). You can delete it at any time by clearing this site's data in your browser.
Fonts are served from the website's own server: no request is sent to a third-party font service.
Your rights
You have the right to access, rectify, erase, restrict and port your data, and the right to object. You may also give instructions regarding your data after your death.
To exercise these rights, write to [email protected]. You will receive a reply within one month. Proof of identity may be requested if there is reasonable doubt.
If, after contacting us, you believe your rights have not been respected, you may lodge a complaint with the CNIL (French data protection authority), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr.
Security
Data is hosted in France with Scaleway, transmitted only over encrypted connections (HTTPS) and accessible only to CLAZA IT and the processors listed above.
Changes
This policy may change. The date of the last update is shown at the top of the page.