Data controller
Kreapp, SASU (French simplified joint-stock company with a sole shareholder) with a share capital of 1 000 €, registered with the Versailles Trade and Companies Register (RCS) under number 914 378 344. Registered office: 8 Le Hameau Saint-Hubert, 78860 Saint-Nom-la-Bretèche, France.
For any question about your data: contact@kreapp.com.
Contact form
When you write to us through the form, we receive: your first and last name, your organisation, your job title (optional), your email address, your situation, the description of your need and, if you provide it, the project's complexity.
This data is used only to answer your request and discuss your project with you. Legal basis: pre-contractual steps taken at your request and Kreapp's legitimate interest in replying to people who contact it.
Spam protection
To limit abusive submissions, each request is stored with a hashed fingerprint of your IP address (the address itself is not kept) and your browser type. Legal basis: Kreapp's legitimate interest in securing its site.
Audience measurement
Only with your consent, we use Google Analytics to measure and improve the site's traffic. No measurement cookie is set until you click “Accept”. Google's advertising features are disabled. Legal basis: your consent.
You can withdraw your consent at any time via the “Cookie settings” link at the bottom of every page; measurement cookies are then deleted.
Preferences stored in your browser
Your audience-measurement choice and the site language are stored in your browser (local storage). This information is not sent to us.
Recipients and service providers
Your data is intended for Kreapp. It is never sold or rented. We use the following technical providers, who process it on our behalf:
- Lovable: hosting of the site and of the database (provided by Supabase) where contact requests are stored.
- Resend: sending the email that forwards your request to us.
- Google: audience measurement (Google Analytics), only if you accept it.
Transfers outside the European Union
Some of these providers may process data outside the European Union, particularly in the United States. These transfers are covered by the safeguards provided by the GDPR, such as an adequacy decision or the European Commission's standard contractual clauses.
Retention periods
- Contact requests (including the IP fingerprint and browser): 3 years from the last exchange.
- Audience-measurement cookies: 13 months at most.
- Your cookie choice: 6 months, after which we ask again.
Your rights
You have the right to access, rectify, erase, object to, restrict and port your data, and to withdraw your consent at any time. To exercise these rights, write to contact@kreapp.com.
If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).