Legal information
Privacy policy
Data Controller
The processing of personal data carried out in connection with the Aetomia website is managed by:
Vaïté SANCHEZ ARANCIBIA
Sole proprietor
Trade name: Aetomia
36 rue Gro Harlem Brundtland
59640 Dunkerque - France
SIREN: 984 606 558
SIRET: 984 606 558 00018
Email: contact@aetomia.com
Data Collected
Aetomia only collects the data necessary for the operation of its services.
Depending on how you use the website, the following data may be collected:
Contact form and project enquiries
- name;
- email address;
- company or project name, when provided;
- type of request;
- description of the project or request;
- current stage of the project;
- indicative budget;
- deadline;
- links or additional information voluntarily provided.
Account creation and management
- email address;
- name or display name, when provided;
- language and account preferences;
- information required for authentication and account management.
Purchases and orders
- email address;
- products or services purchased;
- order amount and currency;
- payment status;
- technical identifiers associated with the transaction.
Payments are processed by Stripe. Aetomia does not directly store your full payment card details.
Member Area and Training Courses
- products and resources you have access to;
- progress in training courses;
- lessons viewed or completed;
- downloads and information required for the operation of your personal area.
Newsletter and Free Resources
- email address;
- preferences or areas of interest, where provided;
- information relating to subscription and unsubscription.
Technical and Browsing Data
Certain technical information may be processed in order to ensure the operation, security and measurement of website usage, including pages viewed, actions performed, the source of a visit or technical information required to detect errors and abuse.
Purposes of Processing
The data collected may be used to
- respond to requests submitted through the contact form;
- review and qualify a project or service request;
- create and manage user accounts;
- provide access to purchased products, resources and training courses;
- manage orders, payments, refunds and invoices;
- record progress in training courses;
- send emails required for the operation of the service;
- send the newsletter when the user has subscribed to it;
- provide requested free resources;
- ensure the security and proper operation of the website;
- measure website usage and improve its content, services and user experience;
- comply with applicable legal, accounting and tax obligations.
Personal data is not sold to third parties.
Legal Bases
Depending on the nature of the processing, data is processed on one of the following legal bases:
- performance of a contract or pre-contractual measures, particularly for project enquiries, accounts, orders and access to products;
- the user's consent, particularly for newsletter subscriptions and trackers requiring consent;
- compliance with a legal obligation, particularly in accounting and tax matters;
- Aetomia's legitimate interest in ensuring security, preventing abuse and improving its services, provided that such interests do not override the rights and freedoms of users.
Recipients and Service Providers
Data is accessible only to persons and service providers who need to process it in order to provide the services offered by Aetomia.
Aetomia may notably use
- Supabase for the database, authentication and storage;
- Stripe for payment processing;
- the website hosting provider and infrastructure providers;
- a provider for transactional emails and newsletters;
- technical audience measurement tools when enabled.
These service providers process data only to the extent necessary to provide their services and in accordance with their obligations regarding data protection.
Hosting and Data Transfers
The main application data is hosted via Supabase in the region configured for the Aetomia project.
Some service providers used by Aetomia may process or transfer data outside the European Union or the European Economic Area.
Where such transfers take place, they are governed by mechanisms provided for under applicable data protection regulations, including adequacy decisions, the Data Privacy Framework where applicable, or Standard Contractual Clauses approved by the European Commission.
Data Retention
Data is retained only for as long as necessary for the purposes for which it was collected.
Contact requests and prospect-related data may be retained for a maximum period of 3 years from the last contact initiated by the person concerned.
Data associated with a user account is retained for the duration of use of the account, then deleted or anonymised when no longer required, subject to applicable legal retention obligations.
Data relating to orders, invoices and transactions may be retained for the periods required by applicable legal, accounting or tax obligations.
Data used for the newsletter is retained until the user unsubscribes or until it is no longer required for this purpose.
Certain data may be archived for an additional period where necessary to comply with a legal obligation or for the establishment, exercise or defence of legal claims.
Cookies and Audience Measurement
Aetomia does not use advertising cookies intended to create advertising profiles of users.
The website may use cookies or technical mechanisms that are strictly necessary for its operation, particularly for authentication, security and the storage of certain preferences.
Audience measurement tools may also be used to understand how the website is used and to improve its performance.
Where these tools require the user's consent, they are only activated after such consent has been obtained. Where the configuration used meets the conditions for an exemption from consent, the data collected is limited to what is necessary to measure and improve the operation of the website.
Security
Aetomia implements reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.
Access to sensitive data and administrative areas is restricted to authorised persons.
Your Rights
In accordance with applicable personal data protection regulations, you may, depending on your situation, exercise the following rights:
- right of access to your data;
- right to rectification;
- right to erasure;
- right to restriction of processing;
- right to object;
- right to data portability where applicable;
- right to withdraw your consent at any time where processing is based on consent.
To exercise your rights or ask a question regarding your personal data, you can contact:
Verification of your identity may only be requested where necessary to ensure that the request is genuinely made by the person concerned.
You also have the right to lodge a complaint with the French Data Protection Authority, the Commission nationale de l'informatique et des libertés (CNIL):
Changes to the Privacy Policy
This policy may be updated to reflect changes to the website, the services offered or applicable legal requirements.
The last updated date shown at the top of this page identifies the version currently in force.