A · Privacy Policy
Regulation (EU) 2016/679A.1 — Data controller. QueryDataFast SAS, 13 Allée du Château, 69540 Irigny, France, is the controller of personal data described here. Privacy questions, access requests and deletion requests are handled at [email protected]. There is no formal DPO; the managing director holds data-protection responsibility.
A.2 — Data we collect. When you open an order slip or correspond with the counter we collect your name, business email, phone number, company name, the content of your brief and any files you send. Our servers additionally record IP address, user agent and request time for security logging. We do not receive or store card numbers: card payments are handled entirely by our payment processor.
A.3 — Purposes and legal bases. Contact details and brief content are processed to answer your request and prepare a quote (Art. 6(1)(b) pre-contractual steps). Contract data is processed to deliver the engagement and invoice it (Art. 6(1)(b)). Security logs are kept to protect the service (Art. 6(1)(f) legitimate interest). Newsletter-style updates, where you opt in, run on consent (Art. 6(1)(a)) and can be withdrawn at any time.
A.4 — Retention. Enquiries not converted into an order are erased after 12 months. Contract, invoice and accounting records are kept for 10 years as required by French commercial and tax law. Security logs are rotated after 90 days. Data linked to a withdrawn consent is deleted within 30 days of the withdrawal.
A.5 — Recipients. Data is accessible only to QueryDataFast SAS staff and to processors bound by written instructions: our EU-hosted cloud infrastructure provider, our email provider, our accounting software and our payment processor. We never sell, rent or broker personal data. Where a client engagement requires a sub-processor list, it is attached to the statement of work.
A.6 — International transfers. Storage and processing take place within the European Economic Area. If a tool ever requires a transfer outside the EEA, we rely on Standard Contractual Clauses plus a transfer impact assessment before the tool is used.
A.7 — Your rights. You may request access, rectification, erasure, restriction, portability and objection, and may withdraw consent at any time, by writing to [email protected]. We answer within one month. You may also lodge a complaint with the CNIL (3 place de Fontenoy, 75007 Paris / cnil.fr).