Template documentThis page is a structural template — the language must be reviewed by qualified counsel before going live, especially around legal bases, sub-processors, and international transfers. Use it as scaffolding, not as a final policy.
01 — Who we are
VEORIA SAS, a French simplified joint-stock company registered at the RCS of Le Mans under number 922 240 510, with registered office at 45 Grande Rue, 72450 Montfort-le-Gesnois, France, is the data controller for personal data collected through veoria.fr.
Contact: hello@veoria.fr
02 — What data we collect
We collect personal data only when you actively provide it. Specifically:
Demo requests and contact forms
- Identity — full name, job title
- Contact — work email, phone (if provided), company name, country
- Business context — press type, web width, color workflow, monthly volume
- Free-text message describing your use case
Newsletter subscriptions
- Email address only — used for sending editorial content
Browsing data (with consent)
- Pages visited, referring URL, approximate location, browser and device technical information, collected through Google Analytics 4 — only when you accept analytics cookies (see our Cookie policy)
03 — Why we collect it
- To respond to your demo or contact request
- To send you the newsletter you subscribed to
- To understand how our site is used and improve it
- To meet legal and accounting obligations
04 — Legal basis
Under GDPR Article 6, we rely on:
- Legitimate interest — for responding to your demo requests, since you actively initiated the contact
- Consent — for newsletters and analytics cookies, which you can revoke at any time
- Contractual necessity — for customers under contract with VEORIA
- Legal obligation — for invoicing, accounting, and statutory record-keeping
05 — Who we share it with
We do not sell, rent, or trade your data. We share it strictly with the following categories of recipients, all bound by data protection agreements:
- Pipedrive — CRM hosting your contact and demo request records
- Resend — transactional email provider for delivery confirmations
- Google Ireland Ltd — Google Analytics 4 audience measurement, only where you have accepted analytics cookies
- Vercel — hosting infrastructure for veoria.fr
- Our internal team — sales, engineering, and support staff who need access to fulfil your request
Some of these providers are located outside the European Union (notably the United States). In such cases, data transfers are governed by the EU Standard Contractual Clauses, the EU–US Data Privacy Framework, or equivalent safeguards. For Google Analytics specifically, IP addresses are truncated before storage and Google Signals, ad personalisation and cross-device tracking are disabled.
06 — How long we keep it
- Contact & demo request data — 3 years from last contact, then anonymised or deleted
- Newsletter subscriptions — until you unsubscribe
- Customer contract data — duration of the contract + 5 years for statutory obligations
- Analytics data — 13 months maximum
07 — Your rights
Under GDPR, you have the right to:
- Access the personal data we hold about you
- Request rectification of inaccurate data
- Request erasure of your data (right to be forgotten)
- Restrict or object to processing
- Request data portability
- Withdraw consent at any time
- Lodge a complaint with a supervisory authority — for France, the CNIL (cnil.fr)
To exercise these rights, write to hello@veoria.fr with proof of identity. We respond within one month.
08 — Contact & complaints
For any privacy question or to exercise your rights: hello@veoria.fr.
If you believe we have not addressed your concern satisfactorily, you may lodge a complaint with the French data protection authority (CNIL) at cnil.fr.
