Privacy policy

Who is responsible for your data

BONE IT, registered office at 27 avenue de la Baltique, 91140 Villebon-sur-Yvette, France, is the controller for the processing described here. For any question, write to .

What we collect, and why

The site collects only what you type into it, plus a technical fingerprint used to protect the forms. There is no account, no profiling, and no reconstruction of your browsing.

Contact form: your role, surname, first name, work email address, telephone number and the description of your request. This data is used to answer you and to prepare the first conversation. The legal basis is the performance of pre-contractual steps taken at your request.

Newsletter subscription: your email address and the language of the page you subscribed from. This data is used to send you a monthly analysis. The legal basis is your consent, which you may withdraw at any time.

Form protection: to prevent automated submissions, we record a fingerprint of your IP address when a form is sent. That fingerprint is the result of an irreversible calculation, your address itself is never stored, and it is used only to count recent submissions in order to cap them. The legal basis is our legitimate interest in protecting the site.

How long we keep it

• Contact requests: three years from our last exchange.
• Newsletter subscriptions: until you withdraw your consent, then three years as proof of that consent.
• Form protection fingerprints: twenty-four hours, then automatic deletion.

Who has access

Your data is accessible to the BONE team answering you, and to the technical providers that run the site. It is neither sold, rented, nor passed on for commercial purposes.

• Vercel Inc. (United States) hosts the site. The resulting transfers outside the European Union are covered by the European Commission’s standard contractual clauses.
• Supabase holds the database and the files, on infrastructure located in the European Union (Ireland).
• The OpenStreetMap Foundation supplies the map imagery on the contact page: displaying that map sends your IP address to its servers.

Cookies

The site sets no analytics, advertising or social network cookies. Only the administration area, reserved for the team, uses a session cookie required to sign in. No consent banner is therefore displayed.

Your rights

You have the right to access, rectify, erase and port your data, as well as the right to object to and restrict its processing. You may withdraw your consent to the newsletter at any time.

To exercise these rights, write to . You will receive a reply within one month. If that reply does not satisfy you, you may refer the matter to the French data protection authority (CNIL), 3 place de Fontenoy, 75007 Paris, cnil.fr.

Security

Exchanges with the site are encrypted. Access to submitted data is restricted to administrator accounts, protected by a password and by two-factor authentication with a one-time code.

Changes to this policy

This policy is updated whenever the processing changes. The date of the last update appears at the top of the page.