PRIVACY POLICY

Privacy Policy

1. Controller

The controller within the meaning of the EU General Data Protection Regulation (GDPR) is:

Calanque Computing (SAS)
Zone Athelia II, 45 Avenue Coriandre
13600 La Ciotat
France
Email: privacy@calanque.com

2. General

We treat your personal data confidentially and in accordance with the GDPR, French data protection law, and this privacy policy. This website is a closed offering: the application itself is accessible only to invited users after signing in. The publicly accessible pages use no analytics, tracking, or advertising services and embed no content from third-party servers; fonts are served from our own servers.

3. Hosting and server log files

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in a data centre in Nuremberg, Germany. We have concluded a data processing agreement with this provider pursuant to Art. 28 GDPR.

When you visit the website, the server automatically records information in so-called server log files, which your browser transmits automatically:

  • IP address of the requesting device
  • date and time of access
  • requested page or file and volume of data transferred
  • referrer URL (previously visited page)
  • browser type and version, operating system

This data is not merged with other data sources. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the technically sound delivery, stability, and security of the website (e.g. detection and mitigation of attacks). Log files are deleted after 14 days, unless a specific incident requires longer retention.

4. Cookies and local storage

We use only strictly necessary cookies and similar storage techniques. A consent banner is therefore not required (Art. 5(3) of the ePrivacy Directive; Art. 82 of the French Data Protection Act — Loi Informatique et Libertés). In detail:

  • Session cookies for signing in: When you log in, cookies are set that maintain your authentication state and protect the session against misuse (including session and CSRF protection cookies of our sign-in system). They expire when you log out or when the session ends.
  • Language (cookie): If you choose a language on the site, the choice is kept for one year in a cookie named lang, so that the pages appear in that language on your next visit. It contains only the language code.
  • Display preference (localStorage): The colour theme you choose on the sign-in page is stored locally in your browser under the key cc_login_theme. This value remains on your device and is not transmitted to us.

The legal basis for the processing connected with signing in is Art. 6(1)(b) GDPR (performance of the usage relationship) and Art. 6(1)(f) GDPR (secure operation of the service).

5. User accounts and sign-in

The application can only be used with a personal user account, which we set up by invitation. In doing so we process the data belonging to the account (name or username, email address, sign-in times). Authentication is handled by our self-operated single-sign-on system; no data is transmitted to third parties. The legal basis is Art. 6(1)(b) GDPR. Account data is deleted when the account ends, unless statutory retention obligations require otherwise.

6. Contact by email

If you contact us by email, we process the information you provide (email address, content of the message) in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to entering into or performing a contract, and otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). The data is deleted once it is no longer needed to handle the enquiry and no retention obligations apply.

7. Recipients and international transfers

Your data is not transferred to third parties, with the exception of the hosting provider named in section 3 acting as our processor. No data is transferred to countries outside the European Union or the European Economic Area.

8. Your rights

As a data subject, you have the following rights:

  • access to the data processed about you (Art. 15 GDPR)
  • rectification of inaccurate data (Art. 16 GDPR)
  • erasure (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • objection to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)

To exercise these rights, an informal email to privacy@calanque.com is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR) — in particular with the French supervisory authority, the CNIL (Commission Nationale de l'Informatique et des Libertés, 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr), or with the supervisory authority of your habitual residence.

9. Encryption

For security reasons and to protect the transmission of confidential content, this website uses TLS encryption. You can recognise an encrypted connection by the fact that the address line of your browser starts with "https://​".

10. Changes to this privacy policy

We will update this privacy policy whenever changes to the website or legal requirements make it necessary.
Last updated: November 2026