Privacy & Security

Privacy Policy

1. Data Controller & Personal Information Collected

The controller responsible for processing your personal data is Alexandre Pabst EI (DevSupAi), based at 13 Allée des Roses, 55300 Saint-Mihiel, France (SIRET: 106 295 678 00010, email: contact@devsupai.fr, phone: +33 7 83 66 60 98).

When accessing devsupai.fr, and particularly when submitting an inquiry via the contact form, the following personal data may be collected:

  • Full name (to identify you and provide a personalized response)
  • Email address (to communicate with you and deliver proposals and technical documents)
  • Phone number (optional, to follow up by phone if requested)
  • Message content (detailing the scope, timeline, and expectations of your project)

2. Purposes & Legal Bases of Processing

Your personal data is processed under the following lawful bases and purposes:

  • Pre-contractual measures (GDPR art. 6.1.b): technical assessments, bespoke proposals, and preliminary exchanges.
  • Contractual performance (GDPR art. 6.1.b): delivering commissioned services, invoicing, and technical support.
  • User consent (GDPR art. 6.1.a): explicit agreement granted when willingly submitting the contact form.

No personal data is ever sold, leased, traded, or transferred to third parties for commercial advertising or marketing.

3. Data Retention Period

Inquiries not resulting in a contract are retained for a maximum of 3 years following our last communication. In the event of a contractual agreement, invoices and commercial contracts are archived for 10 years in compliance with statutory French accounting obligations (art. L. 123-22 of the French Commercial Code).

4. Your GDPR Rights & Supervisory Authority Complaint

In accordance with the General Data Protection Regulation (EU GDPR 2016/679) and applicable privacy laws, you hold the following rights regarding your personal information:

  • Right of access (art. 15 GDPR) and right to rectification (art. 16 GDPR).
  • Right to erasure (art. 17 GDPR, right to be forgotten).
  • Right to restriction of processing (art. 18 GDPR).
  • Right to data portability in a structured, machine-readable format (art. 20 GDPR).
  • Right to object to data processing on legitimate grounds (art. 21 GDPR).

You can exercise any of these rights at any time by sending an email to: contact@devsupai.fr. Requests are handled within a maximum of 30 days.

Supervisory Authority (CNIL):

If you consider that the processing of your personal data infringes privacy regulations after contacting us, you are entitled to file a complaint with the French data protection supervisory authority (CNIL) online at https://www.cnil.fr or by postal mail (3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07).

5. Security, Hosting & International Data Transfers

All connections to the website are encrypted end-to-end via SSL/TLS (HTTPS). Inquiries are routed through secured OVHcloud servers located in France.

Web hosting and edge distribution (CDN) are provided by Vercel Inc. (USA). Technical transfers required for global edge distribution are strictly governed by the EU-US Data Privacy Framework (DPF) and the Standard Contractual Clauses (SCC) adopted by the European Commission. Newsletter subscriptions and email dispatches are managed via Brevo (SAS Brevo, France), ensuring secure data storage within the European Union in full compliance with GDPR.