Privacy Policy

NeuraWeb (hereinafter "we", "our" or "NeuraWeb") is committed to protecting the privacy of users of its website https://neuraweb.fr. This privacy policy describes how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (GDPR).

The data controller is: **NeuraWeb** SIRET: 991 296 047 00020 Email: contact@neuraweb.fr Phone: +33 7 49 77 56 54

We collect the following data: **Data provided voluntarily:** - First and last name - Email address - Phone number - Company name - Contact message **Data collected automatically:** - IP address (anonymized) - Browser and device type - Pages visited and duration - Traffic source (via Google Analytics)

Your data is processed to: - **Respond to your requests**: processing contact forms and quote requests - **Improve our services**: anonymous analysis of site usage - **Commercial communication**: only with your explicit consent - **Legal obligations**: retention of billing data

The processing of your data is based on: - **Your consent**: for non-essential cookies and newsletter - **Contract execution**: for client project management - **Legitimate interest**: for improving our services - **Legal obligations**: for accounting data retention

Your data is retained for: - **Contact data**: 3 years after last contact - **Client data**: 10 years (accounting obligations) - **Analytics data**: 26 months (Google Analytics) - **Cookies**: 13 months maximum

Your data may be shared with: - **Vercel Inc.**: website hosting (United States) - **Google LLC**: analytics, only if you have consented to analytics cookies (United States) - **Mistral AI**: the site's conversational assistant — only the messages you send to the chatbot (France, European Union) - **Resend**: transactional emails - **Supabase**: booking database hosting We never sell your data to third parties.

Some data may be transferred to the United States (Vercel, Google, when consent to analytics cookies has been given). These transfers are governed by: - Standard contractual clauses of the European Commission - The EU-US Data Privacy Framework (DPF), which replaced the Privacy Shield invalidated by the Court of Justice of the European Union in 2020 Our conversational assistant relies on Mistral AI, a French company directly subject to GDPR. We ensure your data receives a level of protection equivalent to GDPR.

Under GDPR, you have the following rights: - **Right of access**: obtain a copy of your data - **Right to rectification**: correct inaccurate data - **Right to erasure**: delete your data - **Right to restriction**: restrict processing - **Right to portability**: receive your data in a structured format - **Right to object**: object to processing - **Right to withdraw consent**: at any time To exercise these rights, contact us at: **contact@neuraweb.fr** You can also file a complaint with the French data protection authority (CNIL): https://www.cnil.fr

Our site uses cookies: **Essential cookies (always active):** - Language preferences - Theme (light/dark) - User session **Analytics cookies (only with your consent):** - Google Analytics: anonymous audience measurement On your first visit, a banner lets you accept, reject, or customize these analytics cookies. No audience-measurement cookie is set before your consent. You can change your choice at any time via the "Manage cookies" link at the bottom of every page.

We implement appropriate security measures: - HTTPS encryption (TLS 1.3) - Security headers (CSP, HSTS, X-Frame-Options) - Restricted data access - Regular backups - Access monitoring

This policy may be updated. We will inform you of any significant changes by email or via a notification on the site. The last update date is indicated at the top of this page.

For any questions regarding this policy or your personal data: **Email**: contact@neuraweb.fr **Phone**: +33 7 49 77 56 54 We commit to responding within 30 days.