Legal Privacy policy

Privacy policy

This policy describes how NSY collects, uses and protects your personal data, in accordance with the General Data Protection Regulation (GDPR, EU Regulation 2016/679) and the French "Informatique et Libertés" Act.

Data controller

Company
NSY (EURL)
Legal representative
Cédric Barme
SIREN
842 078 453
Address
Epieds-en-Beauce, Centre-Val de Loire, France
Contact
contact@nsy.fr

NSY is a single-member structure with no designated DPO (not required under article 37 of GDPR). Cédric Barme personally handles requests related to personal data.

Data collected

The nsy.fr website only collects data that you submit voluntarily via the contact form:

  • Full name (required)
  • Business email (required)
  • Company (optional)
  • Phone (optional)
  • Service of interest (Technical consulting or Web creation · AI)
  • Project timeline
  • Description of your need (free text)

No other data is collected. The website uses no tracking cookies, no third-party analytics (no Google Analytics, Matomo, Plausible, etc.), and no advertising tracking pixels. See the Cookies section below for details on the single functional cookie used (language preference).

Processing purposes

The data collected is used exclusively to:

  • Respond to your contact or quote request
  • Reach out to clarify your need if necessary
  • Prepare a commercial proposal if your project is a good fit

Your data is never sold, shared, pooled or transferred to third parties for commercial purposes.

Legal basis

The processing is based on:

  • Pre-contractual measures taken at your request (article 6.1.b of GDPR), when you contact us regarding a potential engagement
  • The legitimate interest of the data controller (article 6.1.f of GDPR) for the administrative management and follow-up of the prospect relationship

Retention period

Your data is retained:

  • 3 years after the last contact if you do not become a client
  • 10 years after the end of the contractual relationship if you become a client (accounting obligations, article L. 123-22 of the French Commercial Code)
  • Received emails are deleted beyond these periods

Data recipients

Only Cédric Barme, as manager of NSY, has access to the data. No subcontractor intervenes on this data, except for:

  • Infomaniak Network SA (Switzerland, adequate country under GDPR) — host of the website and email provider

Your rights

In accordance with articles 15 to 22 of GDPR, you have the following rights:

  • Right of access — know what data we hold about you
  • Right to rectification — correct inaccurate data
  • Right to erasure ("right to be forgotten") — request the deletion of your data
  • Right to restriction of processing
  • Right to portability — retrieve your data in a structured format
  • Right to object to processing

To exercise these rights, send an email to contact@nsy.fr specifying your request. You will receive a response within a maximum of one month.

If, after contacting us, you believe your rights are not being respected, you may file a complaint with the French data protection authority CNIL.

Security

The nsy.fr website is served exclusively over HTTPS with an SSL certificate provided by Let's Encrypt via Infomaniak. Emails are processed on secure Infomaniak servers hosted in Switzerland.

NSY implements appropriate technical and organisational measures to ensure data security. However, as no system is infallible, NSY cannot guarantee absolute security.

Cookies

The nsy.fr website uses no tracking, session, analytics or advertising cookies. No prior consent banner is therefore necessary.

A single functional preference cookie is used:

Name Purpose Duration When is it set?
nsy_lang Remember your language choice (FR / EN) so you don't have to re-select it on every visit. 1 year Only when you click a 🇫🇷 / 🇬🇧 flag in the navigation.

This cookie is strictly necessary for the language selection functionality. It only contains a 2-character string (fr or en), carries no personal data, is never transmitted to any third party, and is attached only to your browser with the SameSite=Lax attribute.

In accordance with French CNIL deliberation no. 2020-091 of 17 September 2020, cookies intended to remember a choice expressed by the user (language preference) are exempt from the obligation to obtain prior consent, provided they are set on an explicit user action — which is the case here (clicking a flag).

You can delete this cookie at any time from your browser settings. The default language will then be re-detected from your browser's language preferences (Accept-Language header).

Updates

This policy may be updated at any time to reflect technical, legal or organisational changes. The date of the last update appears at the bottom of the page.

Last update: 2026