Article 1 – Purpose
This privacy policy informs users of the CASEOR website (https://www.caseor.com) about how their personal data is collected, used and protected by Angélique CHAPUIS (EI), in accordance with the GDPR (EU 2016/679) and the French Data Protection Act of 6 January 1978, as amended.
Article 2 – Data controller
- Name: Angélique CHAPUIS (EI)
- Trade name: CASEOR
- Address: 200 RUE DE LA CROIX NIVERT, 75015 PARIS
- Email: angelique@caseor.com
Article 3 – Data collected
3.1 Categories
- Identification data: name, email, phone number
- Professional data: status, business information (business clients)
- Payment data: information required for service payment
- Navigation data: IP address, cookies, connection history
- Session data: personal information voluntarily shared (treated with absolute confidentiality)
3.2 Collection methods
- Contact or booking forms on the website
- Online payment and booking
- Email, phone or session exchanges
- Cookies and trackers during browsing
Article 4 – Processing purposes
- Booking, payment and invoicing management
- Client communication (confirmation, follow-up)
- Service and user experience improvement
- Legal and regulatory compliance
- Anonymous navigation analytics
- Newsletter (with express consent)
Article 5 – Legal basis
- Consent: newsletter subscription, non-essential cookies
- Contract performance: payment and service delivery
- Legal obligation: invoice retention (10 years)
- Legitimate interest: user experience improvement, site security
Article 6 – Data recipients
Data is accessible only to Angélique CHAPUIS (EI) and is not sold to third parties for commercial purposes.
It may be shared with:
- Technical providers: host (Cloudflare), database (Neon), integrated booking module, email service (Resend)
- Legal authorities when required by law
No data is sold, rented or transferred for advertising purposes.
Article 7 – Retention period
- Active client data: business relationship duration + 5 years
- Billing data: 10 years (legal accounting requirement)
- Non-converted contact data: 3 years from last contact
- Cookies and navigation data: 13 months maximum (CNIL recommendation)
- Newsletter data: until unsubscription
Article 8 – Data security
CASEOR implements appropriate technical and organizational security measures. The site is hosted on Cloudflare's secure infrastructure. The database is hosted on Neon (serverless PostgreSQL), with encryption at rest and in transit.
Article 9 – User rights
Under the GDPR, you have the following rights:
- Right of access
- Right to rectification
- Right to erasure
- Right to portability
- Right to object
- Right to restriction
- Right to withdraw consent
To exercise these rights: angelique@caseor.com
If unsatisfied, you may contact the CNIL: www.cnil.fr
Article 10 – Cookies
- Essential cookies: required for site operation. No consent required.
- Analytics cookies: traffic analysis via Cloudflare Web Analytics (privacy-friendly).
A consent banner is displayed on first visit, in accordance with CNIL recommendations.
Article 11 – Newsletter
Newsletter subscription requires express consent. Each email includes an active unsubscribe link.
Article 12 – Changes
CASEOR reserves the right to modify this policy at any time. Changes take effect upon publication on the site.
Article 13 – Contact
For any questions: angelique@caseor.com