A relationship built on trust.
Your data deserves it too.

Controller and contact

PACSAO, a French simplified joint-stock company being formed, represented for this website by Alexis Benelhadj. Proposed address: 3915 route de Saint-André, 81220 Teyssode, France. For questions or to exercise your rights: contact@pacsao.com.

Information and purposes

The form collects your name, company, email, project type and message. Your phone number is optional. Required fields are necessary to review your enquiry and reply. Please avoid sensitive or confidential information.

Service enquiries are processed to take pre-contractual steps at your request (GDPR Article 6(1)(b)). General enquiries and site security rely on our legitimate interests (Article 6(1)(f)). The form does not subscribe you to a newsletter. Any marketing follows applicable consent or objection rules and relates to your professional activity.

Retention periods

• Enquiries that go no further: deleted no later than 12 months after the last exchange, unless continued handling is justified.
• Marketing prospects: 3 years from collection or the last contact initiated by the prospect; simply opening an email does not restart this period.
• Clients: for the contractual relationship, then restricted archiving for legal obligations or legal claims; accounting records are retained for 10 years under applicable requirements.
• Objection to marketing: minimal data retained for 3 years to respect your choice, without other use.
• Technical security logs: 30 days. Anti-spam counters: no more than 1 hour, without message content.
• Encrypted backups: 7 daily, 4 weekly and 3 monthly copies; deleted data disappears as copies are replaced and is not used for routine purposes.

Recipients, hosting and email

Enquiries are intended for authorised founders Alexis and Cécile. The website and contact service are hosted by OVHcloud in Gravelines, France. Messages are sent using the Gmail API with OAuth to Alexis’s temporary inbox. Our public contact address is contact@pacsao.com. No Google password or token is sent to the visitor’s browser. No copy of the message is recorded in application logs.

Google processes messages to provide Gmail. This service may involve processing outside the European Economic Area. Safeguards and terms depend on the service and account used; see Google’s privacy policy and its transfer safeguards. We will update this policy when we switch to business email.

Your rights

Depending on your situation, you may request access, correction, deletion, restriction and portability, and object to processing, especially marketing. Write to contact@pacsao.com. We normally respond within one month; a justified extension may apply under the GDPR. You may complain to the CNIL.

Cookies and external services

The public website loads no analytics, advertising, remote fonts or embedded LinkedIn modules. Google Search Console verifies site ownership and provides aggregated search data, without adding tracking scripts to pages. Access to private development is protected by a password and an essential session cookie limited to 8 hours.