1. Who is responsible for your data?
The data controller is STRAYLD, a SASU with share capital of €1,000, registered under SIREN 934 430 547 with the Cusset Trade Register, whose registered office is at 13 Route d'Aurouer, 03460 Trévol, France.
Contact: contact@strayld.com
This policy describes how we handle personal data collected through the strayld.com website. It does not cover processing carried out within the HalgarOS application, which is documented separately.
2. What data do we collect?
Contact form
When you send us an enquiry through the site's form, we collect:
- your first and last name;
- your email address;
- your phone number;
- your company name (optional);
- your project description, together with any information you choose to include in it.
Required fields are marked with an asterisk. Please do not include sensitive personal data in the description field.
Booking a call
If you book a slot with us, the information needed to arrange the appointment (name, email address, chosen date and time) is processed by our scheduling tool, acting as a processor on our behalf.
Browsing
The site sets no analytics, advertising or tracking cookies. No consent banner is therefore required. As with any website, our host records technical connection logs (IP address, date and time of access, pages viewed) for security and service continuity purposes.
Fonts are served directly from our own server: no connection is made to any third-party service, and your IP address is not shared with anyone.
3. Why, and on what legal basis?
| Purpose | Legal basis | Retention |
|---|---|---|
| Responding to your enquiry and preparing a commercial proposal | Pre-contractual steps taken at your request (Art. 6(1)(b) GDPR) | 3 years from last contact, if no engagement follows |
| Arranging an appointment | Pre-contractual steps (Art. 6(1)(b) GDPR) | 3 years from last contact |
| Performing the contract and meeting accounting obligations, if you become a client | Performance of contract and legal obligation (Art. 6(1)(b) and 6(1)(c) GDPR) | Duration of the relationship, then 10 years for accounting records |
| Site security and technical logs | Legitimate interest (Art. 6(1)(f) GDPR) | Retention period applied by our host |
4. Who has access to your data?
Your data is processed by STRAYLD and is never sold, rented or transferred to third parties for commercial purposes.
It may be accessible to our technical providers, acting on our instructions as processors:
- Infomaniak Network SA (Switzerland) — website hosting and email;
- our appointment-booking tool, where applicable;
- where applicable, an accountant for documents falling within their remit.
Your data may also be disclosed to administrative or judicial authorities where required by law.
5. Does your data leave the European Union?
Our data is hosted in Switzerland, a country covered by a European Commission adequacy decision, which guarantees a level of protection equivalent to that of the European Union.
Beyond this hosting arrangement, no transfer of your data outside the European Union takes place when you browse the site.
6. What are your rights?
Under the General Data Protection Regulation and the French Data Protection Act, you have the following rights:
- Right of access: to confirm whether your data is being processed and obtain a copy of it;
- Right to rectification: to have inaccurate or incomplete data corrected;
- Right to erasure: to request deletion of your data, subject to our legal retention obligations;
- Right to restriction: to request that processing be temporarily suspended;
- Right to object: to object to processing based on our legitimate interest;
- Right to portability: to receive your data in a structured, machine-readable format;
- Right to give instructions regarding the fate of your data after your death.
To exercise these rights, write to contact@strayld.com. We will respond within one month. Proof of identity may be requested where there is reasonable doubt as to the identity of the requester.
If, after contacting us, you believe your rights have not been respected, you may lodge a complaint with the French data protection authority, the CNIL: 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.
7. Security
We implement appropriate technical and organisational measures to protect your data: encrypted transmission over HTTPS, access restricted to authorised persons only, hosting with a professional European provider, and minimisation of the data we collect.
8. Changes
This policy may change, particularly as our services or the applicable regulations evolve. The date of the latest update appears at the top of this page. We encourage you to review it from time to time.