Privacy Policy

Data Controller

INYSTER EURL
Email : contact@inyster.com

Data Collected

We only collect data that you voluntarily provide through:

Contact form:

• First and last name
• Email address (required to send you a response)
• Company name (optional)
• Project type and estimated budget (optional)
• Free-form message (required)

Appointment booking (Calendly):

• First and last name
• Email address (required for booking)
• Phone number (required for booking)
• Company name (optional)
• Project type and estimated budget (optional)
• Free-form message (required)

Audience measurement (Umami + Google Analytics):

To improve the website, we use two complementary audience measurement tools. Umami is an open-source tool self-hosted on our own infrastructure in France, operating without any cookies. Google Analytics 4 (GA4), provided by Google Ireland Limited, is used as a complement for advanced traffic analysis and requires your consent. Both tools collect the following data:

• Pages visited and referral URL (referrer)
• Browser type and operating system
• Device type (desktop, mobile, tablet)
• Country of origin (inferred from IP address, which is neither stored nor retained)

Umami does not set any cookies and does not collect any personally identifiable data. In accordance with CNIL guidelines, Umami is exempt from prior consent requirements. Google Analytics 4 sets cookies (_ga, _ga_G-*) with a 2-year duration and requires your explicit consent before activation (Google Consent Mode v2). If you decline, only Umami remains active.

Google Analytics 4 specific data:

In addition to the data above, Google Analytics 4 sets the following cookies after your consent:

_ga (anonymous identifier, 2-year duration) and _ga_G-* (session identifier, 2-year duration). These cookies are used to distinguish unique users and analyze browsing paths. No personally identifiable data is collected.

Apart from the audience measurement described above, no other data is automatically collected during your browsing. Google Analytics cookies are only set after your explicit consent. We do not use tracking pixels or targeted advertising.

Advertising conversion measurement (landing pages only):

On our advertising landing pages (accessible only through our Google Ads campaigns, not listed in the site navigation), we use the Google Ads tag (gtag.js) to measure the effectiveness of our advertising campaigns. This tag may set conversion cookies only after your explicit consent. The data collected includes:

• Anonymous conversion identifier (linked to the advertising campaign)
• Visit and potential conversion timestamp
• Pages viewed on the landing page

These cookies are only set after your explicit consent (Google Consent Mode v2). If you decline, no advertising cookies are set and your browsing is not affected. This data is not cross-referenced with your personal data from the contact form.

Online Chat:

The online chat automatically collects the following technical data for logging purposes:

• IP address (anonymised after processing)
• User agent (browser and operating system)
• Conversation timestamp
• URL of the page from which the conversation was initiated
• Content of the conversation exchanges

Contact details (phone number, email address) are only collected when the visitor provides them voluntarily during an exchange.

Legal basis: legal obligation under the LCEN (Loi pour la Confiance dans l'Économie Numérique — French Digital Economy Act), which requires online service providers to retain connection data.

Retention period: 12 months, then automatic deletion.

AI processing: messages are processed by Microsoft Azure AI Foundry, with models deployed exclusively in France (Azure France Central region). Data does not leave France or the European Union for AI processing.

Chat logs are stored on OVH infrastructure (France).

No profiling is carried out based on chat data. This data is not shared with third parties beyond the data processing agreement (DPA) concluded with Microsoft Azure.

Purpose and Legal Basis

Data collected via the contact form is used solely to respond to your request and, where applicable, to prepare a commercial proposal.

The legal basis for processing is legitimate interest (Article 6.1.f of GDPR): responding to requests from prospects and potential clients.

Anonymous audience measurement data is used exclusively for statistical purposes to improve the website's usability and content. For Umami, the legal basis is the consent exemption provided by the CNIL (Article 82 of the French Data Protection Act). For Google Analytics 4, the legal basis is your consent (Article 6.1.a of GDPR).

Data Recipients

Your data is transmitted only to INYSTER (Christopher, founder). It is neither sold, rented, nor shared with third parties, except for the following technical subcontractors:

• Resend (Resend, Inc. — United States): contact form email delivery. Privacy Policy.
• Calendly (Calendly, LLC — United States): appointment booking management. Privacy Policy.
• Umami (self-hosted by INYSTER — France): audience measurement data is stored on our own infrastructure and is not shared with any third party.
• Google Ireland Limited (Ireland): audience measurement (Google Analytics 4) across the entire website and advertising conversion measurement (Google Ads) on landing pages, after explicit user consent. Privacy Policy.
• Microsoft Azure AI Foundry (Microsoft Ireland Operations Limited — Ireland): processing of online chat messages via AI models deployed exclusively in the France Central region (Azure). Data does not leave France for AI processing. Microsoft acts as a data processor under a Data Processing Agreement (DPA) and does not use the data for model training. Data privacy & security.

These subcontractors are subject to standard contractual clauses (SCCs) ensuring an adequate level of protection for data transferred outside the European Union, in accordance with GDPR.

Data Retention

Data from the contact form is retained for a maximum of 3 years from the last exchange, in accordance with CNIL recommendations.

Audience measurement data (Umami) is retained for a maximum of 25 months, in accordance with CNIL recommendations.

Google Analytics 4 data is retained for 14 months (Google's default). The _ga and _ga_G-* cookies expire after 2 years.

Cookies

The Umami audience measurement tool operates without any cookies. Google Analytics 4 uses the following cookies, set only after your explicit consent: _ga (anonymous identifier, 2-year duration) and _ga_G-* (session identifier, 2-year duration). Apart from these analytics cookies, only cookies strictly necessary for the technical operation of the website are used.

On our advertising landing pages only, Google Ads conversion measurement cookies may be set after your explicit consent. These cookies measure the effectiveness of our campaigns by recording clicks on call-to-action buttons (for example, booking a consultation). No personal data is collected directly by INYSTER through these cookies; the data is processed by Google in accordance with its privacy policy. You may decline these cookies without any impact on your browsing.

Your Rights

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access: obtain confirmation that your data is being processed and receive a copy
• Right to rectification: request correction of inaccurate data
• Right to erasure: request deletion of your data
• Right to data portability: receive your data in a structured format
• Right to object: object to the processing of your data

To exercise these rights, contact us at contact@inyster.com. We commit to responding within 30 days.

Complaint

If you believe that the processing of your data does not comply with regulations, you may file a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés).