Privacy Policy

1. Data controller

The data controller is Yohann Dandeville, sole proprietor operating under the trade name YdvSystems (French business registration SIRET 534 080 783 00028), reachable at contact@ydvsystems.com.

2. Data collected

Contact form

When you use the contact form on ydvsystems.com, we collect your name, email address and message content. This data is used solely to respond to your inquiry.

SaaS platforms

When using our SaaS solutions, we collect the data necessary for creating and managing your account (name, email address, encrypted password) as well as the business data you enter in the application. This business data belongs to you and is processed in accordance with our service agreement.

Analytics

We use Umami, an open-source analytics tool self-hosted on our own servers. Umami does not set any cookies, does not collect any personally identifiable data and is fully GDPR-compliant. The data collected is anonymized and aggregated (page views, session duration, country of origin).

3. Processing purposes

Your data is processed for the following purposes: performance of the service contract (account management, provision of platform features), improvement of our services (anonymous usage analysis via Umami), and communication (responding to your contact requests, sending account-related information).

4. Legal basis

The processing of your data is based on the following legal grounds: contractual performance for data related to your account and platform usage, legitimate interest for anonymized audience analytics (service improvement), and consent for newsletter subscription.

5. Data retention

Account data is retained for the duration of the contract, plus 1 year after termination to allow for possible reactivation. Contact form data is retained for 3 years from the last exchange. Anonymized analytics data is retained for 26 months.

6. Subprocessors

In the course of providing our services, we use the following subprocessors: Hetzner Online GmbH (server and data hosting, Falkenstein, Germany), Brevo (transactional emails and notifications), and Umami (analytics, self-hosted on our Hetzner servers). None of these subprocessors have access to your business data.

7. Data transfers

All your data is hosted in Europe, on Hetzner servers located in Falkenstein, Germany. No data transfers outside the European Economic Area are made.

8. Your rights

Under the GDPR, you have the following rights regarding your personal data: right of access (obtain a copy of your data), right of rectification (correct inaccurate data), right of erasure (request deletion of your data), right to data portability (receive your data in a structured format), right to object (object to the processing of your data) and right to restriction of processing.

To exercise any of these rights, send your request by email to contact@ydvsystems.com.

9. Cookies

The ydvsystems.com website and SaaS platforms use only Umami for audience analytics. Umami does not set any tracking cookies and does not collect any personally identifiable data. We do not use any advertising cookies, social media cookies or third-party cookies. The only cookies that may be present are strictly necessary technical cookies for application functionality (authentication session).

10. Security

YdvSystems implements appropriate technical and organizational measures to protect your data: encrypted communications via HTTPS (TLS 1.3), encryption of data at rest, automated daily backups, server access restricted by SSH key and firewall, and passwords stored as secure hashes (bcrypt).

11. Policy changes

YdvSystems reserves the right to modify this privacy policy. In the event of a substantial change, users will be informed by email or by a notification on the website. The last updated date at the top of this page shall prevail.

12. Contact — Data Protection Officer

For any questions regarding the protection of your personal data, you can contact the data controller at contact@ydvsystems.com.