Privacy policy

Last updated: August 2026

Data controller

Data collected

The data you voluntarily provide through the contact form is collected:

First and last name
Email address
Company name
Message content

Audience and conversion measurement

The website measures only aggregated events needed to improve it: contact clicks, bookings, email clicks, opening or using the assistant, and successful form submissions. The event type, page path, language and a general source category are recorded. No name, email, message content, advertising identifier, cookie or fingerprint is collected for this purpose.

These aggregated events are retained for three months in Cloudflare Workers Analytics Engine.

Website chat assistant

The website offers a chat assistant. Messages you enter are sent to NVIDIA Corporation (United States), which hosts the language model used to generate responses. Do not enter personal data or confidential information. No conversation history is retained by Colombani.ai.

Recipients and sub-processors

Your data is neither sold nor transferred. It is processed by the following providers, solely for the purposes described above:

Cloudflare, Inc. (United States) : website hosting, delivery and aggregated conversion measurement
Twilio SendGrid (United States) : contact form message delivery
Microsoft 365 (European Union and United States) : business email
NVIDIA Corporation (United States) : language model powering the website assistant

These transfers outside the European Union are governed by the European Commission’s standard contractual clauses. Data from engagements entrusted to Colombani.ai does not pass through any of these services.

Purpose

This data is used exclusively to respond to your contact request and, where applicable, for the performance of a service contract.

Legal basis

Contact requests are processed on the basis of your consent (Article 6(1)(a) GDPR) and pre-contractual measures (Article 6(1)(b)). Aggregated conversion measurement relies on the legitimate interest in evaluating and improving the website (Article 6(1)(f)), without profiling or cross-site tracking.

Retention period

Your contact data is retained for 3 years from the last exchange. Contractual data is retained in accordance with French legal obligations (10 years for accounting documents).

Your rights

Under the GDPR, you have the following rights:

Right of access to your data
Right to rectification
Right to erasure
Right to data portability
Right to object

To exercise these rights, write to [email protected]. You may also file a complaint with the CNIL.

Cookies

This website does not use advertising or tracking cookies. No third-party cookies are placed.

Data hosting

This website is hosted by Cloudflare, Inc. (United States). Cloudflare is GDPR-compliant and has standard contractual clauses in place for international data transfers.