Privacy policy

Data controller

Colombani.ai
Email: [email protected]

Data collected

The data you voluntarily provide through the contact form is collected:

• First and last name
• Email address
• Company name
• Message content

Audience and conversion measurement

The website measures only aggregated events, needed to improve it. On the visitor side: page views, contact clicks, booking clicks, email clicks, opening or using the assistant, form started, abandoned or submitted. On the content side: clicks on an offer, a training, a sector or an article, FAQ questions expanded, pages not found, scroll depth. On the layout side: click positions, as a percentage of the page and with the screen size, to draw an aggregated map of clicked areas. For each event we record its type, the page path, the language, a general source category and its target. No name, email, message content, advertising identifier, cookie or fingerprint is collected for this purpose. No individual journey is reconstructed.

A general source category may be passed between pages in website links, without an individual identifier or browser storage. Booking links pass this category and the referring page path to Cal.com, without the other parameters in your URL. Cal.com stores this information in the booking details. Clicking a booking link does not mean an appointment has been confirmed.

These aggregated events are retained for three months in Cloudflare Workers Analytics Engine. The website also uses Cloudflare Web Analytics to count page views, traffic sources, countries, device types and loading speed. This measurement works without cookies, fingerprinting or individual identifiers. It does not track visitors across websites. It is exempt from consent under the CNIL guidelines on audience measurement.

Website chat assistant

The website offers a chat assistant. Messages you enter are sent to NVIDIA Corporation (United States), which hosts the language model used to generate responses. Do not enter personal data or confidential information. Colombani.ai keeps the questions asked and the answers given for 90 days. This log holds no IP address, cookie or identifier. Any email address, phone number, company registration number or IBAN they may contain is masked automatically before storage. It is used only to improve the assistant’s answers and the website content, and is never linked to an identity.

Recipients and sub-processors

Your data is neither sold nor transferred. It is processed by the following providers, solely for the purposes described above:

• Cloudflare, Inc. (United States) : website hosting, delivery, cookieless audience measurement and aggregated conversion measurement
• Twilio SendGrid (United States) : contact form message delivery
• Microsoft 365 (European Union and United States) : business email
• NVIDIA Corporation (United States) : language model powering the website assistant

These transfers outside the European Union are governed by the European Commission’s standard contractual clauses. Data from engagements entrusted to Colombani.ai does not pass through any of these services.

Purpose

This data is used exclusively to respond to your contact request and, where applicable, for the performance of a service contract.

Legal basis

Contact requests are processed on the basis of your consent (Article 6(1)(a) GDPR) and pre-contractual measures (Article 6(1)(b)). Aggregated conversion measurement relies on the legitimate interest in evaluating and improving the website (Article 6(1)(f)), without profiling or cross-site tracking.

Retention period

Your contact data is retained for 3 years from the last exchange. Contractual data is retained in accordance with French legal obligations (10 years for accounting documents).

Your rights

Under the GDPR, you have the following rights:

• Right of access to your data
• Right to rectification
• Right to erasure
• Right to data portability
• Right to object

To exercise these rights, write to [email protected]. You may also file a complaint with the CNIL.

Cookies

This website does not use advertising or tracking cookies. No third-party cookies are placed.

Data hosting

This website is hosted by Cloudflare, Inc. (United States). Cloudflare is GDPR-compliant and has standard contractual clauses in place for international data transfers.