Privacy policy

Who is responsible for your data

Moussa Kerrouche EI (Kerro Labs), 1 route d’Asnières, 92110 Clichy, France. Contact: contact@kerrolabs.fr.

Contact form

The information you send (name, business, email, phone, message) is used to answer your enquiry and prepare a quote. This processing is necessary to take steps at your request before entering into a contract. Your name, email address and message are required; the other fields are optional.

Clients, accounting and security

Information needed for an ordered service is processed to perform the contract. Accounting records are processed to meet legal obligations. Technical logs are processed to protect the website and its users (legitimate interest).

Retention periods

• Enquiries and prospects: up to 3 years after collection or your last expression of interest.
• Quotes and contracts: for the duration of the business relationship, then 5 years after it ends (limitation period), or 10 years when attached to an accounting record.
• Accounting records (invoices, credit notes): 10 years after the end of the financial year.
• Objection to outreach: only the information needed (email address or domain) is kept for 3 years after the objection, so that you are not contacted again.
• Application logs: 90 days. Backups: 14 days.

Professional outreach

I may contact professionals by email about services relevant to their business, based on legitimate interest, after checking the link between the offer and the recipient’s business. The first message states where the contact details were found and where to find information about data rights. You can object at any time by replying “stop” or using the unsubscribe link in each message.

Website statistics

This website measures its traffic to improve, without cookies or third-party tools. Only aggregated statistics are kept (page views, referrer, device type, country), for up to 13 months. To estimate daily visitors, the website calculates a temporary identifier from your IP address and browser, using a key drawn at random each day. This identifier is pseudonymous, not anonymous: the key and the identifiers are deleted during the daily statistics process. The statistics module does not store your IP address. This data is not combined with other processing or shared with third parties. If your browser sends a “Do Not Track” or “Global Privacy Control” signal, you are not counted.

Recipients and hosting

Data is not sold. It is accessible only to the service providers needed to run the service. Netlify, Inc. provides hosting; the application’s main storage is configured in a data centre in Frankfurt, Germany. Emails are sent through the Resend service. Both providers are based in the United States and may process some data outside the European Union (logs, support); these transfers are covered by their data processing agreements (European Commission standard contractual clauses for Resend). A copy of these safeguards can be requested at the contact address. Like any hosting provider, Netlify, Inc. keeps technical logs (including IP addresses) for security purposes.

Your rights

Depending on the processing concerned, you may request access to your data, its correction, deletion or restricted use, object to its processing or request its portability. Write to contact@kerrolabs.fr: I normally reply within one month, which may be extended in the cases provided for by the GDPR. You can also lodge a complaint with the CNIL, the French data protection authority.