Privacy Policy

Last updated: September 2025

Introduction

This Privacy Policy describes how IT Brains SASU ("we", "our", or "us") collects, uses, and protects your information when you visit our website and use our services. We are committed to protecting your privacy and ensuring the security of your personal information in accordance with the General Data Protection Regulation (GDPR).

Data Controller

The data controller is:

Information We Collect

We collect the following information:

  • Personal information you provide through our contact form (name, email, message content, company if indicated)
  • Usage information and analytics data (via Google Analytics)
  • Device and browser information

Legal Basis for Processing

We process your data based on:

  • Your consent (for the use of analytics cookies)
  • Execution of pre-contractual measures (response to your request via the contact form)
  • Our legal obligations (in case of a request by an authority)

Data Usage

Your information may be used to:

  • Respond to your requests sent via the contact form
  • Communicate with you regarding our services
  • Analyze and improve our website performance (Google Analytics)

Data Retention Period

  • Contact form: your messages are kept for the time necessary to process your request and up to 3 years for commercial follow-up.
  • Google Analytics: analytics data is retained for the default configured duration (14 months), after which it is automatically deleted or anonymized.

Cookies and Tracking Technologies

We use essential cookies (Google reCAPTCHA) to protect the contact form; these cookies are always enabled and do not require consent. We only use analytics cookies (Google Analytics) to understand how visitors interact with our website, and these load only after your consent.

You can accept or refuse these cookies via our banner ("Accept / Decline") and also manage them in your browser settings. Refusal does not affect site functionality.

Information Sharing

We do not sell, exchange, or rent your personal information. Your data may only be shared:

  • With our service providers (e.g., Digital Ocean hosting, New York, USA)
  • With Google Analytics (service provided by Google, located in the USA)
  • When required by law or to protect our rights
  • With your explicit consent

Transfer Outside the EU

Our providers (Google Analytics and Digital Ocean) may process your data outside the European Union, particularly in the United States. Appropriate protection measures (Standard Contractual Clauses approved by the European Commission) are in place to ensure the security of your data.

Data Security

We implement appropriate technical and organizational measures to protect your data. However, no method of transmission over the Internet is completely secure.

Your Rights

In accordance with GDPR, you have the following rights:

  • Right to access, rectification, and deletion of your data
  • Right to limitation or opposition to processing
  • Right to data portability
  • Right to withdraw your consent at any time

To exercise your rights, contact us at: [email protected]

Changes to This Policy

We may update this Privacy Policy. Any changes will be published on this page with a new update date.