Personal data protection
This site sets no cookie and runs no analytics. It collects nothing of its own : the form on the Contact page drafts a message in your own email application and sends us no data. Two sets of data nevertheless exist : the messages you send us by email, and the technical logs the host records for the operation and security of the server, including your IP address. This page sets out how they are processed, how long they are kept, and the rights that apply to them.
This is an English translation, published for information. Simeal is a French company and this notice is governed by French law: where the two texts differ, the French version is the one that has legal force.
Data controller
- Controller
- Simeal, société à responsabilité limitée à associé unique (single-member limited liability company), SIREN 109 122 978
- Registered office
- 5 rue Saint Georges, 67730 Châtenois, France
- Contact
- Data protection officer
- Not appointed: appointment is not required, the activity involving neither regular and systematic monitoring on a large scale, nor large-scale processing of special categories of data.
Data collected
This site asks for no account and collects nothing by itself. The form on the Contact page transmits nothing: it drafts a message in your own email client, which you are then free to send or not.
If you write to an @simeal.fr/ address, your message and its attachments are kept in our business mailbox, like any other correspondence.
Server logs
Our host automatically records connections to the site: IP address, date, page requested, browser. These logs belong to the working of any web server, and serve its security and its diagnosis. They are not used for analytics, and we build no profile from them.
Purpose and lawful basis
- Purpose
- Answering your enquiry, scoping it, and where appropriate drawing up a proposal for a study.
- Lawful basis
- Steps taken at your request prior to entering into a contract, Article 6(1)(b) of European Regulation 2016/679. For the server logs: the legitimate interest in keeping the site secure.
- Mandatory information
- None is required. We only need a reply address, so that we can answer you.
- Automated decision-making
- None. Every reply is written by a person.
- Marketing
- Your address is not added to a mailing list. There is no newsletter, and we send nothing unsolicited.
Retention period
- Enquiry with no follow-up
- Three years from the last exchange, then deletion. The usual period for a dormant commercial relationship.
- Enquiry that becomes a project
- For the whole duration of the project, then for the period of liability that applies to engineering services.
- Accounting records
- Ten years, as the French code de commerce requires. That obligation overrides a request for erasure.
- Server logs
- According to our host’s policy, and no longer than twelve months.
Recipients
The data is never sold, rented, exchanged, or passed to a commercial partner. Only the people at Simeal who are handling the enquiry have access to it.
Two technical providers necessarily host it, for the sole reason that they run the site and the mailbox:
- Site hosting
- OVH SAS, a French company, with data centres in the European Union.
- Business email
- Microsoft (Microsoft 365 Business). Mailbox data for European customers is stored in the European Union; any transfer to a third country is covered by the European Commission’s standard contractual clauses.
Rights of the data subject
The European Regulation gives you a right of access to your data, a right to have it rectified if it is inaccurate, a right to erasure, a right to restriction of processing, and a right to data portability. The right to object under article 21 applies to processing based on legitimate interests: it therefore applies to the server logs, on grounds relating to your particular situation. French law also lets you leave instructions on what becomes of your data after your death.
One address for all of it: . No formality is required. We answer within one month. If the request is for erasure, we confirm that the data has actually been deleted, rather than merely acknowledging receipt.
We ask for proof of identity only where there is serious doubt about who is making the request.
If our answer does not satisfy you, you may lodge a complaint with the French supervisory authority, the Commission nationale de l’informatique et des libertés (CNIL): cnil.fr/fr/plaintes, or 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.
Cookies and trackers
This site sets no cookie, not even a so-called technical one. It uses neither Google Analytics nor any other measurement tool. It loads no font, no image and no script from an outside server, and it carries no social network button.
No consent banner is shown, therefore, since the site sets nothing that requires agreement.
If a measurement tool were ever added, this page would be changed before it went live, and a consent banner would appear.
Security
The site is served over HTTPS only.
Access to the mailbox and to the hosting account is protected by two-factor authentication. Incoming messages are not copied into a customer relationship management tool.
In the event of a personal data breach likely to result in a risk to your rights, we would notify the CNIL within 72 hours, and would inform you if the risk were high, as Articles 33 and 34 of the Regulation require.
Page updated on 14 September 2026. Any change to the processing will be set down here before it takes effect.