Privacy policy

01Data controller

The data controller is ELYOS CONCIERGERIE, Société par actions simplifiée (SAS), with its registered office at 691 boulevard Salvador Allende, 13850 Gréasque, France (SIRET: 109 260 497 00010), hereinafter "Elyos".

Contact: contact@elyos-conciergerie.fr

02Data collected

We only collect the data that is necessary:

• Contact form: name, email address, message and, optionally, phone number and a description of your property.
• Direct exchanges: the information you send us by email, phone or WhatsApp.
• Technical data: IP address, browser type and pages viewed, recorded in the host's connection logs to ensure the security and proper operation of the website.

We do not collect any sensitive data. The website is not intended for minors.

03Purposes and legal bases

• Responding to your contact or estimate request: pre-contractual steps taken at your request (Art. 6(1)(b) GDPR).
• Managing the relationship with owners and prospects: Elyos's legitimate interest in developing its business (Art. 6(1)(f)).
• Ensuring the security and proper operation of the website: legitimate interest (Art. 6(1)(f)).
• Complying with our legal obligations, notably accounting and tax: legal obligation (Art. 6(1)(c)).

Your data is not subject to any automated decision-making or profiling, and is never sold.

04Recipients and processors

Your data is only accessible to the Elyos team and to the following technical providers, who process it on our behalf:

• Vercel Inc.: website hosting.
• Resend: sending of the email notifications generated by the contact form.
• Notion Labs: database used to track incoming requests.
• OVH SAS (France): professional email and domain name.
• Calendly: appointment scheduling, only if you click “Book a call”.
• Google Ireland Limited (Google Analytics): audience measurement, only if you accept it in the cookie banner.

The website's content management service (Sanity) does not receive any visitor data.

05Transfers outside the European Union

Some of these providers (Vercel, Resend, Notion, Calendly, Google) are based in the United States or may process data there. These transfers are covered by appropriate safeguards: European Commission adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses.

06Retention periods

• Contact requests and prospects: 3 years from the last exchange.
• Client owners: for the duration of the contractual relationship, then for the statutory limitation periods.
• Technical connection logs: limited period, not exceeding 12 months.

07Cookies and trackers

This website does not use any advertising cookies. Two strictly technical items are exempt from consent:

• your browser's session storage, which remembers that the introduction animation has already been shown (deleted when you close the tab);
• your browser's local storage, which keeps your cookie choice for 6 months.

A banner lets you accept or refuse any non-essential tracker. Refusing is as easy as accepting, and you can change your choice at any time via the “Manage cookies” link at the bottom of every page.

If you click “Book a call” on the Contact page, the Calendly scheduling tool loads and may set its own technical cookies, governed by its own privacy policy. Nothing loads unless you click that button, independently of your choice regarding analytics.

If you accept analytics in the banner, we use Google Analytics (Google Ireland Limited) to understand site traffic: pages viewed, time spent, device used. This tool sets cookies and only loads after you agree; if you refuse or haven't yet responded, it stays fully inactive. You can withdraw your consent at any time via “Manage cookies”.

08Third-party services and external links

The website contains links and buttons to third-party services (WhatsApp button, phone and email links, Calendly scheduling on the Contact page). When you use them, your data is processed by those services under their own privacy policies (for example WhatsApp / Meta or Calendly), over which Elyos has no control. The Calendly script only loads if you click “Book a call”, never when the page loads.

09Your rights

You have the following rights over your data:

• access, rectification and erasure of your data;
• restriction of processing and objection, in particular on legitimate grounds;
• data portability;
• withdrawal of your consent at any time, where processing is based on consent;
• setting instructions on what happens to your data after your death.

To exercise these rights, write to us at contact@elyos-conciergerie.fr. We may ask for proof of identity if in doubt and will reply within one month.

If, after contacting us, you believe your rights are not being respected, you may lodge a complaint with the CNIL (French data protection authority): 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr.

10Security

The website is served over HTTPS. Access to data is limited to those who need it, and we select providers offering appropriate security guarantees.

11Changes to this policy

We may update this policy to reflect changes to the website or to regulations. The date of the last update appears at the top of this page.