01
Who is responsible
CORNIQ SAS, 187 Rue d’Aulnay, 92350 Le Plessis-Robinson, France, is the controller for project enquiry information it receives through this website. You can send privacy requests by post to this address, marked “Data protection”. You can also contact hello@corniq.digital.
02
Information collected
The enquiry form asks for your name, email address, project type, estimated scope, description, preferred timeframe and acknowledgement of this policy. Your organisation, current situation, indicative budget and additional notes are optional. Please do not include passwords, payment details or sensitive personal information. Technical request information, such as IP address and request timing, is used for basic abuse prevention; infrastructure providers may keep operational logs.
03
Purposes and legal bases
Enquiry information is used to understand your request, communicate with you and assess a potential project. Processing necessary to prepare a contract at your request is based on pre-contractual steps under Article 6(1)(b) GDPR. Business enquiries made on behalf of an organisation and security measures are based on legitimate interests under Article 6(1)(f): responding to relevant requests and protecting the website. Acknowledging this policy is not consent to marketing.
04
Recipients and processors
Enquiry information is intended for the people handling the request at CORNIQ. The website runs on Cloudflare Workers. If the server-side email adapter is enabled, messages are transmitted through Resend to the configured CORNIQ mailbox and sends an acknowledgement, including a generated project reference and the submitted details, to your email address. Messages may also be processed by the mailbox provider. We do not sell enquiry data. These providers process technical or message data as needed to deliver their services.
05
Retention
The website application does not maintain an enquiry database. Submitted enquiries may be retained in the receiving mailbox while the request and any resulting relationship are handled. Unsuccessful project enquiries should be deleted when no longer needed and no later than three years after the last meaningful contact, unless a legal obligation or a dispute requires retention. Contract, accounting and legal records are kept for the applicable statutory periods. Infrastructure logs follow the provider’s operational retention arrangements.
06
Security and international processing
The form is validated on the client and server. Requests are protected by origin checks, a hidden spam field, submission timing checks and basic rate limiting. Email credentials stay on the server. These measures reduce risk but do not guarantee absolute security. Infrastructure or email providers may process data outside the European Economic Area; any required transfer safeguards must be assessed for the configured providers before production processing begins.
07
Your rights
Subject to the applicable conditions, you can request access, rectification, erasure or restriction of processing. You may object to processing based on legitimate interests. Data portability applies where its legal conditions are met. To exercise your rights, write to CORNIQ at the address above and describe your request. We may need proportionate information to confirm your identity. Requests are normally answered within one month, with any permitted extension explained.
08
Complaints and further information
You can lodge a complaint with the French supervisory authority, CNIL, at cnil.fr, or with the competent authority where you live or work. This policy may be updated when the website or its processing arrangements change.