Privacy Policy
Introduction
Paradisiak places paramount importance on protecting your personal data and respecting your privacy.
This policy describes the personal data processing carried out when using the paradisiak.com website, in compliance with the General Data Protection Regulation (GDPR) and applicable data protection laws.
Data Controller: Intuition Software SARL, which publishes this website under the Paradisiak brand Contact: contact@paradisiak.com
Scope
This policy covers only data processing conducted on the paradisiak.com website (contact forms, resource downloads, cookies, navigation statistics).
The complete identity of the data controller can be found in our Legal Notice.
Data Collected on the Website
Contact Forms
When you use our contact forms, we collect:
- First and last name
- Email address
- Phone number (optional)
- Company and job title (optional)
- Message content
Navigation and Audience Measurement
To improve your experience and understand how our site is used, we collect:
- Pages viewed
- Actions taken
- Cookie identifiers
- Browser type and operating system
- The page you arrived from
IP Address
Your IP address is used in two situations. First by Vercel, the company that hosts this website, to keep it running and protect it from attacks: this information is never used to analyse your browsing. Then by Google Analytics, just long enough to work out your approximate region: your IP address is neither recorded nor kept there.
It is also sent to Adobe when the website's fonts are loaded.
Signing Up for Our Communications
If you give us your email address to receive our resources or news, we keep that address along with the page you signed up from.
Purposes and Legal Bases
Response to Contact Requests
Legal Basis: Legitimate interest or pre-contractual measures Purpose: Respond to your information requests, quotes, or demonstration requests
Audience Measurement
Legal Basis: Consent (for non-essential trackers) Purpose: Analyze site usage and improve our services via Google Analytics 4
Sending Our Communications
Legal Basis: Consent (opt-in) Purpose: Send you our resources and news, until you unsubscribe
Measuring Our Advertising Campaigns
Legal Basis: Consent (for marketing cookies) Purpose: Find out which ads lead to contact requests, through Google Ads
Website Security
Legal Basis: Legitimate interest Purpose: Protect the website against attacks and ensure its availability
Subcontractors and Service Providers
We work with the following service providers for managing our website:
Google Analytics and Google Tag Manager (Google Ireland Ltd / Google LLC)
Service: Website audience measurement, loaded through our Google Tag Manager container Activation: Only if you accept it, denied by default Safeguards: Google Analytics does not record IP addresses. Possible transfers to the United States, within a framework approved by the European Commission (standard contractual clauses and the Data Privacy Framework)
Google Ads (Google Ireland Ltd / Google LLC)
Service: Conversion measurement for our advertising campaigns Activation: Only if you accept marketing cookies, denied by default Safeguards: Same transfer safeguards as above
HubSpot (HubSpot Ireland / HubSpot, Inc.)
Service: Contact forms and follow-up of your requests (CRM) Safeguards: Transfers outside the European Union framed by standard contractual clauses
Resend (Resend, Inc.)
Service: Managing our mailing list and sending our communications Safeguards: Transfers outside the European Union framed by standard contractual clauses
Vercel (Vercel Inc.)
Service: Website hosting Location: Pages are served to you from servers located in France (Paris) Safeguards: To keep the site running and protect it, Vercel temporarily records your IP address and a few technical details about your browser. Transfers outside the European Union are framed by standard contractual clauses
Adobe Fonts (Adobe Systems Software Ireland Ltd)
Service: Loading the website's fonts Safeguards: Your IP address is sent to Adobe when the fonts load. Transfers outside the European Union are framed by standard contractual clauses
For the detailed list of our subcontractors: contact@paradisiak.com
Data Recipients
Access to your personal data is limited to:
- Authorized internal teams (marketing, sales, technical support)
- Our service providers mentioned above, bound by GDPR-compliant contracts
- Legal authorities in case of official request
We never sell or rent your personal data to third parties.
Retention Periods
We retain your personal data only for the duration necessary for the purposes pursued:
- Prospects / contact forms: Up to 3 years after the last contact
- Resource downloads: 3 years after the last interaction
- Mailing list: Until you withdraw your consent (unsubscribe)
- Security logs: Maximum 1 year
- Cookies: How long they last depends on what they do. See the Cookies and Trackers section for details
Beyond these periods, your data is either deleted or anonymized.
Cookies and Trackers
When you arrive on the site, a banner lets you accept, refuse or choose which non-essential cookies to allow. Until you accept, no audience measurement and no advertising cookie is activated.
How long do these cookies last?
Your cookie choice: 12 months. It is kept in your browser (local storage and the cookie-consent cookie) and its only purpose is to avoid asking for your consent on every visit.
Audience measurement (Google Analytics): 2 years. These cookies tell us which pages are viewed, never who you are. Only set after you accept, and deleted if you withdraw your consent. (_ga, _ga_*)
Advertising (Google Ads): up to 90 days. They let us know that a visit coming from one of our ads led to a contact request. Only set if you accept marketing cookies. (_gcl_au)
Contact form (HubSpot): from 30 minutes to 6 months depending on the cookie. They link your message to your visit. (hubspotutk, __hstc, __hssc, __hssrc)
The information collected by audience measurement cookies is not kept for more than 25 months.
You can change your choices at any time via the "Manage cookies" link in the footer, or from your browser settings.
Your GDPR Rights
In accordance with GDPR, you have the following rights regarding your personal data:
- Right of access: Obtain a copy of your data
- Right to rectification: Correct inaccurate or incomplete data
- Right to erasure: Request deletion of your data
- Right to restriction: Limit the processing of your data
- Right to object: Object to processing for legitimate reasons
- Right to data portability: Retrieve your data in a structured format
- Right to withdraw consent: Withdraw your consent at any time
How to Exercise Your Rights
To exercise any of these rights, contact us:
- By email: contact@paradisiak.com
- By mail: Paradisiak (address in Legal Notice)
We will respond to your request within a maximum of one month.
Complaint to Supervisory Authority
If you believe your rights are not being respected, you may lodge a complaint with your local data protection authority or with the French CNIL:
- Website: www.cnil.fr
- Address: 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07
Data Security
We implement appropriate technical and organizational measures to protect your personal data against:
- Unauthorized access
- Modification or alteration
- Disclosure or leakage
- Accidental or unlawful destruction
These measures include:
- Communication encryption (HTTPS/TLS)
- Restricted data access (principle of least privilege)
- Regular and secure backups
- Access monitoring and logging
- Team training on security best practices
Data Transfers Outside the EU
Some of our service providers (Google, HubSpot, Resend, Vercel, Adobe) may transfer your data outside the European Union, particularly to the United States.
These transfers are governed by:
- Standard Contractual Clauses (SCC) approved by the European Commission
- Supplementary security measures (encryption, pseudonymization)
- EU-US Data Privacy Framework for certified companies
We regularly verify that our service providers maintain an adequate level of protection.
Minors
Our website is not intended for persons under 18 years of age. We do not knowingly collect personal data from minors without parental consent.
If you believe we have collected data concerning a minor, please contact us immediately.
Updates to This Policy
This privacy policy may be updated to reflect changes in our practices, legislation, or services.
Last updated: September 16, 2026
In case of substantial modification, we will inform you through a visible notice on the site or by email if we have your address.
Contact
For any questions regarding this privacy policy or the processing of your personal data:
Email: contact@paradisiak.com
We are committed to responding to you as soon as possible.