Privacy policy

This page describes the personal data CorAItech processes when you visit the coraitech.fr website, when you write to us or when you register on the CorAIworks waiting list. It meets the information obligations laid down in Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and in French Law No. 78-17 of 6 January 1978 on information technology, data files and civil liberties (“Informatique et Libertés”).

1. Data controller

CORAITECH, a French simplified joint-stock company with a single shareholder (SASU), with share capital of €1,000, registered with the Angers Trade and Companies Register (RCS) under number 939 152 724, whose registered office is at Champtoceaux, 49270 Orée-d'Anjou, France.

Contact for any question about your data: contact@coraitech.fr.

CorAItech has not appointed a data protection officer; this appointment is not mandatory for its activity.

2. Data processed

The e-mails you send us. Your e-mail address, your name if it appears, the content of your message and its attachments, and the exchanges that follow.

Registration on the CorAIworks waiting list. The form on the CorAIworks page sends nothing to a server: it prepares an e-mail in your own mail application, which you review and then send yourself to contact@coraitech.fr. This e-mail contains the information you entered: company name, size of the design office, number of SOLIDWORKS seats, needs, comment, name, job title, e-mail address and, if you wish, telephone number.

The telephone number is optional. The other information is necessary for us to record your registration; failing that, we will contact you again to complete it.

Technical connection data. Like any web server, the server hosting the website records, for each page or file requested, the IP address, the date and time, the address requested and the browser identification.

The website has no user accounts, no audience measurement tool and no advertising tool.

3. Purposes and legal bases

• Replying to your messages and requests for information: CorAItech's legitimate interest in replying to people who contact it (Art. 6(1)(f) GDPR).
• Recording your registration on the CorAIworks waiting list and contacting you again when access opens: a step taken at your request, which CorAItech has a legitimate interest in following up (Art. 6(1)(f) GDPR).
• Managing the business relationship with prospective and existing client companies: CorAItech's legitimate interest (Art. 6(1)(f) GDPR) and, once a contract has been concluded, performance of that contract (Art. 6(1)(b) GDPR).
• Ensuring the security and proper operation of the website (technical logs): CorAItech's legitimate interest (Art. 6(1)(f) GDPR).
• Complying with the legal, accounting and tax obligations applicable to the contracts concluded: legal obligation (Art. 6(1)(c) GDPR).

Your data is not sold, rented or used to send you advertising on behalf of third parties.

4. Recipients

Your data is intended for CorAItech alone. It is not disclosed to any business partner.

It is physically hosted by technical service providers acting on behalf of CorAItech, as processors within the meaning of the GDPR:

• Microsoft Ireland Operations Limited (Dublin, Ireland), which provides CorAItech's business e-mail service (Microsoft 365), for e-mails received and sent;
• Contabo GmbH (Munich, Germany), which provides the server hosting the website, located in the European Union, for the technical connection logs.

For certain support or security operations, Microsoft may process data from the United States. This transfer is governed by safeguards: Microsoft Corporation is certified under the EU–US Data Privacy Framework, recognised by the European Commission's adequacy decision of 10 July 2023.

Finally, your data may be disclosed to the competent authorities where required by law.

5. Retention periods

• Prospects (messages, registrations on the waiting list): three years from the last contact initiated by you, in line with the recommendations of the CNIL (French data protection authority). At the end of this period, the data is deleted.
• Clients: for the entire duration of the contractual relationship, then archived for the statutory limitation periods (in particular five years for commercial matters and ten years for accounting records).
• Technical connection logs: for as long as necessary for the security of the website, and at most twelve months.

6. Resources loaded from third-party services

The website loads no resources from any third-party service: the fonts, scripts, images and the 3D model on the home page are served by CorAItech's server. Your browser therefore contacts no other service when you visit the website.

Links to third-party websites, such as LinkedIn, load nothing until you click on them.

7. Cookies and trackers

The website sets no cookies and uses no trackers: no audience measurement, no advertising, no social network share button. No consent banner is therefore required.

8. Your rights

You have the right of access, rectification, erasure, restriction of processing, objection and portability with regard to your data, under the conditions laid down in Articles 15 to 21 of the GDPR. You may also set guidelines concerning what happens to your data after your death.

To exercise these rights, write to contact@coraitech.fr. We reply within one month, which may be extended by two months for a complex request. Proof of identity may be requested in the event of reasonable doubt.

If, after contacting us, you consider that your rights are not being respected, you may lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.

9. Automated decision-making

No decision based solely on automated processing, including profiling, is taken concerning you. Each registration on the waiting list is read by a person at CorAItech.

10. Changes to this policy

This policy may change, in particular if the website or the services offered change. The date of the last update appears at the top of the page. See also the legal notice.