Privacy policy

1. Data controller

The data controller is Espero-Soft Informatiques SRL, Rue de la Colonne 1A, 1080 Molenbeek-Saint-Jean, Belgium (BCE 1033.022.383). For any question about your data: info@espero-soft.com.

2. Data collected

We collect the following categories of data:

• Account data: email address, name, and where applicable your Google identifier when signing in with Google.
• Usage data: favorites, search history, saved searches and preferences (language, theme).
• Technical data: IP address, browser type (user-agent), sign-in and security logs.
• Communication data: the content of messages you send us by email.

3. Purposes and legal bases

Your data is processed for the following purposes and legal bases:

• Provide the search service and manage your account (performance of the contract / terms).
• Authenticate passwordless sign-ins via a code sent by email (performance of the contract).
• Ensure the security of the service and prevent abuse and fraud (legitimate interest).
• Measure audience and improve the service (legitimate interest or consent depending on the tracker).
• Respond to your requests and comply with our legal obligations (legitimate interest / legal obligation).

4. Cookies and trackers

companyfrance.fr uses cookies and local storage strictly necessary for the operation of the service.

Necessary cookies (exempt from consent)

• Authentication session cookies (NextAuth) — keep you signed in.
• Anti-CSRF token — form security.
• NEXT_LOCALE — remembers your language.
• theme — remembers your display preference (light/dark).

5. Recipients and processors

Your data is never sold. It may be shared with technical processors strictly necessary to operate the service:

• OVHcloud (OVH SAS) — hosting, in France.
• Transactional email provider (sign-in codes, notifications).
• Google — only if you choose to sign in with Google.

6. Transfers outside the European Union

Your data is hosted in the European Union (France). Where a processor may process data outside the EU, appropriate safeguards (European Commission standard contractual clauses) are put in place in accordance with the GDPR.

7. Retention periods

Your data is retained for the following periods:

• Account data: as long as the account is active, then deleted or anonymized after closure.
• History and favorites: for the duration of account use.
• Technical and security logs: up to 12 months.
• Sign-in codes: a few minutes (fast expiry).

8. Your rights

In accordance with the GDPR, you have the following rights over your personal data:

• Right of access to your data.
• Right to rectification of inaccurate data.
• Right to erasure (“right to be forgotten”).
• Right to restriction and right to object to processing.
• Right to data portability.
• Right to withdraw your consent at any time.

9. Exercising your rights and complaints

To exercise your rights, write to info@espero-soft.com. You may also lodge a complaint with the Belgian Data Protection Authority (APD/GBA), Rue de la Presse 35, 1000 Brussels, Belgium — www.dataprotectionauthority.be.

10. Company data and natural persons

Company data shown on the site comes from public sources (SIRENE/INSEE, RNE/INPI) and does not constitute personal data about you as a user. Sole traders and natural persons listed in these registers may exercise their right to object with INSEE and request a dissemination restriction at info@espero-soft.com.

11. Security

We implement appropriate technical and organizational measures (encryption in transit, access control, logging) to protect your data against unauthorized access, loss or alteration.

12. Minors

The service is not intended for persons under the age of 15. We do not knowingly collect data about minors without the required consent.

13. Changes

This policy may be updated. Any substantial change will be indicated on the site. The date of the last update appears at the top of this page.