---
title: "Privacy policy | C-Esium"
description: "Privacy policy of c-esium.com (SINEO SAS): contact form data, purposes, legal bases, recipients, transfers, retention periods and your rights under the GDPR."
url: https://c-esium.com/en/privacy-policy/
---

# Privacy policy

SINEO SAS, which operates the C-Esium brand, only processes the data you enter in the contact form on c-esium.com and a few details about how you arrived on the site, to answer your request and follow up the business relationship. The site sets no audience-measurement or advertising cookies.

Updated 6 October 2026

_This privacy policy is also available in French ([politique de confidentialité](https://c-esium.com/politique-de-confidentialite/)). The French version is the reference text in case of discrepancy._

## Who is the data controller?

The data controller is **SINEO**, a French simplified joint-stock company (SAS) with a share capital of €1,000, registered with the Trade and Companies Register (RCS) Villefranche-Tarare 943 377 945, whose registered office is at 20 rue Ponson Magnin, 69620 Val d'Oingt, France. C-Esium is a brand of SINEO SAS.

For any question about your data: [contact@c-esium.com](mailto:contact@c-esium.com), [+33 7 56 28 32 07](tel:+33756283207), or by post to the registered office address.

## What data do we collect?

Only the data you send us through the contact form, and technical information about where you came from, attached to your request. No data is sent until you click “Send the request”.

| Data | Status | What it is used for |
| --- | --- | --- |
| First name and last name | Required | Knowing who we are answering. |
| Work email | Required | Replying to you and sending you an acknowledgement of receipt. |
| Phone | Required | Setting up the 30-minute call. |
| Company | Optional | Understanding the context of your request. |
| Answer to “How did you hear about C-Esium?” | Optional (list of choices) | Knowing through which channels companies find us. |
| Your needs (message) | Optional | Preparing the conversation. |
| Origin information | Automatic | Landing page on the site, address of the referring site (for example a search engine or an AI assistant), the channel deduced from it, any utm parameters in the address, date and time of arrival; page from which the form is sent, date and time of sending. |

The fields marked as required are needed to handle your request: without them, the form cannot be sent. You can also write to us directly at [contact@c-esium.com](mailto:contact@c-esium.com) or call us.

**Origin information.** It is read by the page when you arrive on the site and kept only in memory during your visit, with no cookie and no storage in your browser. It is lost if you reload the page or close the tab, and it is only sent to us if you send the form, attached to your request.

**Estimate questionnaire.** The 3-question estimate on the contact page is calculated in your browser: your answers are not sent to us, unless you choose to send them by WhatsApp.

**Pre-filling by an AI assistant.** If an AI assistant built into your browser prepares the form for you (an experimental feature of some browsers), the information it suggests is placed temporarily in session storage, then erased as soon as the form picks it up. Nothing is sent until you click the send button yourself.

**Other exchanges.** If you write to us directly by email or call us, we process the information you give us for the same purposes. As with any website, the hosting also processes technical connection data (including your IP address and the page requested) to display the pages to you.

## Why, and on what legal basis?

| Purpose | Legal basis (GDPR) |
| --- | --- |
| Answering your request: calling you back, setting up the call, sending you an acknowledgement of receipt, preparing a possible proposal. | Legitimate interest of SINEO SAS in answering the business contact requests sent to it (Article 6(1)(f)); pre-contractual measures (Article 6(1)(b)) when you contact us on your own behalf. |
| Following up the business relationship with your company: history of exchanges and follow-up given to your request. | Legitimate interest of SINEO SAS in following up its business-to-business relationships (Article 6(1)(f)). |
| Understanding through which channels companies find us (declared answer and origin information). | Legitimate interest of SINEO SAS in assessing its visibility channels (Article 6(1)(f)). |

Your data is never sold, rented or given away. It is not subject to any fully automated decision.

## Who receives your data?

-   **The C-Esium team (SINEO SAS)**: the partners in charge of client relations and of your project.
-   **Our business email service**, hosted by Hostinger International Ltd (Cyprus, European Union). The form is processed by a script hosted on our own server, which forwards your request by email to our team, without going through a third-party email-sending provider or through a country outside the European Union. No automatic email is sent to you.
-   **Hostinger International Ltd** (61 Lordou Vironos Street, 6023 Larnaca, Cyprus), the website host, which processes the technical connection data needed to display the pages.
-   **WhatsApp**, only if you choose this channel (form button, floating button on mobile or sending the result of the estimate). The conversation then goes through WhatsApp, a service provided in the European Region by WhatsApp Ireland Limited (Meta group), which processes your data under its own [privacy policy](https://www.whatsapp.com/legal/privacy-policy-eea) (accessed 4 October 2026). We receive your number, your profile name and your messages.
-   **SCALEUP FORGE WEB - FZCO** (IFZA Business Park, Dubai Silicon Oasis (DDP), PO Box 342001, Dubai, United Arab Emirates), only for a request sent from the English website about a project in the United Arab Emirates. This company contracts C-Esium projects in the UAE; your request may be shared with it solely to handle that request. This is a transfer of personal data outside the European Union and the European Economic Area. For any question about this transfer, write to [contact@c-esium.com](mailto:contact@c-esium.com).
-   Where applicable, administrative or judicial authorities, when required by law.

## How long do we keep it?

| Situation | Retention period |
| --- | --- |
| You contacted us without becoming a client | 3 years from your last contact, then deletion. |
| Your company becomes a client | For the whole contractual relationship, then archiving for the periods required by our legal obligations. |
| You object to being contacted again | Only the information needed to respect your objection, for 3 years. |
| Origin information kept in memory by the page | For the duration of your visit: it is lost when you reload the page or close the tab. |

The 3-year period for prospects follows the [CNIL guidelines on managing commercial activities](https://www.cnil.fr/sites/default/files/atoms/files/referentiel_traitements-donnees-caractere-personnel_gestion-activites-commerciales.pdf) (in French), which set it “from their collection by the controller or from the last contact from the prospect” (our translation); the period for objections follows the [CNIL recommendation on objection lists](https://www.cnil.fr/fr/comment-utiliser-une-liste-repoussoir-pour-respecter-lopposition-la-prospection) (at least 3 years, in French) — sources accessed 4 October 2026. The CNIL is the French data protection authority. To limit abuse, the server keeps for one hour a hashed (non-reversible) fingerprint of your IP address and the time of sending, with no other data. If the email service is temporarily unavailable, your request is kept on our server, out of public reach, while it is handled.

## What are your rights?

You have the following rights over your data (Articles 15 to 21 of the GDPR and the French Data Protection Act, “loi Informatique et Libertés”):

-   **access**: find out what data we hold and get a copy of it;
-   **rectification**: correct inaccurate or incomplete data;
-   **erasure**: ask for your data to be deleted;
-   **objection**: object at any time to the business follow-up based on our legitimate interest;
-   **restriction**: ask for the use of your data to be temporarily frozen;
-   **portability**: get the data you gave us in a structured, machine-readable format;
-   **post-mortem instructions**: set instructions for the storage, erasure and disclosure of your data after your death (French Data Protection Act, provisions on deceased persons, Articles 84 et seq.).

To exercise them, write to [contact@c-esium.com](mailto:contact@c-esium.com) or by post to the registered office. We reply within one month at most (Article 12 of the GDPR). If we have reasonable doubts about your identity, we may ask you for proof of identity.

## How do you lodge a complaint?

If, after contacting us, you believe your rights have not been respected, you can lodge a complaint with the French data protection authority, the Commission nationale de l’informatique et des libertés (CNIL): online at [cnil.fr/fr/plaintes](https://www.cnil.fr/fr/plaintes), or by post to CNIL, Service des plaintes, 3 place de Fontenoy, 75007 Paris, France ([procedure on the CNIL website](https://www.cnil.fr/fr/adresser-une-plainte), in French, accessed 4 October 2026).

## Cookies and trackers

The c-esium.com website sets no audience-measurement or advertising cookies, and includes no third-party tracking tool: no audience analytics tool, no advertising pixel, no video or map hosted by a third party. Fonts are served from our own hosting.

The site sets no cookies. Your browser’s session storage is used for two things only: pre-filling the form when you ask for it (an AI assistant built into your browser, or the button of the 2030-ready assessment that sends your result to the form), this information being erased as soon as the form picks it up; and, if a page fails to load after a site update, noting the page address and the time so that the page is reloaded once only. No personal data is kept there. This storage is strictly necessary for the site to work and for the service you request (Article 82 of the French Data Protection Act). Links to LinkedIn or WhatsApp are simple links: no content from these services is loaded until you click.

## Updates to this policy

This policy is updated when our tools or providers change. Last updated: 6 October 2026. Information about the publisher and the host of the website is in the [legal notice](https://c-esium.com/en/legal-notice/).