Personal data protection

This translation is provided for information only. Only the French version is legally binding.

Article 1. Our commitment

We collect as little data as possible, solely to reply to you and work with you. We do not sell it, rent it out or use it for advertising purposes.

This policy complies with Regulation (EU) 2016/679 (RGPD [General Data Protection Regulation, GDPR]), French Law No. 78-17 of 6 January 1978 known as the “Informatique et Libertés” law [French Data Protection Act] and, for persons located in Switzerland, the Federal Act on Data Protection (nLPD [revised FADP]) in force since 1^st September 2023 and its Ordinance (OPDo [DPO]).

Article 2. Data controller

REIDROCHA EURL, 17 rue du Jura, 68440 Dietwiller, France, RCS Mulhouse 888 435 914, represented by Charlotte Cordier, managing director and sole partner. Contact for any question about your data: info@reidrocha.com.

Given its size and activities, REIDROCHA is not required to appoint a data protection officer: your requests are handled directly by its managing director.

Article 3. The data we process

Contact form: name, email address and, if you provide them, company, telephone number and message. Mandatory fields are marked.
Business relationship: professional contact details, quotes, orders, invoices and correspondence relating to your projects.
Client-only pages: a technical cookie remembers that the password has been entered (see the Cookies page). No personal data is stored in it.
Technical data: as on any website, our host records the IP address and date of connections in its logs, for the security of the site.

No audience measurement, no profiling and no automated decision-making take place on the site.

Article 4. Purposes and legal basis

Replying to your requests and drawing up a quote: pre-contractual measures taken at your request (Art. 6.1.b RGPD).
Performing our contracts, invoicing and managing projects: performance of a contract (Art. 6.1.b).
Complying with our accounting and tax obligations: legal obligation (Art. 6.1.c).
Keeping you informed about our services, at your business address and in connection with your activity: legitimate interest (Art. 6.1.f). Every message includes a simple way to unsubscribe. For private individuals, we send nothing without your consent.
Securing the site and preventing abuse: legitimate interest (Art. 6.1.f).

Article 5. Retention periods

Contact request with no follow-up: 3 years after the last exchange.
Client data: duration of the business relationship, then 5 years (limitation period under Article L110-4 of the Code de commerce [French Commercial Code]).
Invoices and accounting records: 10 years (Article L123-22 of the Code de commerce).
Host’s technical logs: 12 months maximum.
Client-only pages cookie: 30 days.

Article 6. Who receives your data

Your data is intended for REIDROCHA only. It may be disclosed, strictly within the limits of their assignment and under a confidentiality agreement, to:

our hosting provider, o2switch, whose servers are located in France;
our email service provider;
our chartered accountant and, upon formal request, the competent authorities;
the partners (printers, developers, videographers) involved in your project, with your consent.

Article 7. Transfers outside the European Union

Your data is hosted in the European Union. Exchanges with our Swiss clients and partners rely on mutual adequacy decisions: the European Commission recognises Switzerland as providing adequate protection, and the Swiss Federal Council recognises France and the European Union (Annex 1 of the OPDo). Should any other transfer become necessary, it would be governed by the European Commission’s standard contractual clauses.

Article 8. Security

The site is served over an encrypted connection (HTTPS), custom-coded without unnecessary plugins, and its data is automatically backed up off-site. Access to messages and client files is restricted to the managing director. In the event of a data breach posing a risk to you, we notify the CNIL [French data protection authority] within 72 hours, the PFPDT [Swiss Federal Data Protection and Information Commissioner, FDPIC] as soon as possible, and you yourself where required by law.

Article 9. Your rights

You have the right at any time:

of access to your data and to information about its processing;
to rectification and erasure;
to restriction of processing and to object, in particular to direct marketing;
to data portability;
to withdraw your consent where it has been given;
in France, to set instructions regarding the fate of your data after your death (Article 85 of the Informatique et Libertés law).

To exercise these rights, write to info@reidrocha.com or by post to REIDROCHA EURL, for the attention of Charlotte Cordier, 17 rue du Jura, 68440 Dietwiller. We reply within one month (RGPD) and, for persons in Switzerland, within 30 days (nLPD). Proof of identity may be requested if there is reasonable doubt as to your identity.

Article 10. Complaints

If you believe your rights have not been respected, you may lodge a complaint with:

in France, the CNIL: 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr;
in Switzerland, the Préposé fédéral à la protection des données et à la transparence (PFPDT) [Federal Data Protection and Information Commissioner]: Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch.

Article 11. Updates

This policy may change, in particular if we add a service. The date of the latest update is shown below. See also the legal notice and the Cookies page.

Last updated: 23 October 2026.