Privacy Policy

Privacy Policy

Last update: 20 October, 2026

This policy informs users of the WanadevDigital website (wanadevdigital.com) about how their personal data is processed, in accordance with Regulation (EU) 2016/679 (GDPR) and the amended French Data Protection Act No. 78-17 of 6 January 1978.

1. Data Controller

The data collected on this website is processed by:

Wanadev, SAS with a share capital of €100,000
13 quai du Commerce, 69009 Lyon, France
SIRET: 511 500 811 00076

Data Protection Officer (DPO): dpo@wanadev.fr

2. Personal Data We Collect

Contact form: first name, last name, email address and, if you provide it, the content of your message.
Technical data: IP address, used temporarily to protect the contact form against spam and abuse, and recorded in the technical logs of our hosting provider.
Browsing data: pages visited, referring website, type of browser and device, approximate location, collected anonymously for audience measurement.

Fields marked as required in the form are needed to process your request. Without them, we cannot answer you.

3. Purposes, Legal Bases and Retention Periods

Responding to your requests
Purpose: answering requests sent through the contact form or by email.
Legal basis: legitimate interest (Article 6(1)(f) GDPR).
Retention period: up to 3 years after the last contact.

News and communications from Wanadev
Purpose: sending newsletters and information about our offers and events.
Legal basis: consent (Article 6(1)(a) GDPR), given by ticking the box in the contact form.
Retention period: until you withdraw your consent, and no longer than 3 years after the last contact. Each email contains an unsubscribe link.

Protecting the website against spam and abuse
Purpose: limiting the number of form submissions per visitor.
Legal basis: legitimate interest (Article 6(1)(f) GDPR).
Retention period: your IP address is only stored in hashed (pseudonymised) form and is only used over a 10-minute window.

Audience measurement
Purpose: producing anonymous traffic statistics to improve the website.
Legal basis: legitimate interest, under the CNIL consent exemption for audience measurement (self-hosted Matomo, configured without cookies).
Retention period: 25 months maximum.

Playing YouTube videos
Purpose: displaying our case-study videos within the website.
Legal basis: consent (Article 6(1)(a) GDPR), collected through our cookie banner or when you click on a video.
Retention period: according to the policy of Google / YouTube.

At the end of these periods, data is deleted or irreversibly anonymised.

4. Cookies and Similar Technologies

Consent cookie (strictly necessary): the cc_cookie cookie stores your consent choices for 6 months. It does not require your consent.
Audience measurement: our self-hosted Matomo instance (matomo.wanadev.org) works without any cookie.
YouTube: our videos are only loaded from YouTube (Google Ireland Ltd.) if you accept the “YouTube videos” category. If you decline, the video player is not loaded and you will be asked again when you click on a video. Once loaded, YouTube may set cookies and collect data according to Google’s Privacy Policy.

Fonts and some scripts are loaded from third-party content delivery networks (Google Fonts, Webflow, Amazon CloudFront). These providers necessarily receive your IP address to deliver these resources, but do not set cookies.

You can change or withdraw your consent at any time via the Cookie settings link at the bottom of each page.

5. Recipients and Transfers

We do not sell your data. It is only accessible to the authorised Wanadev teams and to our technical service providers, strictly as needed to provide the service and under confidentiality obligations:

- Brevo (Sendinblue SAS, Paris, France): contact management and email sending;
- OVH SAS (Roubaix, France): website hosting;
- Google / YouTube: video playback, only if you have given your consent.

If personal data is transferred outside the EU/EEA, we ensure that appropriate safeguards are in place, such as the European Commission’s standard contractual clauses or the EU-US Data Privacy Framework. Further details are available on request at dpo@wanadev.fr.

6. Security

Wanadev implements appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, disclosure or alteration, including encrypted connections (HTTPS), restricted access to data and anti-spam protection of our forms.

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:
- Right of access
- Right of rectification
- Right of erasure
- Right to restrict processing
- Right to object
- Right to data portability
- Right to withdraw your consent at any time
- Right to give instructions regarding the fate of your data after your death

To exercise these rights, please contact our DPO at dpo@wanadev.fr. We may ask you for proof of identity if there is reasonable doubt. We will respond within one month, which may be extended as permitted by the GDPR.

If you believe your rights have not been respected, you may lodge a complaint with the French data protection authority (CNIL): www.cnil.fr

8. Changes to This Privacy Policy

We may update this policy to reflect legal, technical or operational changes. The date of the last update will be revised accordingly. Where necessary, we will inform you of significant changes by any appropriate means.