Skip to content
TZ Dev

Privacy policy

Last updated: [DATE]

This English version is a translation provided for convenience; the French version prevails. [TO BE CONFIRMED]

This page explains how the data of people who send a request through this website, and of clients who receive a quote, is processed.

Data controller

TZ Dev · Tarek Zain Aldin, entrepreneur individuel (sole trader), [ADDRESS], SIRET [SIRET]. Contact for your data: contact@tzdev.fr.

Data processed

  • Through the quote request form, only what you enter: your name, your email address, your country, your sector, your need and your message; if you provide them, the name of your company, your estimated budget and your desired timeline; the date of your consent and the version of this policy.
  • If you receive a quote: the company or personal name, the contact person, the address, the email, the phone number, the SIRET and VAT numbers where applicable, the content of the quote and our exchanges about it.
  • To fight automated submissions: an irreversible fingerprint of your IP address (the address itself is not kept) and the check of the anti-bot service described below.

Purposes and legal bases

  • Answering your request and preparing a quote: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR). The form’s checkbox also records your agreement before sending.
  • Drawing up, sending and following up a quote, then the business relationship: performance of the contract or pre-contractual steps (same basis).
  • Keeping accepted quotes: legal obligation to keep accounting records (Article 6(1)(c)).
  • Protecting the form and the administration area against abuse, keeping a record of the emails sent and of administrative actions: legitimate interest in securing the service (Article 6(1)(f)).
  • Handling your requests about your data and being able to prove it: legal obligation (same article, point c).

Your data is never used for marketing without your consent, and no automated decision is made about you.

Retention periods

Periods are counted in calendar days; at their end, the data is deleted or anonymised automatically, every day.

  • Quote requests: 3 years after the last contact. If an accepted quote is linked to a request, the request is anonymised (message and contact details erased) and only its reference remains.
  • Requests identified as unwanted: 30 days after being marked as such.
  • Client records: 3 years after the last contact. If a quote was accepted, only the company or personal name, the address, the SIRET and the VAT number needed for that quote remain.
  • Quotes not accepted: 3 years after their last change.
  • Accepted quotes: 10 years after their acceptance (Article L123-22 of the French Commercial Code).
  • Log of the emails sent (recipient, date, result, never the content): 1 year.
  • IP address fingerprints: one hour at most. Log of administrative actions: 1 year.
  • Encrypted backups: 30 days. Erased data may remain in them for up to 30 days without being used; if a backup is restored, erasures are applied again.
  • Requests about your rights: 3 years after the answer.

Recipients

The data is intended for TZ Dev · Tarek Zain Aldin only. It is neither sold nor transferred. Technical service providers process it on Tarek Zain Aldin’s behalf, only to run the service:

  • hosting of the website and its database: [HOSTING PROVIDER], [COUNTRY];
  • sending emails: [EMAIL SERVICE];
  • protecting the form against bots: Cloudflare Turnstile;
  • storing the backups, encrypted and unreadable without a key kept off the server: [BACKUP PROVIDER], in the European Union.

Accepted quotes may be passed to [ACCOUNTANT] for the accounts.

Transfers outside the European Union

[TRANSFERS: TO BE CHECKED BEFORE GOING LIVE. The email service and Cloudflare may be established outside the European Union: state for each the country and the safeguard of the transfer (adequacy decision or standard contractual clauses).]

Security

The data is hosted on a server whose database cannot be reached from the Internet. The administration area is protected by a password and a one-time code. Backups are encrypted. Technical logs contain no email address and no IP address.

Your rights

You can access your data, have it corrected or erased, ask for its processing to be restricted, object to it, ask to receive it in a structured format (portability) and withdraw your consent at any time, without affecting what was done before. You can also set instructions about what happens to your data after your death.

To exercise these rights, write to contact@tzdev.fr. If there is reasonable doubt about your identity, additional information may be requested.

You receive an answer within one month, which may be extended by two months if the request is complex; you are then informed within the first month. The answer is free of charge.

Some data must be kept despite an erasure request, for example an accepted quote (accounting obligation): you are told what is kept and why.

Complaints

If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).

Cookies

This website sets no tracking or audience measurement cookie, so no consent banner is needed. The only cookie of the website is used for the administrator to sign in to the private administration area; it is never set for visitors.

The form’s anti-bot service reads technical information from your browser to check that you are not a bot [TO BE CONFIRMED: no cookie set by this service].

Changes

This policy may change, in particular when a service is added. The date of the last update is shown at the top of the page; each request records the version of the policy that was accepted.