1. Data controller
The data controller is:
Company: C2 Innov8 (SASU)
Registered office: 53 rue Truffaut, 75017 Paris, France
Email: cedric@c2studio.io
2. Data collected
Depending on your interactions with the website, we may collect:
a) Data you provide to us
- Identity: last name, first name (if provided)
- Contact details: email (and phone number if you provide it)
- Professional information: company, job title (if provided)
- Message content: requests via forms, emails, appointment booking
b) Technical data (browsing)
- Audience measurement data (pages viewed, referrer, etc.)
- Minimal technical information (e.g. browser, device), depending on tool settings
3. Purposes and legal bases
We process your data to:
- Respond to your requests (contact, audit). Legal basis: legitimate interest / pre-contractual measures.
- Schedule and manage appointments. Legal basis: pre-contractual measures.
- Perform our services and manage the contractual relationship. Legal basis: performance of a contract.
- Administrative and accounting management. Legal basis: legal obligation.
- Audience measurement and website improvement. Legal basis: legitimate interest (or consent).
4. Tools and processors
We use service providers to operate the website:
- Website hosting and publishing: Netlify
- Forms, audit: Tally
- Appointment booking: Google Calendar
- Contact and opportunity management: HubSpot CRM
- Audience measurement: Plausible Analytics
These providers may process data on our behalf. Location: EU / outside the EU.
5. Retention periods
- Prospects / incoming requests: Up to 3 years after the last contact.
- Clients: Archived in accordance with legal obligations.
- Applications: Up to 2 years after the last contact.
6. Recruitment
If you apply, you can send your CV and application details to: jobs@c2studio.io. This data is used solely to manage recruitment.
7. Data recipients
Data is only accessible to authorized persons at C2 Innov8 and to the service providers listed above.
8. Transfers outside the European Union
Some providers may process data outside the EU. In that case, transfers are governed by appropriate safeguards (e.g. standard contractual clauses).
9. Security
We implement reasonable measures to protect your data (access control, restricted permissions, good practices).
10. Your rights (GDPR)
You have the following rights: access, rectification, erasure, objection, restriction and portability. To exercise your rights: cedric@c2studio.io. You may also lodge a complaint with the CNIL (the French data protection authority).
11. Cookies / audience measurement
We use Plausible Analytics, a solution designed to minimize data collection (it can work without cookies). Some embedded services (Google Calendar, forms) may nevertheless set necessary trackers.