This policy describes how QUADTECH collects, uses and protects your personal data when you browse this website or fill in one of our forms. It complies with the General Data Protection Regulation (GDPR) and applicable French data protection law.
1. Data controller
The data controller is QUADTECH (SAS), whose registered office and contact details appear in the legal notice. For any question regarding your data, you can write to us at info@quadtech.fr.
2. Data we collect
We only collect the data you provide to us and what is strictly necessary for the site to work:
Form data
Through our forms (contact, audit request, Storc AI demo request, beta-tester application, waitlist), depending on the form: name, company name, work email, country, industry, declaration volume, and the free-text content of your message or need.
Technical data
While browsing: strictly necessary connection data (IP address, browser type, pages visited), used for security and to keep the site running properly.
3. Purposes and legal bases
- Responding to your requests (audit, demo, beta, contact) and getting back to you: legal basis = pre-contractual steps taken at your request and/or QUADTECH's legitimate interest in handling inbound requests.
- Managing our business relationship and leads: QUADTECH's legitimate interest.
- Ensuring the security and improvement of the site: legitimate interest.
When a form is received, we carry out an internal prioritisation of the request (analysis of the need and priority level), based on the information you provided only, in order to organise our commercial follow-up. This analysis is performed with an artificial-intelligence provider established in the European Union (Mistral AI, France), which processes this data within the EU, on our instructions and without reusing it for its own purposes; no external research is carried out about you. This assessment produces no fully automated decision with legal or similarly significant effects concerning you: your request is still handled by our team.
4. Recipients of the data
Your data is intended for QUADTECH's internal teams handling your request. It may be processed by technical sub-processors acting on QUADTECH's instructions and bound by confidentiality:
- Website hosting: Amazon Web Services EMEA SARL (EU region, Ireland) — see section 6.
- Form automation: an automation tool self-hosted on QUADTECH's own infrastructure, where form data is received and stored.
- Email: our email provider, to send you the acknowledgement of your request and for the internal notification.
- Automated analysis of the request: Mistral AI (an AI provider established in France, processing within the EU), for the internal prioritisation described in section 3, on QUADTECH's instructions.
Your data is never sold, rented or transferred to third parties for commercial purposes. The only artificial-intelligence provider receiving your data is established in the European Union and acts on our instructions; no data is transmitted to an AI provider outside the EU.
5. Retention period
- Contact requests / inactive leads: 3 years from the last contact.
- Data linked to a contractual relationship: the duration of the relationship, then archived in line with applicable legal obligations.
- Technical logs: 12 months maximum.
6. Hosting and transfers outside the European Union
This site is hosted on Amazon Web Services (AWS) infrastructure, in a region located within the European Union (Ireland): your data is therefore stored and processed in the EU. As AWS is a provider whose parent company is established in the United States, access from a third country cannot be entirely ruled out; where applicable, such transfers are governed by the appropriate safeguards provided for under the GDPR (standard contractual clauses). Apart from this case, your data is processed within the European Union: fonts are served from our own domain (no third-party call), and the automated analysis of your request is performed by an AI provider established in the EU (Mistral AI, France) that processes this data within the EU. No form data is transmitted to an artificial-intelligence provider located outside the EU.
7. Your rights
Under the GDPR, you have the following rights over your data:
- Right of access and rectification;
- Right to erasure ("right to be forgotten");
- Right to restriction of processing;
- Right to object to processing based on legitimate interest;
- Right to data portability;
- Right to set directives regarding your data after your death.
8. Exercising your rights
To exercise these rights, write to us at info@quadtech.fr. We may ask you for proof of identity. You also have the right to lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).
No data protection officer (DPO) has been appointed to date; for any question regarding your data, please use the address indicated above.
9. Cookies
This site sets no cookies and uses no advertising trackers, no audience-measurement tool and no third-party tracking service. Fonts are served from our own domain, with no call to an external service. No prior consent is therefore required. Should a cookie or an audience-measurement tool be added in the future, a consent banner would be put in place beforehand.
10. Security
QUADTECH implements appropriate technical and organizational measures to protect your data against unauthorized access, alteration or disclosure, in line with its data sovereignty principle.
11. Changes
This policy may be updated to reflect legal or technical developments. The last-updated date appears at the top of the page.