Privacy policy

Data controller

The controller of personal data is:

Data controller:

Amos MIGNERY

Legal form:

Individual entrepreneur (EI)

Address:

61 rue de Lyon, 75012 Paris, France

Email:

[email protected]

Data processed

In connection with the site and the sale of the report, the following categories of data are processed:

• Order data: email address, domain name to be analysed, order date and amount, transaction references provided by Stripe;
• Payment data: processed exclusively by Stripe; FKINFAST has no access to it and does not store it;
• Technical logs: IP address, timestamps and request characteristics, collected for security and operational purposes;
• Communications: emails exchanged with support.

Purposes and legal bases

Data is processed for the following purposes and on the following legal bases:

• Providing the ordered report: performance of the contract with the customer (Article 6(1)(b) GDPR);
• Retention of invoices and accounting records: compliance with a legal obligation (Article 6(1)(c) GDPR);
• Site security, abuse and fraud prevention: the Seller's legitimate interest in protecting its services (Article 6(1)(f) GDPR);
• Handling support requests: the Seller's legitimate interest in answering its customers (Article 6(1)(f) GDPR).

Recipients and processors

Data is processed by the following providers, acting as processors or independent recipients as the case may be:

• Stripe Payments Europe, Ltd. (Ireland): online payment processing;
• Resend (United States): delivery of transactional emails (report delivery, notifications);
• Cloudflare, Inc. (United States): content delivery network, site security (including Turnstile bot protection and inbound support email routing) and cookieless analytics;
• Netcup GmbH (Germany): site hosting;
• OVH SAS (France): business email hosting.

Transfers outside the European Union

Some providers are established outside the European Union, in particular in the United States (Resend, Cloudflare). These transfers are covered by appropriate safeguards within the meaning of the GDPR: European Commission standard contractual clauses and/or certification under the EU-US Data Privacy Framework, depending on the provider.

No transfer is made for purposes other than those described in this policy.

Retention periods

Data is retained for the following periods:

• Invoices and accounting records: ten (10) years from the closing of the financial year, in accordance with accounting obligations;
• Order data and proof of delivery: twelve (12) months from delivery of the report;
• Emails and support exchanges: twelve (12) months from the last exchange;
• Technical logs: twelve (12) months at most.

Your rights

Under the GDPR, you have the following rights over the data concerning you:

• Right of access: to obtain confirmation that your data is being processed and receive a copy;
• Right to rectification: to correct inaccurate or incomplete data;
• Right to erasure (right to be forgotten): to request deletion of your data in the cases provided for by the GDPR;
• Right to data portability: to receive the data you provided in a structured, machine-readable format;
• Right to restriction of processing: to request suspension of the use of your data in the cases provided for by the GDPR;
• Right to object: to object, on grounds relating to your particular situation, to processing based on legitimate interest.

Exercising your rights

To exercise these rights, contact the data controller using the details in the Data controller section or below.

A reply will be provided within one month, which may be extended by two months for complex or numerous requests.

If you believe your rights are not being respected, you can lodge a complaint with the French data protection authority (CNIL).

[email protected]

Cookies

The site does not use any advertising or visitor-tracking cookies. The only storage used is strictly necessary or exempt from consent.

Details of the cookies and storage used are set out on the dedicated page:

Cookies

Automated decisions

No decision producing legal effects concerning you is taken by automated means, including profiling, on the basis of the data processed within the meaning of Article 22 GDPR. The report is generated automatically from technical checks, without any automated decision concerning a person.

Security

Communications with the site are encrypted (TLS/HTTPS) and payments are handled by Stripe, which is PCI-DSS certified.

Rate limiting and filtering measures are in place to prevent abuse and intrusion attempts.

No bank card data is stored or processed by FKINFAST, and access to personal data is limited to what is strictly necessary.

Sale of data

Personal data is neither sold, rented nor transferred to third parties. It is used only for the purposes described in this policy.