Effective Date: January 1, 2026 | Last Updated: September 15, 2026
1. Data Controller Identification
This Privacy Policy governs the processing of personal data by ZA AGENCY (a French SARLU registered under SIREN 977 910 009, with its registered headquarters at 7 Rue du 8 Mai 1945, 92340 Bourg-la-Reine, France).
The Data Protection Representative and designated officer is Brian Langy, reachable directly via email at [email protected] or by mail at our registered address.
2. Scope & Legal Framework
ZA AGENCY processes personal and technical data in strict compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation — GDPR), the French Data Protection Act (Loi n° 78-17 du 6 janvier 1978 relative à l'informatique, aux fichiers et aux libertés), and guidance issued by the French Data Protection Authority (Commission Nationale de l'Informatique et des Libertés — CNIL).
3. Categories of Data Collected
- Technical & Connection Data: IP address, user-agent string, timestamp of request, HTTP referrer, and session telemetry collected automatically for network security and load balancing.
- Contact & Diagnostic Inquiries: Full name, professional email address, organization name, phone number, and technical project parameters provided voluntarily via our online inquiry forms.
- Commercial & Billing Records: Invoicing coordinates, corporate VAT numbers, transaction identifiers, and signed engagement contracts retained for statutory accounting records.
4. Legal Bases for Processing
We process your data under the following lawful bases pursuant to Article 6(1) of the GDPR:
- Performance of a Contract (Art. 6(1)(b)): To review technical requests, prepare diagnostic proposals, and execute consulting engagements.
- Legitimate Interests (Art. 6(1)(f)): To safeguard infrastructure integrity, prevent malicious penetration attempts, and optimize service delivery.
- Compliance with Legal Obligations (Art. 6(1)(c)): To maintain corporate, tax, and accounting registers required under the French Commercial Code.
- Consent (Art. 6(1)(a)): For optional analytics cookies where explicit consent is granted.
5. Data Retention Periods
| Data Category | Retention Period | Legal Justification |
|---|---|---|
| Server Access Logs | Up to 12 months | Cybersecurity & anomaly investigation |
| Inquiry & Diagnostic Requests | 3 years from last contact | Commercial follow-up and proposal archive |
| Contractual & Invoicing Data | 10 years | French Commercial Code (Art. L123-22) |
6. Data Sharing & Sub-Processors
ZA AGENCY does not sell, rent, or trade personal data to third parties. Data is only accessible to authorized personnel and strictly audited European hosting and infrastructure providers operating under standard contractual clauses and GDPR data processing agreements.
7. Your Statutory Data Subject Rights
Under Chapter III of the GDPR, you maintain the following actionable rights:
- Right of Access (Art. 15): Obtain confirmation of whether your data is being processed and receive a copy of your records.
- Right to Rectification (Art. 16): Request correction of inaccurate or incomplete personal details.
- Right to Erasure (Art. 17): Request deletion of your data when no longer necessary for original purposes or legal compliance.
- Right to Restriction of Processing (Art. 18): Request temporary freezing of data processing under specific dispute conditions.
- Right to Data Portability (Art. 20): Receive your data in a structured, commonly used, machine-readable format.
- Right to Object (Art. 21): Object at any time to processing grounded on legitimate interests.
8. Exercising Your Rights & Supervisory Authority
To exercise any of the rights enumerated above, submit your written request to:
ZA AGENCY — Data Protection Desk
Attention: Brian Langy
7 Rue du 8 Mai 1945, 92340 Bourg-la-Reine, France
Email: [email protected]
You also have the statutory right to lodge a formal complaint with the French Data Protection Authority (CNIL) at www.cnil.fr or by mail: CNIL — 3 Place de Fontenoy — TSA 80715 — 75334 PARIS CEDEX 07, France.