Privacy policy
This page explains what data is collected on this website, why, and what your rights are under the GDPR (European Union) and the Swiss FADP (nLPD, Switzerland).
In case of discrepancy, the French version prevails.
Data controller
MUNCH ENTREPRISES · 22 B rue Hallen, 68220 Hégenheim, France · contact@norasync.fr
Data collected
Only the information you enter in the contact form: company, name, job title, contact details and a description of your needs. No audience measurement or advertising cookies are used on this website at present.
Express diagnostic
When you enter your website address, we read a few public pages of that website to produce the diagnostic, which is shown only in your browser. This content is not kept unless you request the full diagnostic. If you do, your company, your email, your answers and the summary of the analysis are sent to us so that we can reply.
Purpose
To answer your request, follow it up and, where appropriate, prepare a proposal. Requests received through the form or the diagnostic are stored in our internal contact tracking tool. Your data is neither sold nor used for prospecting unrelated to your request.
Legal basis
Your consent, given by ticking the box provided in the form, and pre-contractual measures taken at your request.
Retention period
Three years from the last contact, unless a contractual relationship is ongoing.
Recipients and processors
Your data is processed by the website publisher and by technical processors: Vercel Inc. (website hosting, United States), Resend (email delivery of requests sent through the form), Neon Inc. (database for our contact tracking tool, hosted in the European Union, in Frankfurt), Google (Gmail, where our emails are prepared) and OpenAI (help with drafting our quotes, based on the description of your needs; this data is not used by OpenAI to train its models). It is not shared with any other third party.
Business-to-business prospecting
We may offer our services by email to companies established in France, only at the business address published on their own website. Sources: the public business directory (the Recherche d’entreprises API on data.gouv.fr, drawn from INSEE’s Sirene register, the official French business register; companies that have objected to the commercial use of their data are excluded), the company’s website (published address and technical findings, for example the lack of a mobile version) and Google, used only to find the website address (only the Google place identifier is kept). Data processed: name, SIREN and SIRET numbers (French company identification numbers), activity and town of the company, its website address, published business email address, findings about the website and the history of our exchanges. Legal basis: our legitimate interest in making our services known to businesses, for an offer related to their activity (article 6.1.f of the GDPR and article L34-5 of the French Postal and Electronic Communications Code). Drafting the message relies on OpenAI, which receives only the activity and the finding, with no name or address. Each message states where the address came from and contains an unsubscribe link. Retention: three years after the last contact that went unanswered. The addresses of people who object are kept as a hash, with no time limit, solely so that they are never contacted again. No automated email prospecting is carried out towards companies established in Switzerland.
Accepting a quote online
If you accept a quote from the personal link we send you, we record the date and time of acceptance, your IP address and the type of browser used, as proof of your agreement. This information is kept with the quote for the duration of the business relationship and then for the legally required retention period.
Your rights
You can request access to, rectification, erasure, restriction or portability of your data, object to its processing and withdraw your consent at any time, by writing to the contact address below. You can also lodge a complaint with the CNIL (French data protection authority) or the FDPIC (Swiss Federal Data Protection and Information Commissioner).