Last updated: 10 November 2026
This page is a translation provided for information purposes; in the event of any discrepancy, the French version prevails.
This privacy policy describes how personal data is processed when the Nykteo Consulting website is visited and used.
1. Data controller
The controller for the processing of personal data carried out through the website is:
- Company name: Nykteo Consulting
- Legal form: Société par Actions Simplifiée Unipersonnelle (SASU, French single-shareholder simplified joint-stock company)
- Registered office: 173 rue de Courcelles, 75017 Paris, France
- SIREN: 103444436
- Email address: dpo@nykteo.com
For any question about the protection of personal data, you can contact the company at the email address above.
2. Technical browsing data
The purpose of the website is to present the company’s activities and consulting services.
No audience measurement, advertising tracking, profiling or behavioural tracking tool is knowingly used.
The website has no internal database intended to store visitors’ personal information.
The website is served from a dedicated server rented from OVH and administered by Nykteo Consulting. For every request, the web server records technical connection logs.
These logs include the IP address, the date and time of the request, the page or file requested, the server response code, the referring page and information about the browser used.
They are processed by Nykteo Consulting to ensure the operation and security of the website: detecting and analysing incidents and preventing abuse. This processing is based on the company’s legitimate interest (Article 6(1)(f) GDPR).
These logs are not used for audience measurement or to profile visitors.
3. Third-party contact form
The website offers a contact form provided by the external service provider Formspree.
Information voluntarily provided by visitors is collected so that the company can respond to enquiries and professional requests.
The data that may be collected includes:
- First and last name;
- Email address;
- Company, where applicable;
- Subject and content of the message;
- Any other information voluntarily provided by the user.
The data is sent directly to Formspree, which handles the technical processing of submissions and stores them as part of its service.
Provider: Formspree
Website: https://formspree.io/
The company processes the data solely to respond to the request made and to handle any resulting exchanges.
Formspree retains submissions for 30 days.
For more information on the processing carried out by this provider, see its privacy policy: https://formspree.io/legal/privacy-policy/.
4. Data recipients
Personal data collected through the website is intended for Nykteo Consulting and for the technical service providers acting on its behalf, in particular:
- OVH: provision of the dedicated server on which the website is hosted;
- Formspree: technical processing of the contact form and storage of submissions.
These providers may act as processors within the meaning of the GDPR.
The data is neither sold nor transferred to third parties for commercial purposes.
It may, however, be disclosed to the competent authorities where required by law.
5. Retention periods
Personal data is retained for a period proportionate to its purpose.
The server’s technical connection logs are retained for one year at most, then deleted automatically.
Requests sent through the contact form are retained for as long as necessary to handle them and the resulting exchanges.
Data recorded by technical service providers is retained in accordance with their own policies and terms of service.
At the end of the applicable periods, the data is deleted or archived in accordance with the regulations.
6. Data security
Nykteo Consulting takes appropriate technical and organisational measures to protect the personal data processed through the website against loss, alteration, disclosure or unauthorised access.
The service providers involved in operating the website are selected taking into account the security guarantees they offer.
7. Cookies and trackers
The website knowingly uses no advertising cookies, behavioural tracking tools or audience measurement tools.
The company uses no profiling or cross-site tracking tools.
Technical mechanisms strictly necessary for the operation and security of the website may nevertheless be used by the technical service providers.
Using the third-party contact form may also involve technical processing specific to Formspree.
8. Rights of data subjects
In accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés), every data subject has the following rights, under the conditions laid down by the regulations:
- Right of access to their personal data;
- Right to rectify inaccurate data;
- Right to erasure of their data;
- Right to restriction of processing;
- Right to object to processing;
- Right to data portability, where applicable;
- Right to withdraw consent where processing is based on consent.
Requests to exercise these rights can be sent to:
Every data subject also has the right to lodge a complaint with the French data protection authority (Commission nationale de l’informatique et des libertés, CNIL).
Website: https://www.cnil.fr/
9. Changes to this privacy policy
This privacy policy may be amended at any time to reflect regulatory or technical changes to the website.
The applicable version is the one published on this website on the date of consultation.