Privacy policy

Redmontis SAS pays particular attention to the protection of financial and personal data. This policy describes the processing carried out via the redmontis.com website and via the Redmontis solution, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).

Two distinct roles

Redmontis acts in two different capacities, which should not be confused:

Data controller for the data collected by the redmontis.com website: contact form, demo request, appointment booking and website traffic measurement.

Processor, within the meaning of article 28 GDPR, for the data a client enters, imports or generates in the Redmontis solution. That data is processed on the documented instructions of the client, who is the data controller, under the conditions set out in article 12 of our general terms of sale and subscription.

Data controller

Redmontis SAS, 121 Boulevard Perier, 13008 Marseille, France. Contact: contact@redmontis.com.

Data collected by the website

Through the contact and demo request form, we collect: first and last name, business email address, company, profile (CEO, CFO, investor, etc.) and the content of your message. None of this data is required beyond what is necessary to handle your request.

Purposes and legal basis

This data is used solely to respond to your request, arrange a demonstration and carry out the related commercial follow-up. The legal basis is your consent and Redmontis's legitimate interest in responding to the inquiries it receives.

Retention period

Data is kept for as long as necessary to process the request, then for the duration of the commercial relationship and, where applicable, for up to 3 years after the last contact, unless a longer legal retention obligation applies.

Connection logs of the solution are retained for twelve (12) months, then deleted automatically.

Hosting and data location

Application processing is run by Vercel Inc. in the Paris region (France). The database and authentication are operated by Supabase on Amazon Web Services infrastructure in the eu-west-3 region (Paris, France). All data at rest resides in the European Union or the European Economic Area.

Data is encrypted at rest with AES-256, backups included, and in transit with TLS. Isolation between clients is enforced at the database level itself, through a PostgreSQL Row Level Security mechanism constraining every query to the authenticated user's organisation, independently of the application code.

Transfers outside the European Union

No transfer of data outside the European Union takes place in the normal operation of the solution. As the infrastructure providers are companies incorporated under US law, residual access from third countries cannot be excluded, in particular for technical support and content delivery. Such access is governed by the European Commission's standard contractual clauses, incorporated into the data processing agreements concluded with each of these providers.

Processors

The data is intended solely for authorised Redmontis personnel. It is neither sold nor transferred to third parties. The list of processors is as follows, and distinguishes those of the website from those of the solution.

Redmontis solution
Vercel Inc.: application hosting and delivery, processing in the Paris region (France).
Supabase, on Amazon Web Services infrastructure: database and authentication, eu-west-3 region (Paris, France).

redmontis.com website
Vercel Inc.: hosting and delivery of the website.
Cal.com: appointment booking from the website, European region. When you book a slot, the information you enter (name, email, reason) is processed by Cal.com solely on behalf of Redmontis. Cal.com has no access to any data entered in the solution.

No third-party analytics tool and no external support tool is embedded in the solution.

Cookies and traffic measurement

This site sets no analytics cookie and no advertising tracker, calls on no third-party analytics tool, and stores no visitor identifier in your browser.

Should any traffic measurement be introduced, it would be described here and, where the law requires it, preceded by a request for your consent.

Export and return of data

Clients can export their data at any time from the solution, in a structured and commonly used format. At the end of the contract, data is returned on request within thirty (30) days, then deleted, unless a legal retention obligation applies.

Your rights

You have the right to access, rectify, erase, object to, restrict and port your data. To exercise these rights, write to contact@redmontis.com. You may also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).

Where Redmontis acts as a processor, requests concerning data entered in the solution should be addressed to the client acting as data controller; Redmontis assists that client under the conditions set out in article 12 of the general terms.

This is a translation provided for convenience. The French version of this policy and of the general terms is the only binding one.