Client Area

Privacy Policy

1. Introduction

This privacy policy describes how LinkTec collects, uses and protects the personal data you provide when using our website bn-linktec.fr and our services.

LinkTec is committed to respecting the privacy of its users and to protecting personal data in accordance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679) and the French Data Protection Act (Loi Informatique et Libertés, Act No. 78-17 of 6 January 1978, as amended).

Our services are intended exclusively for business professionals (B2B).

2. Data Controller

The data controller is:

LinkTec — Sole Proprietorship (Entreprise Individuelle)
Rue des Chrysanthèmes, 59700 Marcq-en-Barœul, France
SIRET: 99990251300012
Email: contact@bn-linktec.fr

LinkTec has not appointed a Data Protection Officer (DPO). For any questions regarding your personal data, please contact us at the address above.

3. Data Collected

We collect the following data depending on the context of interaction:

3.1 Contact Form

  • Full name *
  • Email address *
  • Phone number (optional)
  • Company name (optional)
  • Desired service (optional)
  • Estimated budget (optional)
  • Message *

Fields marked with * are required.

3.2 Client Area

  • Name, surname, email address
  • Password (stored in encrypted form — bcrypt)
  • Project-related documents (uploaded by the administrator)
  • Messages exchanged via the integrated messaging system
  • Profile information editable in settings

3.3 Payments

Payments are processed directly by Stripe (credit card) and PayPal. LinkTec does not store any payment data (card numbers, banking credentials). Only transaction confirmations (amount, date, status) are retained in the client area.

3.4 Anti-Spam

The contact form uses an anti-spam mechanism (hidden "honeypot" fields and timestamp verification). This data is not stored and is used solely to filter automated submissions.

4. Legal Bases for Processing (Art. 6.1 GDPR)

Each processing activity relies on a specific legal basis:

  • Contact form: legitimate interest (pre-contractual measures) — Art. 6.1(f)
  • Client area (account, projects, messaging): performance of a contract — Art. 6.1(b)
  • Payments (via Stripe / PayPal): performance of a contract — Art. 6.1(b)
  • Studio notification (email redirect): consent — Art. 6.1(a)
  • Anti-spam (honeypot, timestamp): legitimate interest (security) — Art. 6.1(f)

5. Purposes of Processing

  • Responding to your contact and quote requests
  • Managing your client area, projects and documents
  • Processing payments and invoicing
  • Ensuring website security and preventing abuse
  • Complying with our legal and tax obligations

6. Data Retention

  • Contact form: 3 years from the last contact
  • Client area: duration of the business relationship + 3 years (civil statute of limitations)
  • Billing data: 10 years (accounting obligation — Art. L123-22 French Commercial Code)
  • Connection logs: 1 year (LCEN obligation)

Beyond these periods, data is deleted or anonymised.

7. Recipients and Sub-Processors

Your personal data is never sold or rented to third parties. It may be shared with the following sub-processors, strictly for the provision of our services:

  • OVHcloud (SAS, Roubaix, France) — website hosting, databases, SMTP email delivery. Data stored in France / EU.
  • Stripe (Stripe Payments Europe Ltd, Dublin, Ireland) — credit card payment processing. Data processed in the EU; transfers to Stripe Inc. (US) are governed by Standard Contractual Clauses (SCCs) of the European Commission.
  • PayPal (PayPal (Europe) S.à r.l., Luxembourg) — PayPal payment processing. Data processed in the EU; transfers to PayPal Inc. (US) are governed by SCCs.

Your data may also be disclosed to competent authorities where required by law.

8. Transfers Outside the European Union

Some of our sub-processors may transfer data outside the European Union. These transfers are governed by the following mechanisms:

  • Stripe Inc. (United States): Standard Contractual Clauses (SCCs) + Stripe DPA
  • PayPal Inc. (United States): Standard Contractual Clauses (SCCs) + PayPal Privacy Policy
  • Third-party CDN (GSAP / ScrollTrigger via Cloudflare or jsDelivr): JavaScript files are loaded from CDN servers, some nodes of which may be located outside the EU. Only the visitor's IP address is transmitted (legitimate interest — proper functioning of the website).

Note: typefaces (Inter, Outfit, Playfair Display) are hosted locally on our server — no calls are made to Google Fonts and no data is transferred to Google.

9. Cookies and Similar Technologies

Our website uses the following storage technologies:

9.1 PHP Session Cookie (PHPSESSID)

A strictly necessary cookie for the operation of the client area. It is deleted when the browser is closed. No consent required.

9.2 Local Storage (localStorage)

  • linktec-theme — theme preference (light/dark). Stored indefinitely on the client side.
  • linktec-lang — language preference (FR/EN). Stored indefinitely on the client side.

This data remains on your device and is never transmitted to our servers. No consent required (technical preferences — CNIL exemption).

9.3 Session Storage (sessionStorage)

  • linktec-intro-played — indicates whether the introduction animation has been played. Deleted when the tab is closed.

No consent required (technical operation).

9.4 No Advertising or Tracking Cookies

We do not use any advertising cookies, tracking pixels (Facebook, Google Analytics, etc.) or behavioural tracking tools. No cookie consent banner is therefore necessary.

10. Your Rights

In accordance with the GDPR (Articles 15 to 22), you have the following rights:

  • Right of access (Art. 15): obtain a copy of your personal data
  • Right to rectification (Art. 16): correct inaccurate or incomplete data
  • Right to erasure (Art. 17): request the deletion of your data
  • Right to restriction (Art. 18): request the restriction of processing of your data
  • Right to data portability (Art. 20): receive your data in a structured, machine-readable format
  • Right to object (Art. 21): object to processing based on legitimate interest
  • Right to withdraw consent: withdraw your consent at any time, without affecting the lawfulness of prior processing
  • Post-mortem directives (French Data Protection Act, Art. 85): define instructions regarding the handling of your data after your death

11. How to Exercise Your Rights

To exercise your rights, send your request by email to: contact@bn-linktec.fr

Please include your identity details (name, surname, email associated with your account if applicable). We may request proof of identity in cases of reasonable doubt.

We are committed to responding within one month of receiving your request. This period may be extended by two months in case of complexity or a high volume of requests, in which case you will be informed.

12. Security

We implement appropriate technical and organisational measures to protect your data:

  • HTTPS connection (SSL/TLS certificate)
  • Encrypted passwords (bcrypt)
  • CSRF protection on forms
  • Restricted data access (principle of least privilege)
  • Regular backups
  • Hosting in France (OVHcloud, Roubaix datacentre)

13. Policy Changes

We reserve the right to modify this privacy policy at any time. The date of the last update is indicated at the bottom of this page. We recommend checking this page regularly.

14. Contact and Complaints

For any questions regarding this policy or to exercise your rights:

Email: contact@bn-linktec.fr

If you believe the processing of your personal data constitutes a violation of the GDPR, you have the right to lodge a complaint with the CNIL:

Commission Nationale de l'Informatique et des Libertés (CNIL)
3 Place de Fontenoy, TSA 80715
75334 Paris Cedex 07, France
www.cnil.fr

Last updated: February 2026