Privacy policy

Oppdrag.tech is committed to protecting the privacy of its website users. This policy describes the main processing of personal data related to the website, its contact and application forms, and email exchanges.

The data controller is Oppdrag.tech SASU, whose registered office is at 26 rue des Monts de Vigne, 21000 Dijon, France. Contact: privacy@oppdrag.tech

2.1 Data you provide

• First name, last name, email address
• Position, organisation, professional information
• Content of messages sent through the forms or by email
• Any information voluntarily provided as part of a request or an application

2.2 Technical data

• Technical data needed to deliver pages and secure the website (IP address, browser, date and page requested), processed by the server and the hosting provider

The website uses no audience measurement tool: it measures neither the pages you view nor the time you spend on them.

• Answering requests sent through the website or by email
• Following up commercial or operational exchanges
• Ensuring the operation and security of the website
• Complying with legal, regulatory or compliance obligations
• Reviewing applications to the expert pool and presenting anonymised profiles as part of expert support

• Consent, where required
• The performance of pre-contractual or contractual measures
• Oppdrag.tech's legitimate interest in handling requests and securing the website
• Compliance with legal or regulatory obligations

Personal data may be disclosed, to the extent necessary, to technical service providers used for hosting (OVH SAS), security or message delivery. Oppdrag.tech does not transfer personal data to third parties for resale or marketing purposes.

• Contact and prospect data: 3 years from the last contact
• Expert applications: 2 years from the application, unless explicitly extended by agreement
• Technical browsing data (server logs): retained for as long as necessary for the security and operation of the website
• Contractual data: term of the contract plus 5 years (legal obligations)

When no longer needed, data is deleted, archived or anonymised as appropriate. Retention periods are reviewed every year.

Oppdrag.tech implements reasonable technical and organisational measures to protect data against unauthorised access, loss, alteration, disclosure or destruction: encrypted connections (HTTPS) and security headers (content security policy, HSTS, protection against framing of the website).

This website sets no cookies. It keeps a single item in your browser, never transmitted, which is necessary for it to work: the display theme you have chosen (local storage). The language is given by the page address and is not stored. This item is exempt from consent under the guidelines of the CNIL (the French data protection authority); you can delete it at any time from your browser settings.

No audience measurement tool, third-party tracker, or advertising or profiling cookie is used. That is why no consent banner is displayed.

If some service providers involve processing outside the European Economic Area, Oppdrag.tech ensures that appropriate safeguards are in place (European Commission standard contractual clauses or an equivalent mechanism).

Under the GDPR, you have the following rights:

• Right of access: obtain a copy of the data concerning you
• Right to rectification: correct inaccurate data
• Right to erasure: request the deletion of your data
• Right to data portability: receive your data in a structured format
• Right to object: object to processing based on legitimate interest
• Right to restriction: restrict processing in certain cases

To exercise your rights: privacy@oppdrag.tech or contact@oppdrag.tech. You will receive a reply within one month, as required by the GDPR. You may also lodge a complaint with the CNIL (cnil.fr).

As part of expert support, Oppdrag.tech presents experts to its clients through anonymised profiles. An expert's identity (name, contact details) is never disclosed to a prospective client without the explicit written consent of the expert concerned.

This policy may be updated to reflect legal, technical or organisational changes. The version published on the website is the one that applies on the date of consultation.