Califrais processes some of your personal data when you visit www.califrais.fr or write to us. It acts as data controller, in compliance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.
1. Data controller
Califrais SAS, 4 quai du Val de Loire, 94550 Chevilly-Larue, France · RCS Créteil 803 658 137 · Contact : privacy@califrais.fr
2. Data collected
This site has no forms: we only collect the data you send us when you write to us (stack@, presse@, recrutement@, privacy@califrais.fr).
- Identity and contact details: name, company, job title, email address, phone.
- The content of your messages and attachments, including CVs and cover letters.
- Technical connection data kept by our host: IP address, date and time, pages viewed, browser.
3. Cookies and trackers
This site uses no cookies, and no advertising or social-media trackers. Our fonts are hosted on our own servers. That is why no consent banner is shown. We measure site traffic with Plausible Analytics, a cookie-free tool that records no personal data and cannot identify you or follow you across sites: only aggregate statistics are produced (page views, referrer, device type). The data is hosted in the European Union. The French data protection authority exempts this kind of measurement from consent.
The Careers page loads the list of open roles from a Google Sheets file published by Califrais. To display it, your browser connects to Google's servers, which receive your IP address. Google does not set a cookie in doing so. Google Ireland Limited may transfer this data to the United States under the EU–US Data Privacy Framework.
4. Purposes, legal bases and retention periods
| Purpose | Legal basis | Retention |
|---|---|---|
| Answering your email enquiries (sales, press, general) | Legitimate interest | 3 years from last contact |
| Business-to-business prospecting | Legitimate interest | 3 years from last contact |
| Handling job applications (CVs, letters, exchanges) | Pre-contractual measures; legitimate interest for keeping your profile in our talent pool | Duration of recruitment, then 2 years from last contact unless you object |
| Handling requests to exercise your rights | Legal obligation | 5 years from the request |
| Managing an opt-out list | Legitimate interest | 3 years from the request |
| Site security and hosting logs | Legal obligation; legitimate interest | 1 year |
5. Recipients
Your data is intended for the Califrais teams concerned by your request. It may be processed by our subcontractors, strictly within the scope of their services:
- OVHcloud (France) : website hosting ;
- Pipedrive OÜ (European Union) : customer relationship management ;
- Plausible Analytics (Plausible Insights OÜ, Estonie) : cookie-free audience measurement, data hosted in the European Union ;
- Google Ireland Limited (Google Workspace) : email and publishing the list of open roles.
Where data is transferred outside the European Union, such transfers are covered by an adequacy decision (including the EU–US Data Privacy Framework) or by the European Commission's standard contractual clauses.
6. Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, and to set instructions for what happens to it after your death. To exercise these rights, write to privacy@califrais.fr. We will reply within one month, which may be extended by two months for complex requests.
You may also lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or at cnil.fr.
7. Security
Califrais implements appropriate technical and organisational measures to protect your data against loss, unauthorised access or disclosure.