Privacy policy
Last updated: 2026-09-07
Data controller
The data controller is optimaier; full details are given in the legal notice. For any question about your data: admin@optimaier.com.
Data we collect
- Contact form and audit requests — name, email address, company and the content of your message, provided directly by you.
- Call booking — the information you enter when booking a call (via Calendly).
- User account — email address and sign-in credentials, if you create an account.
- Audience measurement — aggregate, anonymous technical data (page views, referrer, device type), with no cookie or persistent identifier.
Purposes and legal bases
Each purpose rests on a single legal basis under Article 6 GDPR:
- Responding to contact or audit requests — pre-contractual steps taken at your request (Art. 6(1)(b)).
- Running your account and delivering our services — performance of a contract (Art. 6(1)(b)).
- Measuring site audience — legitimate interest in improving our site, using anonymous, cookieless measurement (Art. 6(1)(f)).
- Advertising trackers, where used — your prior consent, collected through the cookie preferences panel (Art. 6(1)(a)).
- Accounting and legal obligations — legal obligation (Art. 6(1)(c)).
Recipients and processors
Your data is accessible to our team and to the technical providers below, acting as processors on our instructions only. We do not sell or rent your data.
| Provider | Purpose | Location |
|---|---|---|
| Vercel Inc. | Website hosting and delivery | United States (outside EU) |
| Vercel Web Analytics | Aggregate, cookieless traffic measurement | United States (outside EU) |
| Supabase | Database hosting for contact requests and accounts | European Union |
| Calendly | Booking of introductory calls | United States (outside EU) |
Some of these providers are established in the United States. Such transfers outside the European Union are governed by the European Commission standard contractual clauses and, where applicable, by the providers certification under the EU-US Data Privacy Framework.
Retention periods
- Contact requests and prospects: 3 years from the last exchange.
- User accounts: for the duration of the contractual relationship, then 3 years.
- Accounting and contractual records: 10 years, as legally required.
- Cookie consent: 6 months, in line with CNIL guidance.
Your rights
You have the following rights over your personal data:
- Right of access to, and a copy of, your data
- Right to rectification of inaccurate data
- Right to erasure, in the cases provided for by the GDPR
- Right to restriction of processing
- Right to object, in particular to processing based on legitimate interest
- Right to data portability
- Right to withdraw consent at any time, without affecting the lawfulness of processing carried out beforehand
- Right to give directions on what happens to your data after your death
To exercise these rights, write to us at admin@optimaier.com. We reply within one month. If, after contacting us, you consider your rights have not been respected, you may lodge a complaint with the CNIL (cnil.fr).
Security
We apply appropriate technical and organisational measures: encrypted transport (HTTPS), access control on our databases, access logging, and collecting no more data than necessary.
Changes
This policy may be updated to reflect changes in our processing or in the law. The date of the last update is shown at the top of this page.