In short

This site collects no personal data. It sets no cookies, embeds no trackers, contains no forms and runs no server-side processing. The processing described below concerns the NavOps application, which is separate from this site.

1. Data controller

Controller: [legal name of the publishing company]
Registered office: [full address]
Contact for personal data matters: [dedicated email address]
Data protection officer: [name and contact details, or “not appointed” if that is the case]

2. The www.navops.fr website

2.1 No collection

The site is strictly static. It has no database, no application programming interface and no forms. No data you might type could be transmitted, because there is no receiving endpoint.

2.2 No cookies, no trackers

No cookie is set, technical ones included. No analytics, behavioural tracking or advertising tool is present. No resource is loaded from a third-party domain: the typefaces are self-hosted, precisely so that your browsing is not exposed to a third party.

2.3 Host technical logs

For security and operational purposes, the site’s host retains connection logs which may contain an IP address.

Legal basis: legitimate interest (service security).
Retention period: [to be confirmed with the host].
Recipient: Scaleway SAS, as processor.

2.4 Writing to the team

The Contact page displays email addresses. If you write to us, the message and its content travel through your mail system and ours. They are kept for as long as needed to handle your request, then [retention period to be defined].

3. The NavOps application

The application, available on a separate domain, carries out processing that this site does not.

3.1 Data processed

Account data: professional identity, email address, role and scope of entities.
Connection data: timestamp, IP address, multi-factor authentication elements.
Steering data: budgets, contracts, projects, applications and suppliers entered by your teams. This data is not personal data by nature; it may contain some incidentally (a project owner’s name, a supplier contact).

3.2 Purposes and legal bases

Purpose	Legal basis
Providing the subscribed service	Performance of the contract
Access security and traceability	Legitimate interest
Invoicing and accounting obligations	Legal obligation
Assistance and support	Performance of the contract

3.3 Respective roles

For steering data entered into the application, the customer is the controller and the publisher acts as processor within the meaning of Article 28 GDPR. The terms of that processing are set out in [reference of the data processing agreement].

3.4 Retention periods

Account data: for the duration of the contract, then [period] after it ends.
Connection logs: [period].
Steering data: for the duration of the contract. On termination it can be exported and is then deleted within [period].

3.5 Processors and data location

Sovereign cloud mode: hosting by Scaleway SAS, French regions. No transfer outside the European Union.
On-Premise mode: the data stays on your infrastructure. The publisher has no access to it and receives nothing back.
Other processors: [list to be completed — invoicing, transactional email, support].

4. Your rights

You have rights of access, rectification, erasure, restriction, objection and portability, under the conditions set out by the GDPR. To exercise them, write to [dedicated email address]. You will receive a reply within one month.

If you use the application in a professional capacity, please contact your employer first, as the data controller.

You may lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.

5. Changes

This policy may change. The date of the last update appears at the top of the page. Any substantial change concerning the application is communicated to customers by the means set out in the contract.

To be completed before publication. Bracketed items must be filled in and the whole document reviewed by legal counsel. This is a scaffold, not validated text.