Privacy policy

1. Data controller

The controller of personal data is:

DIGITAL THERAPY — SARL
14 avenue de Lyon, 06400 Cannes, France
Email: info@digital-therapy.com
Phone: +33 (0)4 23 11 00 13

2. Data collected

We may collect the following data:

• Through the contact form: name, email address, phone number (optional), company (optional), type of project, message.
• Through browsing: technical data relating to your device and your connection (IP address, browser type, pages viewed, timestamp), to the extent necessary for the operation and security of the website.
• Through cookies: see the “Cookies” section below.

3. Purposes and legal bases

Your data is processed for the following purposes:

• Responding to your contact requests — legal basis: legitimate interest and/or pre-contractual measures (Article 6.1.b and 6.1.f of the GDPR).
• Ensuring the operation and security of the website — legal basis: legitimate interest (Article 6.1.f of the GDPR).
• Measuring website traffic (where applicable, with your consent) — legal basis: consent (Article 6.1.a of the GDPR).
• Complying with our legal obligations — legal basis: legal obligation (Article 6.1.c of the GDPR).

4. Recipients of the data

Your data is processed by DIGITAL THERAPY and may be transferred to processors acting on our behalf and in compliance with the GDPR, in particular:

• Resend — sending of emails from the contact form (United States, with appropriate safeguards).
• OVH SAS — website hosting (European Union).
• Google Fonts — loading of typefaces (Google's policy applies).
• Google (Google Analytics 4) — website traffic measurement, only after your consent. Provided by Google LLC (United States), with appropriate safeguards and IP address anonymisation.
• Vimeo — video player embedded on certain pages, loaded only when you start playing a video (Vimeo.com, Inc., United States, in “Do Not Track” mode).

We do not sell your personal data to third parties.

5. Retention period

• Contact messages: 3 years from the last exchange, unless otherwise required by law.
• Connection data / server logs: 12 months maximum.
• Traffic measurement data (Google Analytics): 14 months maximum.
• Cookie consent: 13 months, in line with the recommendations of the CNIL (French data protection authority).

6. Cookies and trackers

During your visit, cookies or trackers may be placed on your device.

• Essential cookies: necessary for the website to function and to record your cookie preferences. They do not require your consent.
• Traffic measurement cookies: we use Google Analytics 4 (ID G-J3TKN91M6M, provided by Google LLC) to analyse website usage on an aggregated and anonymous basis. These cookies are only placed after your consent (Google “Consent Mode”, anonymised IP address). If you refuse, no traffic measurement cookie is placed.
• Marketing cookies: reserved for possible advertising campaigns. Not currently enabled on the website.

You can change your choices at any time via the Manage cookies link at the bottom of the page.

To find out more, see the CNIL guide (in French): cnil.fr.

7. Your rights

In accordance with Regulation (EU) 2016/679 (GDPR) and the French “Informatique et Libertés” (Data Protection) Act, you have the following rights:

• Right of access to, rectification and erasure of your data
• Right to restriction of processing
• Right to object to processing
• Right to data portability (where applicable)
• Right to withdraw your consent at any time (for processing based on consent)
• Right to set instructions regarding what happens to your data after your death

To exercise your rights, contact us at info@digital-therapy.com. Proof of identity may be requested if there is any doubt about your identity.

You may also lodge a complaint with the CNIL: www.cnil.fr.

8. Security

DIGITAL THERAPY implements appropriate technical and organisational measures to protect your data against destruction, loss, alteration, disclosure or unauthorised access.

9. Transfers outside the European Union

Some processors (in particular Resend and Google Analytics) may process data outside the European Union. In such cases, we ensure that appropriate safeguards are in place (standard contractual clauses, supplementary measures).

10. Changes

This policy may be updated at any time to reflect changes in our practices or in the regulations. The date of the last update is shown at the top of this page.