Privacy policy

01Data controller

The data controller is Bureau-Lila, a company currently being incorporated.

For any question about this processing, write to contact@bureau-lila.com.

02Data we collect

This site gathers personal data only through the request form:

• The fields Name, Work email, Organisation and In what capacity are required: without them the request cannot be handled.
• The fields Role and What you are seeking to establish are optional. The free-text field helps us prepare the conversation; please do not enter sensitive data there.

Separately from the form, a language preference cookie and the server's technical logs also apply, both described below.

03Purposes and legal bases

• Answering your request, sending you the report and following up on the exchange. Legal basis: your consent (Article 6(1)(a) GDPR), collected via the form's checkbox, which you may withdraw at any time.
• Remembering your reading language when you click FR or EN. Legal basis: operation of the service you expressly requested; this cookie is exempt from consent on that ground.
• Keeping the site secure and working by means of server logs and an anti-abuse counter that limits how often the form can be sent. That counter holds only a hashed fingerprint of the IP address, never the address itself, and is erased within twenty-four hours. Legal basis: our legitimate interest (Article 6(1)(f) GDPR).

04What we do not do

• We do not sell, rent or pass on your data to anyone.
• We use no analytics, no advertising tracker and no profiling.
• The site embeds no social network widget and no third-party share button.
• No automated decision is made on the basis of your data.

05Recipients

Your data is accessible only to the founders of Bureau Lila, strictly to the extent needed to handle your request.

Two technical suppliers act as processors, bound by contract under Article 28 GDPR: the site's host, OVH, and our email provider, Brevo.

06Transfers outside the European Union

The site's typography is loaded from the Google Fonts servers. Your IP address is therefore transmitted to Google LLC, potentially outside the European Union, for the sole purpose of displaying the page.

The form data itself is hosted and processed within the European Union.

07Retention period

Form data is kept for twenty-four months from the last exchange, then deleted. If you withdraw your consent or ask for erasure, deletion takes place without delay.

Server logs are kept for no more than twelve months. The language cookie expires after 12 months.

08Your rights

You have rights of access, rectification, erasure, restriction, objection and portability over your data, together with the right to withdraw your consent at any time.

To exercise them, write to contact@bureau-lila.com. We reply within one month. Proof of identity may be requested where there is reasonable doubt as to who is making the request.

If our answer does not satisfy you, you may lodge a complaint with the French data protection authority, the CNIL, at 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or at cnil.fr, or with the supervisory authority of your country of residence.

09Cookies

The site sets a single cookie, lila_lang, and only when you explicitly choose a language in the navigation bar. It remembers that choice for your later visits and contains nothing other than fr or en.

No other cookie is set. That is why this site displays no consent banner: it has nothing to ask you to accept.

10Changes to this page

This policy may be revised to reflect changes to the site or to the applicable regulations. The date it was last updated appears at the top of the page.