Privacy policy

Scope

This policy covers all the processing carried out in connection with the website and the phone service: browsing, forms, audience measurement and the calls themselves.

It does not apply to third-party websites that we may link to, each of which has its own policy.

Data controller

M. F. (EI), a French sole trader, trading as RforceOne, 2 impasse Diderot, 93500 Pantin, France, is the controller of the data collected through this website.

Because the publisher is established in France, this processing is governed by the EU General Data Protection Regulation (GDPR) and French data protection law. Because the service is offered to people in the United Kingdom, the UK GDPR also applies to the data of UK users.

Phone calls are handled by a specialist telephony partner, which provides the phone number and the people who answer. The data generated by a call is processed by that partner, as described below.

Any question or request about personal data can be sent using the contact form, choosing the 'Personal data' reason. Requests are handled directly by the publisher.

Data we collect

• Call data: the calling number, the time and the duration of each call are processed by the telephony partner, which passes the publisher the records needed for billing and customer support.
• Call recordings: calls may be recorded by the telephony partner, as described under "Call recording" below.
• Browsing data strictly necessary for the website to work.
• Contact messages: the email address you give, the reason you choose, the text of your message and the browser you use, when you write to us through the contact form.
• Visitor hash: when you view a profile, like a post or press a call button, a one-way hash is calculated from your IP address. The address itself is never stored. The hash is used only to avoid counting the same person twice; it differs from one page to the next, so it cannot be used to reconstruct your browsing.

Information you must provide

No account is needed to call: the service asks for no registration, no bank card and no address. That won't change.

In the contact form, only your name, email address, reason and message are needed to deal with your request. Without them, the request cannot be processed. No other information is required.

Purposes and legal bases

• Providing the service and billing: performance of a contract.
• Preventing fraud and misuse: legitimate interests.
• Accounting and legal obligations: legal obligation.
• Improving the quality of the service: consent, which you can withdraw at any time.
• Replying to your contact message and following up requests to exercise your rights: steps taken at your request before entering into a contract, and legal obligation.
• Audience measurement, carried out by us alone with no third-party tool: pages viewed, time spent and scrolling, profiles and posts viewed, call-button clicks, likes, video plays, filters, visit source, device type, browser, operating system, language, time zone and country (supplied by our host; your IP address is not stored), linked to a random identifier kept in your browser for 13 months at most. Basis: our legitimate interest in understanding and improving the service, within the consent exemption the CNIL allows for audience measurement. Kept for 25 months. You can object through your browser's Do Not Track or Global Privacy Control setting, the button on the cookie page, or the contact form.
• Audience measurement with Google Analytics 4, only if you accept it in the banner: pages viewed, call-button clicks, where the visit came from, device and browser. Basis: your consent, which you can withdraw at any time on the cookie page.

What we don't do

• We do not sell any data to third parties.
• We do not share or publish conversations.
• We do not use your content for targeted advertising.

Call recording

Calls may be recorded by the publisher's telephony partner, acting on the publisher's behalf as a processor. If a call is recorded, a message at the start of the call tells you so.

The only purpose is to check that conversations comply with the law, in particular the protection of minors and of the people involved. Recordings may be handed to a judicial authority if an investigation requires it. They are never published, sold or used for advertising.

Recordings are kept for a limited period, six months on our French line, then destroyed, unless a judicial authority requires them for an ongoing investigation. Access is restricted to authorised people and logged.

You can object to a recording on legitimate grounds, by saying so at the start of the call or by hanging up; ask for access to the recording of your call, or its correction, through the contact form; and complain to the ICO or the CNIL.

No automated decision-making

No decision that has legal effects on you, or similarly significant effects, is made solely by automated processing within the meaning of Article 22 of the GDPR and of the UK GDPR.

How long we keep data

• Conversation history: deleted automatically after 6 months of inactivity.
• Call recordings: a limited period (six months on our French line), then destroyed.
• Call data: kept by the telephony partner for billing. Records passed to the publisher are kept for as long as accounting records.
• Visitor hashes (profile views, likes, call clicks): 13 months, then deleted automatically.
• Audience measurement (pages viewed, time spent, actions on the site): 25 months, then deleted automatically; the visitor identifier expires in your browser after 13 months.
• Google Analytics: cookies kept in your browser for 13 months; data kept by Google for 14 months, then deleted. Your choice to accept or decline is kept for 6 months.
• Messages sent through the contact form: 12 months after receipt, then deleted automatically.
• Accounting records: 10 years, as required by the French Commercial Code.

Recipients and processors

The service relies on a hosting provider and on a telephony partner, which provides the phone number and the people who answer. Processing takes place within the European Union.

If you accept it, Google Ireland Limited receives the Google Analytics data. Google also processes it for its own purposes, described in its privacy policy (policies.google.com/privacy).

Transfers outside the European Union

The website, the database and phone calls are hosted and processed within the European Union.

Google Analytics is the exception, and only if you accept it: its data may be transferred to the United States. The transfer relies on the European Commission's adequacy decision of 10 July 2023 (EU–US Data Privacy Framework), to which Google has signed up.

Any change on this point will be reflected in this policy.

Cookies and trackers

The site sets its own strictly necessary cookies: your confirmation that you are 18 or over, the language version you chose, and your Google Analytics choice. Our audience measurement writes two random identifiers to your browser storage, with no cookie. Google Analytics sets its cookies only if you accept it. No advertising trackers or social media pixels are used. Details, and the button to change your choice, are on the cookie policy page.

Links to social media

Some profiles link to accounts hosted by third-party platforms. Following one of these links makes you subject to that platform's privacy policy, over which the publisher has no control. No share buttons or embedded content from these platforms are loaded on this website: nothing is sent to them unless you click.

Protecting minors

The service is strictly for adults. No data about a minor is knowingly collected. If such data were reported to us, it would be deleted without delay: reports can be made using the contact form, choosing the 'Report a concern' reason.

Data breaches

If a personal data breach is likely to result in a risk to your rights and freedoms, the CNIL is notified within 72 hours (as is the ICO, where UK users are affected and the UK GDPR requires it), and the people concerned are informed where the risk is high, in accordance with Articles 33 and 34 of the GDPR.

Your rights

You have the right of access, rectification, erasure, restriction of processing, objection and data portability. You can also withdraw your consent at any time where processing is based on consent.

To exercise these rights, use the contact form, choosing the 'Personal data' reason, and state the phone number concerned. Requests about call data are passed to the telephony partner, which holds that data. You will receive a reply within one month at most. If there is reasonable doubt about your identity, we may ask for proof of identity before dealing with your request, and for nothing else.

You can also complain to the CNIL, the French data protection authority, which supervises the publisher: 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France (www.cnil.fr).

As a UK resident, you can also complain to the Information Commissioner's Office (ICO), the UK data protection regulator: ico.org.uk, helpline 0303 123 1113.

Security

Traffic to and from the website is encrypted (HTTPS/TLS), and data is encrypted at rest. Hosting is located in the European Union.

Access to conversation histories is restricted to authorised people and logged.

Visitor hashes are calculated with a secret key specific to the service, so an IP address cannot be worked out from the database: without that secret, the hash of an address could be recovered simply by calculation.

Backups are made regularly, and test restores are carried out periodically.

Changes to this policy

This policy may change to reflect legal or technical developments. The version that applies is the one published on this page, with its last-updated date shown at the top. Any substantial change will be announced on the Covmod website.