Legal information
Privacy policy
Dernière mise à jour : 13 mai 2026
Data controller
The controller of personal data collected via the lavana.fr site is LAVANA, represented by Kalie Vivien, publication director.
Contact: contact@lavana.fr
Data collected
As part of your use of the site, LAVANA may collect the following categories of data:
- Identification data: first name, last name, role, company
- Contact details: professional email address, phone number
- Operational context data: business sector, description of the operational situation
- Anonymized technical data: browser type, pages viewed, visit duration (only if you consent to analytics cookies)
Purposes of processing
Your data is used exclusively to:
- Respond to your operational assessment request and arrange the callback
- Send you a support proposal after qualification
- Improve the quality of our site and our services (anonymized statistics)
- Comply with applicable legal and regulatory obligations
Legal bases
The processing is based on:
- Your consent · assessment form, estimate requests, non-essential cookies
- The performance of pre-contractual measures · processing of a request initiating a commercial exchange
- Legitimate interest · site security and protection against fraudulent submissions
Data recipients
Your data is intended exclusively for the LAVANA team. It may be processed by subprocessors strictly necessary for the operation of the site and the qualification funnel, bound by contract in accordance with Article 28 of the GDPR:
- Hosting (États-Unis, equivalent contractual safeguards)
- Routing and persistence of requests (European Union)
- Transactional email (European Union)
- Callback coordination and scheduling (European Union / États-Unis with safeguards)
No data is resold or transferred to third parties for commercial purposes.
Retention periods
- Assessment requests and commercial exchanges that did not materialize: 3 years after the last contact
- Client data after contracting: duration of the commercial relationship + 5 years (accounting and tax obligations)
- Cookies and trackers: 6 months maximum for consent and 13 months maximum for the trackers themselves
Your rights
In accordance with Regulation (EU) 2016/679 (GDPR) and the amended French Data Protection Act, you have the following rights:
- Right of access to your data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restriction of processing
- Right to portability of your data
- Right to object to processing, in particular for direct marketing purposes
- Right to define guidelines concerning the fate of your data after your death
- Right to withdraw your consent at any time
To exercise these rights: contact@lavana.fr · a response will be sent to you within a maximum period of one month.
Complaint to the CNIL
If, after contacting us, you consider that your rights are not respected, you may lodge a complaint with the French Data Protection Authority (Commission Nationale de l'Informatique et des Libertés, CNIL): cnil.fr.
Security
LAVANA implements appropriate technical and organizational measures to protect your data against unauthorized access, loss, alteration or disclosure: encryption of transmissions (HTTPS), access restriction to authorized teams, regular backups and access logging.