Personal data — European Union
Privacy policy
This policy explains how ETL CREATION, the data controller and operator of PixyLink.fr, processes personal data received through the website. PixyLink is the name of the offer and website; ETL CREATION is the business legally responsible for the processing. This policy is written in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and applicable French data-protection law.
1. Data controller
Controller: ETL CREATION
Address: 191 Av. Jean Jaurès - 75019 Paris
Privacy contact: contact@pixylink.fr
2. Personal data collected
When you use the enquiry form, we may receive your name, business name, email address, telephone number, optional current website address, business sector, preferred package and the content of your enquiry.
When a PixyLink Management session is opened, we may also process the account identifier, information required for authentication, connection and security logs, and the content or files supplied or changed during the session.
Limited technical data may also be processed to secure the form and website, including IP address, date and time, browser information, session token and information needed to prevent automated submissions.
Do not submit sensitive or health-related information through the form. Pages relating to health professions are informational only, and the PixyLink form is not intended to receive medical information.
3. Purposes and lawful bases
- Responding to your enquiry, assessing the project and preparing a proposal: steps taken at your request before entering into a contract — Article 6(1)(b) GDPR.
- Managing a quotation, order, website build and follow-up: performance of a contract — Article 6(1)(b).
- Opening, securing and providing an occasional PixyLink Management session: performance of a contract — Article 6(1)(b).
- Meeting accounting, tax and legal duties: compliance with a legal obligation — Article 6(1)(c).
- Securing the website, preventing misuse and defending legal rights: legitimate interests — Article 6(1)(f).
- Sending optional communications unrelated to your immediate request: consent where consent is required — Article 6(1)(a).
Fields marked with an asterisk are required in order to respond. If they are not completed, the enquiry cannot be processed. Other fields are optional.
4. Recipients
Data is available only to authorised ETL CREATION personnel responsible for the commercial relationship and project delivery. Where necessary, it may be processed by the hosting provider, email provider, maintenance providers or technical services used to operate the website.
Those providers act under their contractual and regulatory obligations. Contact details are not sold or rented to third parties.
5. Processing in Europe and international transfers
PixyLink gives preference to hosting and service providers located in France or the European Economic Area (EEA). If a service exceptionally involves a transfer outside the EEA, the transfer must rely on a European Commission adequacy decision, Standard Contractual Clauses or another safeguard permitted by the GDPR. You may request information about the applicable safeguards using the contact details above.
6. Retention periods
- Enquiry with no contract: for as long as needed to handle it, then for no more than three years after the last relevant contact.
- Customer and completed project: throughout the contractual relationship and then for the periods required to establish, exercise or defend legal rights.
- PixyLink Management access: for the duration of the session and then for a limited period required for security, evidence of the work and preparation of the updated website.
- Invoices and accounting records: ten years in accordance with applicable French accounting obligations.
- Technical logs and security information: for a limited period proportionate to incident detection, generally no more than twelve months unless a specific need requires otherwise.
- Optional consent: until it is withdrawn or the relevant purpose expires.
After those periods, data is deleted, anonymised or placed in a separate archive where required by law.
7. Cookies and technical storage
The website uses a technical session that is strictly necessary for form security, including the anti-CSRF token. It is not used for advertising profiling.
The current PixyLink version does not place advertising or audience-measurement cookies requiring consent. If such tools are added, they will be blocked until the user has made a choice and this policy will be updated.
8. Security
Reasonable safeguards are used to protect personal data, including HTTPS encryption, access controls, form validation, anti-bot protection, software updates and data minimisation. As no system can guarantee absolute security, any incident creating a risk is handled in accordance with GDPR obligations.
9. Your rights in Europe
Depending on the circumstances, you have rights of access, rectification, erasure, restriction, objection and data portability. Where processing is based on consent, you may withdraw it at any time without affecting processing lawfully carried out before withdrawal.
To exercise a right, email contact@pixylink.fr and describe your request. Reasonable proof of identity may be requested where there is doubt. A response will normally be provided within one month.
You may also lodge a complaint with the French Data Protection Authority — CNIL, or with the supervisory authority in your EEA country of residence.
10. Automated decision-making and profiling
PixyLink enquiries are not subject to solely automated decisions producing legal effects, and no automatic commercial profiling is carried out.
11. Changes to this policy
This policy may be updated if the form, service providers or legal requirements change. The date of the current version appears below.
Last updated: 10 September 2026.