InfraPro takes the protection of your personal data seriously. This page explains what data we process when you use this site or contact us, why, and what rights you can exercise. Our processing complies with the General Data Protection Regulation (GDPR, Regulation 2016/679) and French data protection law.
For any question, email us at contact@infrapro.fr.
Data controller
The data controller is InfraPro (SAS), 5 Place Bouvet, 35400 Saint-Malo, France. Contact: contact@infrapro.fr.
What we process, and why
We only collect the data we need, for specific purposes.
- Booking a call. When you book a call through our scheduling tool, we process your name, email address, the chosen time slot and, where you provide them, your phone number or message. Purpose: to arrange and confirm the call. Scheduling runs on Microsoft Bookings (see “Recipients”).
- Contacting us directly. When you email or call us, we process the information you send (for example your name, contact details, and the content of your request). Purpose: to reply to you and follow up on your request.
- Client relationship. If you become a client, we process the data needed to perform the contract, to invoice, and to provide support.
- Audience measurement. We measure site traffic with an analytics tool. Nothing is measured until you accept it through the consent banner. See “Cookies and audience measurement”.
- Technical logs. Like any website, our host records technical connection data (including your IP address) for security and reliability.
Microsoft 365 security audit
We offer a Microsoft 365 security audit that you can start from this site. When you launch it, you are taken to our dedicated platform (audit.infrapro.fr) and sign in with your Microsoft account. The audit is a separate service with its own privacy policy, which sets out in detail the data it processes — in particular the configuration and security information from your Microsoft 365 environment — and the sub-processors involved. You can read it at audit.infrapro.fr/privacy.
Legal bases
Depending on the case, our processing relies on: your consent (audience measurement, requests for information); the performance of a contract or pre-contractual steps (client relationship, replying to a request); compliance with a legal obligation (accounting, for example); and our legitimate interest in responding to enquiries and in improving our services and the security of the site.
Recipients and sub-processors
Your data is handled by authorised members of InfraPro. We do not sell or pass your data to third parties for commercial purposes.
We use technical providers that act as sub-processors, solely for the purposes described above:
- Microsoft — call scheduling (Microsoft Bookings) and the Microsoft 365 environment we use to correspond with you.
- Odoo — our CRM and ERP platform (client and prospect relationship management, invoicing and billing). Odoo SA is based in Belgium (EU).
- Google — audience-measurement tool, enabled only after you consent.
- Cloudflare — site hosting and technical connection logs.
To deliver the services you have contracted, we may also share data with the distribution and supplier partners needed to provide them — for example to provision licences. These partners are bound by the same confidentiality and security obligations.
Transfers outside the European Union
Some of these providers (Microsoft, Google, Cloudflare) may process data outside the European Union, including in the United States. Such transfers are covered by the safeguards required under the GDPR: the European Commission’s standard contractual clauses and, where applicable, certification under the Data Privacy Framework.
How long we keep data
We keep your data for as long as the purpose requires:
- contact and booking requests, for the time needed to handle your request and then for the period useful to commercial follow-up;
- client-relationship data, for the duration of the contract and then for the statutory retention periods (notably accounting);
- audience-measurement data, in line with the retention period recommended by the CNIL (the French data protection authority).
Security
We apply appropriate technical and organisational measures to protect your data: access restricted to authorised people, encryption of communications and data where relevant, and access logging.
Cookies and audience measurement
This site sets no tracking cookie without your agreement. On your first visit, a banner lets you accept or decline audience measurement; until you choose, no measurement tool is loaded. You can change your choice at any time using the “Manage cookies” button at the bottom of every page. Full details of the cookies we use are set out in our cookie policy.
Your rights
You have the right to access, rectify, erase, object to, restrict and port your data, as well as the right to withdraw your consent at any time. You may also set instructions for what happens to your data after your death.
To exercise these rights, email us at contact@infrapro.fr or write to InfraPro, 5 Place Bouvet, 35400 Saint-Malo, France. If, after contacting us, you believe your rights are not being respected, you may lodge a complaint with the CNIL (cnil.fr).
Changes
This policy may change. The version that applies is the one published on this page; the date it was last updated appears at the top.