Privacy policy

Banana Web, a French sole trader operating under the micro-enterprise regime, controls the processing described in this policy.

Privacy and rights contact: banana@bananaweb.fr.

• Collect only information required for an identified purpose.
• Never sell, rent or trade personal data.
• No advertising profiling or automated decision-making.
• Limit access, retention and recipients.
• Update this policy before enabling a new provider or processing activity.

Enquiries

Name, email address, company, project type, message, form language, receipt date and correspondence.

Business relationship

Quotes, agreements, approvals, deliverables, invoices, payments and professional correspondence.

Hosting and security

IP address, date, time, browser, requested resource, a pseudonymous identifier used to rate-limit abusive submissions and technical logs that may be generated by the hosting provider.

Local preferences

Theme, font, intro status, game high score and contact draft, stored only in the browser.

Answer enquiries

Steps requested before entering a contract and legitimate interest in responding to professional enquiries.

Deliver services

Performance of an accepted quote, contract or order.

Invoicing and records

Compliance with accounting, tax and legal obligations.

Website security

Legitimate interest in preventing abuse, diagnosing incidents and keeping the service available.

Display preferences

A feature requested by the user; selections remain on the user’s device.

Data is available only to Banana Web and, where strictly necessary, its technical, accounting, legal or administrative providers.

Infomaniak Network SA, located in Switzerland, acts as processor for website hosting, form execution and professional email. Switzerland benefits from a European Union adequacy decision for data transfers.

The form is processed by a PHP endpoint hosted on the same domain. The PHPMailer library then sends the message over authenticated SMTP protected by STARTTLS to banana@bananaweb.fr, which is also hosted by Infomaniak.

No external form SaaS platform, advertising provider or analytics service receives the form content.

Unsuccessful enquiries

Messages received through the form and related correspondence are kept for up to 3 years after the last contact initiated by the prospect.

Contracts and business correspondence

For the relationship, then 5 years to establish or defend legal rights.

Invoices and accounting documents

10 years from the end of the relevant financial year.

Technical logs

Only for as long as required for security, diagnostics and the host’s legal obligations. The form’s abuse-prevention counter is evaluated over a rolling 10-minute window.

Browser preferences

Until deleted by the user or the end of the session, depending on the key.

To exercise a right, email banana@bananaweb.fr and describe your request. Proof of identity will be requested only where there is reasonable doubt about the requester’s identity.

You may also lodge a complaint with the French data protection authority: cnil.fr.

• Access and obtain a copy of your data.
• Correct inaccurate information.
• Request erasure where the legal requirements are met.
• Restrict or object to processing, depending on its legal basis.
• Receive portable data where the processing qualifies.
• Withdraw consent without affecting earlier lawful processing.

The form implements request-size limits, server-side validation, origin checks, a honeypot field, a minimum submission time and submission rate-limiting based on an identifier derived from the IP address.

Transmission to the server uses the website’s secure protocol; delivery to the Banana Web mailbox uses authenticated SMTP with STARTTLS. Email credentials are stored outside the public web directory.

Banana Web also applies reasonable measures for minimisation, access control, backup and encryption where relevant.

No internet transmission can be entirely risk-free, so absolute security cannot be guaranteed.

The update date shown at the top identifies the applicable version.