Privacy Policy

Version in effect as of October 7, 2026

The purpose of this privacy policy is to inform users of the CEWeb Agency website, as well as its prospects, clients, partners and business contacts, about how their personal data is collected, used and protected.

CEWeb Agency undertakes to process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable French law.

1 - Data Controller

The controller of the processing operations described in this policy is:

CEWeb Agency
Simplified joint-stock company (Société par actions simplifiée, SAS) with a share capital of 1,000 euros
66 avenue de la Bourdonnais
75007 Paris – France

Paris Trade and Companies Register (RCS) 934 612 680
SIRET : 934 612 680 00017
EU VAT number: FR90934612680

Email: support@ceweb-agency.com
Phone: +33 1 40 67 99 04

CEWeb Agency has not appointed a Data Protection Officer (DPO).

For any question regarding the protection of your personal data, or to exercise your rights, you may contact CEWeb Agency at:

support@ceweb-agency.com

2 - Personal Data Collected

CEWeb Agency ensures that it only collects the data necessary for the purposes pursued.

Depending on your use of the site or your relationship with CEWeb Agency, the following categories of data may, in particular, be collected.

2.1 - Contact Forms and Quote Requests

When you contact CEWeb Agency through the site, we may collect:

  • your last name and first name;
  • your professional email address;
  • your phone number;
  • the name of your company or organization;
  • your job title, when provided;
  • information about your project;
  • the content of your message;
  • any information you voluntarily choose to provide to us.

The contact form currently available on the site collects, in particular, the last name and first name, email address, phone number and message content.

2.2 - Appointment Booking

When you request or schedule an appointment with CEWeb Agency, we may process:

  • your contact details;
  • your identity;
  • your company;
  • information about your project or request;
  • the date and time of the appointment;
  • any information provided when booking.

2.3 - Prospects and Clients

In the context of the business relationship, we may, in particular, process:

  • the contact details of the Client’s representatives or contacts;
  • information about the company;
  • business correspondence;
  • quote requests;
  • quotes and purchase orders;
  • contracts;
  • invoices and payment-related information;
  • information necessary to perform the services;
  • exchanges with support;
  • the history of the business relationship.

CEWeb Agency operates exclusively on a B2B basis. The personal data processed in this context mainly concerns the representatives, executives, employees, collaborators or contacts of client or prospect companies and organizations.

2.4 - Support and Maintenance

When you contact CEWeb Agency in connection with a maintenance, support or hosting service, we may collect the information necessary to process your request, in particular:

  • your identity and contact details;
  • the company concerned;
  • information about the project;
  • exchanges with support;
  • technical information;
  • logs, error reports or other elements necessary for diagnosis.

We ask that you do not send any sensitive personal data, or any personal data that is not necessary to process your request.

2.5 - Browsing Data and Cookies

When you browse the site, certain technical information may be collected, in particular:

  • IP address;
  • browser type;
  • device type;
  • operating system;
  • pages viewed;
  • date and time of browsing;
  • data necessary for the technical operation and security of the site.

Some of this information may be collected by means of cookies or similar technologies.

The terms of use of these technologies are set out in our Cookie Management Policy.

3 - Purposes and Legal Bases of Processing

Personal data is processed only when necessary and on a legal basis provided for by the GDPR.

Management of contact and quote requests

Purpose: to respond to your requests, review your project, prepare a commercial proposal and handle pre-contractual exchanges.

Legal basis: pre-contractual measures taken at your request and, depending on the circumstances, CEWeb Agency’s legitimate interest in responding to the requests it receives.

Management of the business relationship

Purpose: management of quotes, orders, contracts, projects, invoicing, payments and client relations.

Legal basis: performance of the contract or pre-contractual measures.

Accounting and administrative obligations

Purpose: accounting, tax and administrative management of CEWeb Agency.

Legal basis: compliance with the legal obligations to which CEWeb Agency is subject.

Support, maintenance and hosting

Purpose: to respond to support requests, maintain solutions, diagnose malfunctions and perform the services subscribed to.

Legal basis: performance of the contract.

Site management and security

Purpose: to ensure the operation, security and availability of the site and to prevent fraudulent use.

Legal basis: CEWeb Agency’s legitimate interest in securing its information systems and services.

Audience measurement and cookies

When trackers subject to consent are used:

Legal basis: the user’s consent.

For cookies strictly necessary for the operation of the site, processing is based on the need to provide the service requested and on CEWeb Agency’s legitimate interest in ensuring its technical operation.

B2B commercial prospecting

CEWeb Agency may use the professional contact details of prospects and clients to present its services or to get back in touch in a relevant professional context.

Legal basis: CEWeb Agency’s legitimate interest in developing its business.

Each recipient may object, free of charge and in a simple manner, to the use of their data for this purpose.

4 - Mandatory or Optional Nature of the Information

Fields marked as mandatory in the forms must be completed in order for CEWeb Agency to process the request.

If this information is not provided, we may be unable to respond to your request, draw up a quote or perform certain services.

Other information is optional.

We invite you to provide only the information necessary for your request.

5 - Data Recipients

Personal data is accessible only to persons who need it in the course of their duties.

It may, in particular, be accessible to:

  • authorized executives and collaborators of CEWeb Agency;
  • technical service providers involved in the operation of the site;
  • hosting providers;
  • email or communication service providers;
  • service providers involved in sales management, support or appointment booking tools;
  • accounting or administrative service providers;
  • administrative or judicial authorities where required by law.

CEWeb Agency does not sell the personal data of its users, prospects or clients.

The processors engaged by CEWeb Agency are authorized to process the data only for the purposes of the services entrusted to them.

6 - Data Hosting

The CEWeb Agency website is hosted by:

Hostinger International Ltd.
Švitrigailos str. 34
Vilnius 03230
Lithuania

Other service providers may be involved in hosting or processing certain data, depending on the tools used by CEWeb Agency.

7 - Data Transfers Outside the European Union

CEWeb Agency gives preference, where reasonably possible, to service providers that process or host data within the European Union or the European Economic Area.

However, certain tools or suppliers may involve data processing from a country located outside the European Economic Area.

Where such transfers take place, CEWeb Agency ensures that they are covered by a mechanism recognized by applicable regulations, for example:

  • an adequacy decision of the European Commission;
  • standard contractual clauses approved by the European Commission;
  • or any other appropriate safeguard provided for by the GDPR.

Further information may be obtained from CEWeb Agency upon request.

8 - Data Retention Period

CEWeb Agency retains personal data only for as long as necessary to fulfill the purposes for which it was collected, subject to legal retention obligations.

Prospects

Les données utilisées à des fins de prospection commerciale peuvent être conservées pendant une durée maximale de trois ans à compter de leur collecte ou du dernier contact émanant du prospect.

Quote requests

Where a quote does not lead to an order, the information strictly necessary to follow up on the request may be retained for as long as necessary for sales management and, where it is used for prospecting purposes, within the limit indicated above.

Clients

Data necessary to manage the contractual relationship is retained for the entire duration of that relationship.

After the end of the business relationship, certain information may be archived for as long as necessary to establish, exercise or defend CEWeb Agency’s rights.

Accounting documents and invoices

Les factures et documents comptables sont conservés pendant la durée imposée par la réglementation applicable, généralement dix ans.

Prospecting of former clients

Les données utilisées à des fins de prospection peuvent être conservées pendant la relation commerciale puis pendant une durée de trois ans à compter de sa fin ou du dernier contact pertinent.

Cookies

The retention periods for cookies and other trackers are specified in the Cookie Management Policy and in the consent management tool available on the site.

9 - Data Security

CEWeb Agency implements appropriate technical and organizational measures to protect personal data against, in particular:

  • unauthorized access;
  • disclosure;
  • modification;
  • loss;
  • alteration;
  • accidental or unlawful destruction.

Depending on the services concerned, these measures may include:

  • access control;
  • user authentication;
  • encryption of communications;
  • backups;
  • security updates;
  • technical monitoring;
  • restricting access to data to authorized persons only.

As no computer system can guarantee absolute security, CEWeb Agency regularly adapts its measures to the risks identified.

10 - Your Rights

In accordance with applicable regulations, and depending on the processing concerned, you have:

  • a right of access to your personal data;
  • a right to rectification of inaccurate or incomplete data;
  • a right to erasure, where the legal conditions are met;
  • a right to restriction of processing;
  • a right to object, in particular to processing based on legitimate interest and to commercial prospecting;
  • a right to data portability, where applicable;
  • the right to withdraw your consent at any time, where processing is based on your consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

You may exercise your rights by writing to:

support@ceweb-agency.com

or by post to:

CEWeb Agency
66 avenue de la Bourdonnais
75007 Paris
France

In order to protect your data, CEWeb Agency may request additional information to verify your identity where there is reasonable doubt as to the identity of the person making the request.

11 - Complaint to the CNIL

If, after contacting CEWeb Agency, you consider that your rights regarding your personal data are not being respected, you have the right to lodge a complaint with:

Commission nationale de l’informatique et des libertés – CNIL (French Data Protection Authority)
3 Place de Fontenoy
TSA 80715
75334 Paris Cedex 07
France

The complaint may also be submitted directly via the CNIL website.

12 - Data Processed on Behalf of Our Clients

In the context of certain services, in particular:

  • custom development;
  • maintenance;
  • support;
  • hosting;
  • administration of applications or websites;

CEWeb Agency may have access to personal data for which its clients are responsible.

In such situations, CEWeb Agency generally acts as a processor within the meaning of the GDPR, while the Client remains the controller.

The conditions applicable to such processing are governed by contract with the Client in accordance with Article 28 of the GDPR.

This privacy policy mainly concerns processing for which CEWeb Agency itself acts as controller.

13 - Cookies

The site may use cookies or similar technologies necessary for its operation and, subject to your consent where required, tools used in particular to measure its audience or improve the user experience.

You may accept, refuse or change your preferences using the consent management tool available on the site.

For more information on the technologies used, their purpose and their duration, please see our Cookie Management Policy.

14 - Changes to the Privacy Policy

CEWeb Agency may amend this policy to take into account, in particular:

  • regulatory changes;
  • a change in the processing carried out;
  • the addition of a new tool or service provider;
  • changes in the services offered.

The applicable version is the one published on the site.

In the event of a substantial change affecting the conditions under which personal data is processed, CEWeb Agency will provide appropriate information.