Tell me about your challenge

Privacy policy

Last updated: 15 October 2026

This policy explains how AKITA Consulting processes personal data collected when people visit akita-it.com and correspond through its contact form.

1. Data controller

The data controller is:

AKITA, a single-shareholder simplified joint-stock company (SASU) trading as AKITA Consulting.

  • SIREN: 839 133 303 — Nanterre Trade and Companies Register (RCS)
  • Registered office: 77 rue des Bons Raisins, 92500 Rueil-Malmaison, France
  • Contact and rights requests: [email protected]
  • Telephone: +33 7 51 57 66 00

2. Data concerned

Information provided by visitors

Depending on the fields shown, the contact form may collect:

  • your name;
  • your email address;
  • your company name, if provided;
  • the service requested, if selected;
  • the subject and content of your enquiry;
  • your contact language.

Required fields are identified in the form. Visitors should not send passwords, API keys, health information or other sensitive data in their messages.

Technical data

When the website and form are used, hosting and security providers may process technical data including IP addresses, browser or device characteristics, request dates and times, and information needed to detect abuse or diagnose incidents.

AKITA does not necessarily store this information in a dedicated database: it may be processed within providers’ infrastructure.

Purpose Legal basis Use
Responding to enquiries Legitimate interest in responding to enquiries, or steps requested by the person before entering into a contract, depending on the context Review the enquiry and reply by email or telephone.
Preparing a commercial proposal Pre-contractual steps or legitimate interest, depending on the context Assess the need, arrange a discussion and send a proposal.
Protecting the website and form Legitimate interest in securing the services Limit automated submissions, abuse and technical incidents.
Meeting legal obligations Legal obligation, where applicable Retain documents required by law.

Using the contact form does not automatically subscribe you to a newsletter. Submitted data is not sold to third parties.

AKITA does not use contact enquiries to make solely automated individual decisions that produce legal or similarly significant effects.

4. Recipients and technical providers

Only people authorized to handle enquiries within AKITA Consulting may access the information.

The following providers may process data necessary for the service:

  • Google Cloud / Firebase: Firebase Hosting hosts the site; Cloud Functions processes form submissions and associated technical logs. Firebase privacy information.
  • OVHcloud Email Pro: sends, receives and stores correspondence from the form in professional email accounts. OVHcloud.
  • Cloudflare Turnstile: protects the form from automated interaction and abuse. Cloudflare information.

Other providers are mentioned in this policy only if actually activated on the website.

5. Protecting the form with Cloudflare Turnstile

The form uses Cloudflare Turnstile to identify automated or abusive submission attempts.

This service may analyze technical information about the device, browser, IP address and certain interactions with the verification mechanism. Depending on its settings, it may also use technical storage mechanisms or cookies needed for verification and security.

The challenge is verified with Cloudflare before the enquiry is processed. AKITA does not use the content of the submitted message to train or operate Turnstile.

For more information, read Cloudflare Turnstile’s privacy policy.

6. Retention periods

Data is retained only for a period appropriate to its purpose.

  • Prospects without a contractual relationship, including ongoing commercial discussions: form data and correspondence are retained for no more than three years from receipt of the form or the prospect’s most recent active contact, whichever is later. Follow-ups sent only by AKITA do not extend this period.
  • Contractual relationships: client data is subject to applicable contractual and legal retention periods; the prospect-only three-year rule does not apply on its own.
  • Google Cloud technical logs: according to the retention settings of the enabled services. The project’s effective Cloud Logging settings must be checked.

Prospect correspondence held in OVHcloud Email Pro is reviewed and purged quarterly: records reaching their three-year deadline before the next review are deleted in advance, including received and sent messages, archives and trash. Any local copies and backups are also checked. The site does not configure automatic deletion.

You may request erasure at [email protected] without waiting for a scheduled purge. Requests are handled without waiting for the retention deadline, unless a legal obligation requires certain data to be retained; any exception is limited to the necessary data and period.

7. Cookies, trackers and audience measurement

The website’s code does not integrate advertising pixels or audience measurement. This statement does not cover hosting and security providers’ logs and mechanisms.

Technical mechanisms needed to host, operate or secure the site may be used, particularly by Cloudflare Turnstile. Their legal treatment depends on their actual purpose and configuration.

If audience-measurement tools, advertising technology or other non-essential trackers are added, this policy will be updated and, where required by law, consent will be obtained before they are activated.

8. Data security

AKITA Consulting implements safeguards appropriate to the data processed, including HTTPS encryption in transit, server-side form validation, anti-abuse protection and secure storage of technical secrets.

Access to mailboxes and technical services is restricted to authorized people. Application logs should not unnecessarily reproduce message contents or prospects’ contact details.

No system can, however, guarantee the complete absence of risk.

9. Transfers outside the European Economic Area

Some providers use infrastructure or entities located outside the European Economic Area. Depending on the services and their settings, technical or personal data may therefore be processed or transferred internationally.

Where a transfer is subject to the GDPR, an appropriate legal mechanism is required, such as an adequacy decision or standard contractual clauses supplemented, where necessary, by additional measures.

The location of processing must be assessed against the services actually configured; use of Firebase alone does not guarantee processing exclusively in France or the European Union.

10. Your rights

Subject to the conditions set out in applicable law, you may request:

  • access to your personal data;
  • correction of inaccurate information;
  • erasure;
  • restriction of processing;
  • objection to certain processing based on legitimate interests;
  • portability where this right applies;
  • withdrawal of consent where processing is based on consent.

To exercise your rights, write to [email protected] or by post to AKITA, 77 rue des Bons Raisins, 92500 Rueil-Malmaison, France.

Identity verification may be requested only where necessary. We generally respond within one month, subject to extensions allowed under the GDPR.

If you believe your rights have not been respected, you may complain to the French Data Protection Authority (CNIL): www.cnil.fr.

11. Updates to this policy

This policy may change as the website, its providers or the law changes. The date of the latest update appears at the top of this page.