Privacy policy
Last updated: 11 November 2026
Who processes your data
The data controller is Pavel Shilov, a natural person, publisher of the etvoilou.fr website (Et voilou project, company in the process of incorporation), 34 route de Port Royal des Champs, 78114 Magny-les-Hameaux, France.
For any question about your data, write to info@etvoilou.fr or by post to the address above.
Waitlist
Data: your email address and, if you provide them, your phone number, first and last name, company or organisation and profile. We also record the page language, the referral code of the link if any (for example ?ref=…), the design version shown, and the date, version and language of the consent text you accepted.
Purpose: to contact you about the launch of Et voilou; for investors and partners, to reply to you personally.
Legal basis: your consent (Article 6(1)(a) GDPR), which you can withdraw at any time.
Retention: 24 months after your last signup or update, then automatic deletion; earlier if you withdraw your consent.
We do not store your IP address or browser details with your signup.
Protection against abuse
Data: an encrypted, non-reversible fingerprint of your IP address, together with a count of attempts.
Purpose: to prevent automated submissions and abuse of the form.
Legal basis: our legitimate interest in protecting the website and the waitlist (Article 6(1)(f) GDPR).
Retention: 24 hours at most.
Design test
We may compare two colour versions of the website to learn which one is clearer. The version you see is chosen from a fingerprint of your IP address computed during the visit and immediately discarded: it is never stored and nothing is placed on your device.
Data: no personal data is kept; only anonymous daily counters (number of visits and signups for each version) are stored.
Purpose: to improve how the website is presented.
Legal basis: our legitimate interest (Article 6(1)(f) GDPR).
Retention: the anonymous counters are deleted after 13 months.
Website hosting and security
Data: the technical information of each visit (IP address, browser, date, page requested), processed by Cloudflare to deliver and protect the website.
Purpose: to deliver the website, keep it secure and diagnose errors.
Legal basis: our legitimate interest (Article 6(1)(f) GDPR).
Retention: short, according to Cloudflare’s rules for technical and security logs.
Messages sent to info@etvoilou.fr
Data: your email address and the content of your message.
Purpose: to reply to you.
Legal basis: our legitimate interest in answering enquiries (Article 6(1)(f) GDPR).
Retention: for the duration of the exchange, then 3 years at most.
Recipients and processors
Only the publisher can access your data. It is never sold, rented, or used for advertising or profiling. Two providers process it on our behalf:
- Cloudflare, Inc.: website hosting and the waitlist database, restricted to the European Union;
- IONOS SE: the info@etvoilou.fr mailbox, in the European Union.
Transfers outside the European Union
The waitlist database is stored and processed in the European Union. Cloudflare, Inc. is a US company that may process technical data in the United States: it is certified under the EU–US Data Privacy Framework, and its data processing agreement includes the European Commission’s standard contractual clauses.
Your rights
You have the following rights over your data:
- the right of access and rectification;
- the right to erasure and to restriction of processing;
- the right to object to processing based on our legitimate interest;
- the right to portability of the data you provided;
- the right to withdraw your consent at any time, without affecting processing already carried out;
- the right to set instructions on what happens to your data after your death (Article 85 of the French Data Protection Act).
Exercising your rights
Write to info@etvoilou.fr or by post to the address given above. We reply within one month. We ask for proof of identity only if we have reasonable doubt about who you are.
If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority: 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.
Cookies and trackers
This website sets no cookies and uses no audience measurement, advertising or tracking tools. No consent banner is therefore needed.
Security
The website is served over HTTPS only, the database is restricted to the European Union and accessible only to the publisher, no IP address is stored with signups, and data is deleted automatically when its retention period ends.
Minors
This service is intended for professionals and adults. It is not intended for people under 15.
Changes
This policy may change. The date of the last update is shown at the top of the page. If there is a significant change, people on the waitlist will be informed by email.