Last updated: March 12, 2025
Preamble
ADHCI, as a company specializing in hosting and IT services, places the protection of personal data at the heart of its commitments. This privacy policy aims to inform you clearly, simply, and comprehensively about how we collect, use, and protect your data, in compliance with Regulation (EU) 2016/679 (General Data Protection Regulation - GDPR) and French law.
This document reflects our commitment to full transparency and rigorous control over the data you entrust to us.
Article 1. Data Controller
The data controller for personal data collected on the website adhci.com is:
ADHCI
Single-member limited liability company (EURL)
For any questions regarding the protection of your data, you may contact our Data Protection Officer (DPO) at: dpo@adhci.com.
Article 2. Data Collected, Purposes and Legal Bases
We only collect the data strictly necessary for the purposes for which it is processed.
- Management of your customer account and orders:
Purpose: Create and manage your personal account, process your orders, issue invoices, and manage payments.
Data: First name, last name, email address, postal address, phone number, order history.
Legal basis: Performance of a contract (Article 6.1.b of the GDPR). - Provision and support of subscribed services:
Purpose: Ensure proper functioning of services (hosting, domain names, etc.) and respond to your technical support requests.
Data: Contact data, connection logs, content of your support tickets.
Legal basis: Performance of a contract (Article 6.1.b of the GDPR). - Compliance with legal obligations:
Purpose: Retain invoices and other accounting documents, respond to legal requests.
Data: Billing data.
Legal basis: Legal obligation (Article 6.1.c of the GDPR). - Service improvement and audience measurement:
Purpose: Analyze site usage to improve usability and relevance, on an anonymized basis.
Data: Aggregated and anonymized browsing data.
Legal basis: Legitimate interest (Article 6.1.f of the GDPR).
Article 3. Data Recipients
ADHCI does not sell, rent, or transfer any of your personal data to third parties.
Your data is processed internally by authorized personnel. However, to perform certain services, we may share it with carefully selected subcontractors:
- Payment gateways: For the secure processing of your online payments.
- Domain name registrars: For registering or transferring your domain name (transfer of holder data).
- Infrastructure providers (data centers): For hosting our servers.
We require all our subcontractors to provide sufficient guarantees regarding security and GDPR compliance.
Article 4. Data Transfers Outside the European Union
As a rule, we prioritize partners and infrastructures located within the European Union. However, for certain specific services (such as some payment gateways or management software), we may use companies located outside the EU. In such cases, we ensure that transfers are governed by appropriate safeguards (such as the European Commission’s standard contractual clauses), guaranteeing a level of data protection equivalent to that required by the GDPR.
Article 5. Data Retention Period
We retain your data only for as long as necessary for the purposes for which it was collected:
- Contract-related data: For the duration of the contractual relationship, then archived for the statutory limitation period (usually 5 years).
- Billing data: 10 years from the close of the accounting period, in accordance with the Commercial Code.
- Connection logs: 1 year, in accordance with legal obligations.
Article 6. Cookies
A "cookie" is a small text file stored on your device when you visit our website. We use two types of cookies:
- Strictly necessary cookies: These are essential for the website to function properly (e.g., session management, shopping cart). They do not require your consent.
- Audience measurement cookies: These allow us to compile anonymous traffic statistics to improve our services. These cookies are only placed after obtaining your consent, which you can withdraw at any time.
Article 7. Data Security
ADHCI implements robust technical and organizational measures to ensure the security, confidentiality, and integrity of your personal data. This includes:
- Encrypted communications (SSL/TLS protocol).
- Strict access control policies and permissions management.
- Securing our infrastructures and servers.
- Regular and off-site backups within the EU.
- Staff awareness and training.
Article 8. Your Rights
In accordance with the GDPR, you have the following rights regarding your data:
- Right of access: Obtain confirmation that your data is being processed and receive a copy.
- Right to rectification: Have inaccurate or incomplete information corrected.
- Right to erasure ("right to be forgotten"): Request the deletion of your data, within the limits set by law.
- Right to restriction of processing: Temporarily freeze the use of some of your data.
- Right to data portability: Receive your data in a structured, commonly used format and transmit it to another controller.
- Right to object: Object at any time to the processing of your data on legitimate grounds.
- Right to lodge a complaint: File a complaint with the competent supervisory authority (in France, the CNIL - Commission Nationale de l'Informatique et des Libertés).
Article 9. How to Exercise Your Rights
To exercise any of these rights, you may contact our Data Protection Officer (DPO), attaching a copy of your ID:
- By email: dpo@adhci.com
- By postal mail:
ADHCI - Attn: DPO
60 rue François Ier
75008 Paris, France
