How Smartshift collects, uses and protects your personal data, and how to exercise your rights. Last updated: June 13, 2026.
The data controller for personal data collected on this site is SMARTSHIFT, SAS with share capital of 5,000.00 euros, registered office at 21 boulevard Saint-Antoine, 78000 Versailles (SIREN 983 666 983, RCS Versailles). For any question about your personal data, please write to hello@smartshift.fr.
We collect only the data you voluntarily provide to us and the data necessary for the operation of the site:
We do not collect sensitive personal data and we do not use any advertising trackers.
Your personal data is processed to respond to your inquiry, provide an initial assessment and, where applicable, prepare a commercial proposal.
The legal basis is your consent and the performance of pre-contractual measures taken at your request (Article 6 of the GDPR), as well as our legitimate interest in ensuring the security of the site.
Your personal data is neither sold nor rented. It is accessible to Smartshift and its technical service providers:
Hosting by Vercel and Google audience measurement may involve a transfer of personal data outside the European Union, governed by the standard contractual clauses of the European Commission.
Personal data submitted through the contact form is retained for as long as necessary to process your inquiry, and then for up to three years after our last exchange for commercial follow-up purposes. Technical logs are retained for no longer than twelve months.
The Free Audit form collects the following data:
Purposes: double opt-in validation (email confirmation before the report is delivered), delivery of the report, and, with your express consent checked in the form, subsequent commercial follow-up by Smartshift.
Legal basis: your consent (checkbox ticked and confirmation link clicked), in accordance with Article 6(1)(a) of the GDPR.
Storage sub-processor: Supabase Inc. Data is hosted in the European Union region (eu-central-1, Frankfurt). A data processing agreement (DPA) is in place with this provider.
Retention period: audit data (email, URL, report) is deleted no later than 12 months after the last contact, or upon your request.
Right to erasure and access: to delete your audit request or obtain a copy of your data, write to hello@smartshift.fr. We will respond within 30 days.
This site does not use advertising cookies or third-party trackers. Only cookies and storage strictly necessary for the proper functioning of the site may be used, for example to record that you have viewed the information banner. These elements do not require prior consent within the meaning of the CNIL guidelines.
With your consent, and only once you have given it through the banner, we set one Google Analytics 4 audience-measurement cookie. Your IP address is anonymized and no data is used for advertising purposes. Until you accept, no measurement tracker loads.
Under Regulation (EU) 2016/679 and the French Data Protection Act, you have the right of access, rectification, erasure, objection, restriction and portability regarding your personal data.
To exercise these rights, write to hello@smartshift.fr. If, after contacting us, you consider that your rights have not been upheld, you may lodge a complaint with the CNIL (www.cnil.fr).
The site is served exclusively over HTTPS. We implement reasonable technical measures (encrypted communications, access controls, security headers) to protect your personal data against unauthorized access.
Write to us. You will get a human response within 24 business hours.