Legal

Privacy Policy

Data protection

Privacy Policy

digitalyser.io, a service published by BREEXIO, takes the protection of your personal data seriously. This policy describes the data we collect, why, how long we keep it, and the rights you have under the General Data Protection Regulation (GDPR).

Data controller

  • Publisher: BREEXIO (digitalyser.io brand), SARL — 16 Allée des Fondeurs, 59000 Lille, France.
  • SIREN: 905 394 664 — SIRET (head office): 905 394 664 00023 — Lille Métropole trade register.
  • Data protection contact: privacy [at] digitalyser.io.

Data we collect

  • Identification data: first name, last name, email address, company name.
  • Audit technical data: website URL, public presence and visibility data.
  • Connection data: IP address, connection logs, session identifiers.
  • Analytics data provided via the sources you connect (e.g. Google Analytics).
  • Billing data when subscribing to a paid plan.

Processing purposes

  • Provide and run the requested audits and accompaniment.
  • Manage your account, projects, and subscription.
  • Improve the quality of the platform and our analyses.
  • Send you service-related communications (and marketing with your consent).
  • Comply with our legal and accounting obligations.

Legal basis and retention periods

  • Contract performance: account data kept for the duration of the relationship.
  • Consent: marketing communications, until consent is withdrawn.
  • Legal obligation: billing data kept for 10 years.
  • Legitimate interest: security logs kept for a maximum of 12 months.
  • After these periods, data is deleted or anonymised.

Processors and transfers

  • Hosting: infrastructure operated by BREEXIO, located in France.
  • Database: managed database service hosted in the European Union.
  • Network and site protection: content delivery and application security provider (CDN).
  • Payments: Stripe (card data processed directly by Stripe, PCI-DSS certified).
  • Transactional email: email delivery provider.
  • Audience measurement: cookie-less analytics solution operated by BREEXIO in the EU; no data shared with third parties.
  • AI model analysis: artificial-intelligence model providers, which may be established outside the EU; audit content only, with no reuse of your data to train third-party models.
  • For any transfer outside the EU, appropriate safeguards (standard contractual clauses) apply.
  • An up-to-date list of our processors, by name, is available on request at privacy [at] digitalyser.io.

Public data analysed by audits

  • Our audits analyse publicly available data about the audited business: website content, public reviews, rankings, online presence (art. 14 GDPR — data not collected directly from individuals).
  • This data is processed solely to produce the requested audit and related recommendations.
  • Any data subject can exercise their rights (access, rectification, erasure, objection) by writing to privacy [at] digitalyser.io.

Automated decisions

  • Our analyses rely on automated processing (including AI models), but no decision producing legal effects or significantly affecting you is made without human involvement.

Cookies and trackers

  • Strictly necessary cookies: session and authentication, security, preferences (language, theme) — essential to the service, no consent required.
  • Audience measurement: our analytics tool, operated by BREEXIO, sets no cookies and collects no identifying data; statistics are aggregated and anonymous.
  • No advertising cookies or third-party tracking pixels to date; technical Stripe cookies may be set during checkout to secure the transaction.
  • Ad measurement (only with your consent): if you arrive from an ad, a banner offers to keep that click’s identifier to measure which campaigns convert — first-party cookies “dgl_consent” (your choice, 13 months) and “dgl_attr_first”/“dgl_attr_last” (campaign context, 90 days). If you decline, no advertising identifier is kept.
  • You can delete or block cookies in your browser settings; blocking strictly necessary cookies may prevent you from signing in to the application.

Your rights

What are my rights over my data?

You have the right to access, rectify, erase, restrict, object to, and port your data, to withdraw consent at any time, and — under French law — to set directives on what happens to your data after your death.

How do I exercise my rights?

Send your request to privacy [at] digitalyser.io, stating the subject and proving your identity. We respond within one month, extendable by two months in complex cases.

Can I file a complaint?

Yes. You may lodge a complaint with the CNIL (the French data protection authority).

Do you use cookies?

We use cookies strictly necessary for the service. Our audience measurement, operated by us, works without third-party cookies. Details are in the “Cookies and trackers” section above.

A question about your data?

Contact our data protection team at privacy [at] digitalyser.io.

See our legal notice