Legal

Privacy policy

This policy describes the data processing carried out on wiseprojects.fr, in particular through the contact form and audience measurement.

Data controller

WiseProjects - Elyes Darragi EI — Elyes Darragi, French sole trader (Entrepreneur individuel, EI), under the micro-entrepreneur regime.
SIREN: 931 070 742; SIRET: 931 070 742 00016.
Professional address: 185 avenue Victor Hugo, 75016 Paris, France
Personal data contact: contact@wiseprojects.fr.

Contact details: first name, last name, company or project and email are required; position, telephone and website URL are optional.
Need: priority, detail if “other” and, where applicable, selected service context. Situation: sector, target market and applicable answers about the existing website, social networks and advertising campaigns.
Project: support budget, project or monthly unit where requested, advertising budget where applicable, preferred timing, decision stage and optional reason or further details. Only relevant conditional answers are transmitted.
Technical processing: unique request reference, acknowledgement language and an invisible anti-spam field expected to be empty. This field is checked server-side; information entered into a free-text field may include personal data.

Reviewing project requests, qualifying needs, contacting the prospect and preparing a possible quotation.
Recording the request in Pipedrive, notifying WiseProjects and sending an acknowledgement after recording.
Required fields enable us to process the request; optional fields provide additional context. Without the necessary information, the request cannot be sent using this form.
No marketing purpose, newsletter subscription or sale of data is provided for by this form.

For a request made by a person seeking a quotation or a contract to which they would be a party: necessary pre-contractual steps taken at their request (GDPR Article 6(1)(b)). This basis does not automatically cover all business contacts.
For exchanges with a company representative who would not personally be a party to the contract: legitimate interest in responding to and managing the business request (Article 6(1)(f)), subject to documenting necessity and balancing their rights and reasonable expectations.
The acknowledgement follows request handling and is not a marketing subscription. These bases apply according to the circumstances.

Elyes Darragi and persons authorised by WiseProjects to handle requests.
Pipedrive: creation of a contact with name, email and telephone if supplied, a lead and a note containing contact details and project qualification.
Resend, a service of Plus Five Five, Inc.: internal notification to contact@wiseprojects.fr with contact and qualification details; acknowledgement to the requester with first name, company and request reference. Emails also pass through recipients’ email services. The sending domain is configured in Resend’s European region; click tracking is currently enabled there and whether to keep it remains to be decided.
Lovable: website hosting, Lovable Analytics audience measurement, media delivery through the asset services in use and relay of server calls to Pipedrive and Resend. These providers are not described as processing all data exclusively in the EU.

Pipedrive describes processing by affiliates and subprocessors outside the EU, including the United States. Its DPA and subprocessor list describe Standard Contractual Clauses, including Module 3 for certain processor-to-processor flows. The account region and safeguards for each flow remain to be checked.
Resend’s DPA states that its primary operations take place in the United States. It provides for the European Commission’s Standard Contractual Clauses, including Module 2 for processing as a processor. Its list includes US providers; it does not establish EU-only processing.
Lovable’s DPA provides for Standard Contractual Clauses, Modules 2 or 3 according to the parties’ roles. Its documentation states inclusion for Business and Enterprise plans; applicability to the WiseProjects account and the relevant subprocessor list remain to be confirmed.
These documents describe contractual safeguards, not validation of every account configuration. Applicable agreements and transfer assessments remain to be checked; blanket Data Privacy Framework coverage is not presumed. You may request information about safeguards at contact@wiseprojects.fr.

Prospects without a contractual relationship: 12 months after the last exchange.
Implementation: periodic review of requests in Pipedrive, verification of the last exchange and manual deletion of leads, notes and contacts with no other justified retention purpose. Copies in mailboxes, exports and other services must also be considered. No automatic deletion is claimed to be configured or tested.
Contracted clients: separate retention during the relationship and, where necessary, restricted archiving for legal or accounting obligations or the defence of rights. The schedule and document categories remain to be defined; the 12-month proposal is not applied indiscriminately to clients.
Technical logs: providers may process IP addresses and request, security and email-delivery metadata. Their retention and actual access need separate verification; the sending code does not intentionally log personal form content.

Audience measurement: the website uses Lovable Analytics, provided by the host, to produce aggregated statistics (pages viewed, referring site, number of visits). The website sets no measurement cookie and includes no marketing pixel or advertising tool; no consent banner is therefore displayed. This assessment will be renewed if tools change.
Request origin: during your visit, the website keeps in your browser’s session storage (cleared when the tab is closed) the landing page, referring site and any UTM campaign parameters (source, medium, campaign, term, content). This information is sent only if you submit the form: it is then attached to your request in Pipedrive and in the internal notification, so that we know how you found WiseProjects.
Anton, Manrope and JetBrains Mono fonts are self-hosted: loading them does not require a call to the Google Fonts service.
The former CMS administration is disabled and is not a public website feature.
Videos, audio and logos use the Lovable hosting and asset-delivery services. As with other web requests, these services may receive technical connection data; this alone does not establish advertising tracking.

To exercise your rights, write to contact@wiseprojects.fr. You may request access and rectification; erasure and restriction apply under GDPR conditions and subject to retention obligations.
You may object to processing based on legitimate interest for reasons relating to your particular situation; compelling legitimate grounds or the defence of rights may justify continuing it. Portability applies to supplied data processed automatically on the basis of consent or contract where its conditions are met.
Proportionate identity verification may be requested if there is reasonable doubt. A response is normally due within one month, with an extension possible under GDPR conditions.
You may lodge a complaint with the CNIL, the French data protection authority: https://www.cnil.fr/fr/plaintes.