Privacy policy
Last updated: 22 October 2026
Luckysit (hereinafter “Luckysit” or “we”), 390 rue d’Estienne d’Orves, 92700 Colombes, France, collects and processes personal data relating to users of the luckysit.com website (hereinafter the “Site”), as well as to its prospects, customers and partners. This policy explains how.
We are committed to making legitimate and proportionate use of your personal data, collecting only the data that is relevant and necessary for the purposes described below. This policy may be updated to reflect changes in legislation or in our processing: we invite you to consult it regularly.
1. Data controller
The data controller is Florian Gibault, for Luckysit, 390 rue d’Estienne d’Orves, 92700 Colombes, France.
For any question about the processing of your data, write todpo@luckysit.com or by post to Luckysit, for the attention of the data controller, 390 rue d’Estienne d’Orves, 92700 Colombes, France.
2. Data collected
We collect your data in particular:
- through the demo request form on the Site;
- in the course of your use of the Site, for its proper operation and for analytics purposes;
- in the course of performing a contract entered into with you, as a customer or partner.
This mainly consists of identification and contact data (surname, first name, organisation, e-mail address, telephone number), the content of your request (profile, event, message) and, if you are a customer, the data needed to perform your contract and to keep the history of the business relationship.
3. Purposes and legal bases
| Processing | Legal basis (art. 6 GDPR) |
|---|---|
| Replying to requests sent through the Site form | Legitimate interest |
| Managing the relationship with prospects and customers, following up files, including by video conference | Legitimate interest or performance of pre-contractual measures |
| Informing prospects and customers, communication on professional social networks | Legitimate interest |
| Invoicing and accounting | Compliance with our legal obligations |
4. Retention periods
| Processing | Period |
|---|---|
| Prospect requests received through the Site form | 3 years from the last contact |
| Customer relationship and file follow-up | Duration of the file and 1 year after its closure in the active database, then archiving for the duration of our legal accounting and tax obligations |
| Invoicing and accounting | 10 years from the end of the financial year concerned |
5. Recipients and transfers
Your data is accessible to our processors within the meaning of the GDPR, which provide on our behalf the IT services needed to operate the Site, our information system and its hosting, in particular ZOHO Corp BV (Netherlands), which provides our customer relationship management tool and our forms, IONOS SE (Germany), which hosts the Site, and, if you consent, Google, which provides the Google Analytics audience measurement tool. We only pass on the information strictly necessary to them and require them not to use your data for other purposes.
In the course of using these tools, data may be transferred outside the European Union, to countries that do not offer equivalent protection. These transfers are governed in accordance with the GDPR and the guidelines of the European Data Protection Board, in particular through standard contractual clauses concluded with our processors.
6. Security
We implement technical and organisational measures appropriate to the nature of the data processed, in line with the good practices of ANSSI and the CNIL (the French data protection authority): access to tools restricted to authorised persons only, firewall, password policy, strengthened authentication of administrator accounts. Any data breach would be notified to the CNIL and, where applicable, to the persons concerned.
7. Cookies and trackers
The Site sets one cookie strictly necessary for its operation, which does not require your consent:pll_language, which remembers the language you selected (duration: 1 year).
With your agreement, and only in that case, we enable the Google Analytics 4 audience measurement tool (Google) in order to understand how the Site is used and to improve it. It sets the cookies_ga and_ga_H45XR7YKFR (duration: 12 months). Event data is kept for 2 months and user-related data for 14 months in our Google Analytics account. This data may be processed outside the European Union by Google, under the conditions described in section 5.
Your choice is stored in a cookie namedtarteaucitron (duration: 12 months). The banner appears on your first visit: you can accept all, refuse all or customise. Refusing is as easy as accepting and does not limit access to the Site. You can change or withdraw your consent at any time via the “Manage cookies” link at the bottom of every page.
8. Your rights
In accordance with the GDPR, you have the following rights:
- right of access: to obtain a copy of your data and information about its processing (purposes, categories of data, recipients, retention period);
- right to rectification and erasure: to have inaccurate, incomplete or outdated data corrected, and to request its deletion in the cases provided for by law;
- right to restriction of processing, where provided for by law;
- right to object, on grounds relating to your particular situation, to processing based on legitimate interest;
- right to data portability, for automated processing based on your consent or on the performance of a contract;
- right to withdraw your consent at any time, where processing is based on it;
- right to set post-mortem directives concerning the retention, deletion and communication of your data after your death;
- right to lodge a complaint with the CNIL, without prejudice to any other remedy.
You can exercise these rights by e-mail todpo@luckysit.com or by post to Luckysit, data controller, 390 rue d’Estienne d’Orves, 92700 Colombes, France, enclosing a copy of a document proving your identity.