Privacy policy
Data controller
CERKIS, represented by Didier Samitier, President.
Registered office: Brioude (43100), France
Contact: by phone on +33 4 71 50 04 44 or through our contact form
Data collected
This site may collect the following data:
- Browsing data (pages visited, duration, device) through analytics cookies. This data is anonymous, unless you have opened a personalised brochure link we sent you and accepted cookies: it is then linked to that brochure link.
- Messages sent through the online assistant (chatbot)
- Information provided when booking an appointment (name, email, phone)
- Files attached to a contact or quote request (drawings, reference images, documents), with their name and size
Your files are stored with our file host (Cloudflare R2), in a private space. They are never published: only the people handling your request can access them, through a signed, time-limited link. To prevent abuse, a non-reversible fingerprint of your IP address is recorded with each uploaded file, then erased by the daily clean-up that follows its first 24 hours, so no later than 48 hours after the upload. The address itself is never stored.
Online assistant (chatbot)
The assistant uses Mistral AI technology, a French company.
The conversation is kept in your browser (local storage), so you find it again from one page to the next. You can clear it at any time with the button in the chat window.
Each time you send a message, the current conversation is sent to our server, hosted by Vercel, which relays its last 20 messages at most to Mistral AI to get the reply. Mistral AI receives the text of the conversation, without your IP address or any identifier.
For each message sent, our server records in our database (Supabase): your message, the reply displayed (and the assistant's original reply when a filter corrected it), the page address without its parameters, the language, the site (CERKIS or NV Métal), the Mistral model that replied, Mistral errors and outages, the filter triggered if any, the processing time, a conversation identifier drawn at random by your browser (renewed when you clear the conversation) and a non-reversible fingerprint of your IP address. The IP address itself is never stored. This data is used to check and improve the assistant's replies and to prevent abuse. It is deleted automatically six months after the message was sent.
To limit abuse, our server also counts the messages sent from the same IP address, using the same fingerprint. Each count is used for one hour, then deleted, no later than the following night's clean-up. If our database does not respond, the count is kept in the server's memory, for one hour at most.
What you write in the chat is not used to contact you. To be contacted, use the contact form or call us. Please avoid writing personal data in it.
Cookies
This site uses two types of cookies:
- Essential cookies: needed for the site to work (language preferences, cookie consent). These cookies do not require your consent.
- Analytics cookies: used to measure audience and improve the site (Google Analytics). These cookies are only set after your explicit consent. Before any consent, only anonymous, cookieless measurement (no personal data, no IP address stored) may be used to estimate audience, via Google consent mode.
You can change your choice at any time by deleting your browser cookies.
Brochure reading links
Why. Our sales team sends you their brochure as a personal link rather than as an attachment. We measure how this link is read to understand what interests you and to follow up on our conversation.
On what basis. Our legitimate interest in following up a business relationship between professionals. This measurement does not depend on the cookie banner, and you can object to it (see below).
What we measure. The date and time of opening, the time spent and the pages viewed in order, the links clicked from the brochure, the page you came from, the type of device, the browser and operating system, the language chosen, and the country and city provided by our host, which locate the network exit point, not the person.
What we do not keep. Your IP address. We only keep a non-reversible fingerprint of it, used to tell apart two readers of the same link.
Who has access. The salesperson who sent you the link, the company's management, and the contractor who maintains the website.
Cookies, only if you accept. An identifier that links your later visits to our website to this brochure, for thirteen months at most, and the website's audience measurement (Google Analytics). If you continue without accepting, none of this is set: the reading measurement described above continues.
How long. Three years after the link was last opened, then deletion.
To object, access or erase. Call us on +33 4 71 50 04 44 or write to us through our contact form. We erase the readings already recorded and stop measuring your link, without removing your access to it. We reply within one month at most. You may also lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).
Purposes of processing
- Improving the user experience and navigation
- Measuring audience and understanding how the site is used
- Answering your requests through the online assistant
- Checking and improving the online assistant's replies, and preventing its abuse (legitimate interest)
- Managing appointment bookings
- Following how the brochures sent by our sales team are read (legitimate interest)
- Linking a brochure reading and a visit to the site for the same contact, when cookies have been accepted
Retention period
- Analytics cookies: 13 months maximum
- Contact data (appointments): 3 years after the last contact
- Files attached to a request: 24 months after their upload, then deleted. A file attached to a form that was never sent is deleted no later than 48 hours after it was uploaded
- Chatbot history: stored locally on your device, under your control
- Exchanges with the chatbot recorded on our servers: 6 months after each message was sent, then deleted automatically. Anti-abuse count: one hour, deleted no later than the following night's clean-up
- Brochure link readings: three years after the link was last opened, then deleted automatically
Your rights
Under the GDPR, you have the right to access, rectify, erase, restrict the processing of, port and object to the processing of your personal data.
To exercise these rights, contact us by phone on +33 4 71 50 04 44 or through our contact form.
You may also lodge a complaint with the CNIL, the French data protection authority: www.cnil.fr
Data hosting
The site is hosted by Vercel Inc. (United States). Analytics data is measured through Google Analytics 4 (Google Ireland Ltd.), with IP address anonymisation. Exchanges with the chatbot and brochure link readings are stored in a database hosted by Supabase.