InfraPro takes the protection of your personal data seriously. This page explains what data we process when you use this website or contact us, with which tools, why, and what rights you have. Our processing complies with the General Data Protection Regulation (GDPR, Regulation 2016/679) and the French Data Protection Act (loi Informatique et Libertés).
If you have any questions, email us at [email protected].
Data controller
The data controller is InfraPro (SAS), 5 Place Bouvet, 35400 Saint-Malo, France. Contact: [email protected].
What data we process and why
We only collect the data we need, for specific purposes.
- Booking a meeting. When you book a call from the contact page, we process your name, your email address, the slot you choose, your time zone and, if you provide them, your phone number or message. Purpose: to arrange and confirm the call. The form sends this information to a service we run on Microsoft Azure, which records the appointment in Microsoft Bookings. To block automated submissions, the form uses Cloudflare Turnstile, which checks technical signals from your browser at the time of booking.
- Contacting us directly. When you email or call us, we process the information you give us (for example your name, contact details and what your request is about). Purpose: to reply and follow up on your request.
- Customer relationship. If you become a client, we process the data needed to perform the contract, invoice and provide support.
- Checking a domain name. The checker on the home page queries Cloudflare’s public DNS service directly from your browser: it reads the public records of the domain you enter (and, for the example shown, those of infrapro.fr). Nothing is sent to InfraPro or stored; Cloudflare receives the domain requested and your IP address.
- Counting visits. Our hosting provider counts visits to the website without cookies and without identifying you, which does not require your consent.
- Tools that need your consent. If you accept them in the consent banner, we use tools that set cookies: audience measurement and recording of browsing sessions and measurement of our advertising campaigns. They are described in the section “Cookies and tools that need your consent”.
- Technical logs. Like any website, our hosting provider records technical connection data (including your IP address) for security and to keep the site running properly. The website’s fonts and images are hosted with it: displaying them calls on no third-party service.
Microsoft 365 security audit
We offer a Microsoft 365 security audit that you can start from this website. When you start it, you are taken to our dedicated platform (audit.infrapro.fr) and sign in with your Microsoft account. The audit is a separate service with its own privacy policy, which sets out in detail the data it processes (in particular the configuration and security information of your Microsoft 365 environment) and the sub-processors involved. You can read it at audit.infrapro.fr/privacy.
Cookies and tools that need your consent
These tools only load once you have accepted them in the consent banner. Until you accept, none of them is active, not even Google Tag Manager, which is what loads them.
- Microsoft Clarity (Microsoft). Audience measurement and recording of browsing: pages viewed, clicks, scrolling, time on page, type of device. These recordings show us where a visitor gets stuck on a page. They are not used to identify you.
- Microsoft Advertising (Microsoft). Measuring how well our adverts on Bing and the Microsoft network perform: whether a visit or a booking follows one of our adverts. Microsoft may also use this data to build advertising audiences.
- Meta Pixel (Meta Platforms Ireland). Measuring our campaigns on Facebook and Instagram, and being able to show our adverts to people who have visited the website. For collecting this data and passing it to Meta, InfraPro and Meta Platforms Ireland are joint controllers; Meta then processes it on its own behalf, under its own privacy policy.
The cookies and how long they last are listed in our cookie policy.
Legal bases
Depending on the case, our processing is based on:
- your consent, for the tools in the previous section;
- the performance of a contract or of pre-contractual steps, for the customer relationship and for replying to a contact or booking request;
- compliance with a legal obligation, for example accounting;
- our legitimate interest in keeping the website secure (technical logs, protecting the form against automated submissions) and in counting its visits without cookies.
You can withdraw your consent at any time; this does not affect processing already carried out.
Recipients and sub-processors
Your data is processed by authorised InfraPro staff. We do not sell or pass on your data to third parties.
We use the following providers, only for the purposes described above:
- Microsoft: booking meetings (Microsoft Bookings and the service that feeds it on Microsoft Azure), the Microsoft 365 environment we use to communicate with you and, once you consent, Microsoft Clarity and Microsoft Advertising.
- Odoo: our platform for managing client and prospect relationships, invoicing and accounting. Odoo SA is based in Belgium (European Union).
- Cloudflare: website hosting, technical connection logs, counting visits without cookies, protecting the booking form (Cloudflare Turnstile), and the public DNS service used by the domain checker.
- Google: Google Tag Manager, the tool that loads the tools that need your consent, and only once you have given it.
- Meta: Meta Pixel, once you consent (see above for joint controllership).
To deliver the services you entrust to us, we may also share data with the distribution partners and suppliers needed to provide them, for example to provision licences. These partners are bound by the same confidentiality and security obligations.
Transfers outside the European Union
Microsoft, Cloudflare, Google and Meta may process data outside the European Union, including in the United States. These transfers are covered by the safeguards required under the GDPR: these companies’ certification under the EU–US Data Privacy Framework and the European Commission’s standard contractual clauses.
How long we keep data
We keep your data for as long as needed for the purpose concerned:
- contact and booking requests: while we deal with your request, then three years from our last exchange if you do not become a client, in line with the CNIL’s guidance;
- customer relationship data: for the duration of the contract, then for the legal retention periods (in particular ten years for accounting records);
- Microsoft Clarity browsing recordings: thirty days; the statistics drawn from them: thirteen months at most;
- cookies of the tools that need your consent: thirteen months at most (see our cookie policy); your choice itself stays stored in your browser until you change it.
Security
We apply appropriate technical and organisational measures to protect your data: access limited to authorised staff, encryption of communications and data where relevant, and logging of access.
Your rights
You have the right to access, rectify and erase your data, to object to and restrict its processing, and to data portability, as well as the right to withdraw your consent at any time. You can object at any time to our getting back in touch with you for commercial purposes. Under French law, you can also give instructions on what should happen to your data after your death.
To withdraw your consent to cookies, use the “Manage cookies” button at the bottom of every page. To exercise your other rights, email us at [email protected] or write to InfraPro, 5 Place Bouvet, 35400 Saint-Malo, France. For data that Meta processes on its own behalf, you can also contact Meta directly. If, after contacting us, you feel your rights have not been respected, you can lodge a complaint with the CNIL, the French data protection authority (cnil.fr).
Changes
This policy may change. The version that applies is the one published on this page; the date it was last updated is shown at the top.