1. Preamble
This privacy policy describes how FASTEO, the publisher of the fast-mage.com website and the Fast-Mage offering, collects and processes personal data relating to visitors, prospects and customers.
It is drafted in compliance with Regulation (EU) 2016/679 of 27 April 2016 (the General Data Protection Regulation, or GDPR), the French Data Protection Act No. 78-17 of 6 January 1978 as amended, and the guidelines and recommendations of the French Data Protection Authority (CNIL).
2. Data controller
The data controller within the meaning of Article 4 of the GDPR is FASTEO, a single-shareholder simplified joint-stock company (SASU) with a share capital of EUR 35,000, registered with the Bayonne Trade and Companies Register under number 791 862 154.
- Registered office: 57 avenue du Maréchal Juin, 64200 Biarritz, France
- APE code: 6202A
- Intra-community VAT number: FR 20791862154
- Publication director: Alex Sbille
Contact details for any data protection question: contact@fast-mage.com or by post to the address of the registered office.
3. Data collected
Depending on your interactions with fast-mage.com, we may collect the following categories of data:
a) Data you provide directly
- Identity: title, first name, last name
- Business contact details: email address, phone number, company name, job title
- Billing or shipping postal address for customers
- Content of the messages sent via the contact form or by email
- Login credentials for your customer area where applicable
b) Data collected automatically
- Browsing data: pages viewed, date and time of visit, duration, referring URL
- Technical data: browser type and version, operating system, device type, screen resolution
- IP address, used only for security and server-side logging purposes, then truncated or deleted
- Session identifiers strictly necessary for the operation of the site
No special category data within the meaning of Article 9 of the GDPR (racial or ethnic origin, political opinions, religious beliefs, health data, sexual orientation, etc.) is collected by fast-mage.com.
4. Purposes and legal basis
Your data is processed for the following purposes, each based on a legal basis identified under Article 6 of the GDPR:
| Purpose | Legal basis |
|---|---|
| Responding to your contact, quote or support requests | Pre-contractual measures or legitimate interest in replying to you |
| Performing a Fast-Mage service agreement (hosting, infrastructure management, consulting) | Performance of the contract |
| Issuing invoices and keeping the related accounting records | Legal obligation (French Commercial Code, General Tax Code) |
| Measuring the site's audience and improving its content | User consent collected via the cookie banner |
| Ensuring site security and preventing fraud | Legitimate interest of the publisher |
| Sending communications related to your ongoing service | Performance of the contract |
| Sending commercial communications to business prospects | Legitimate interest, within the framework of B2B prospecting permitted by the CNIL |
You may object to commercial prospecting at any time by sending an email to contact@fast-mage.com or by using the unsubscribe link included in every message.
5. Recipients and processors
Your data is strictly intended for the internal departments of FASTEO in charge of customer relations, technical support, billing and infrastructure administration.
It may be communicated to the following categories of recipients, only to the extent necessary for the provision of the service:
- Infrastructure hosting providers located in the European Union (see section 8)
- Payment provider Stripe Payments Europe Ltd. for the processing of card or direct debit payments
- FASTEO's chartered accountant and statutory auditor, within the framework of legal obligations
- Administrative or judicial authorities upon legal request
Each processor acting on behalf of FASTEO is bound by a data processing agreement compliant with Article 28 of the GDPR, guaranteeing a level of protection equivalent to that applied by FASTEO.
6. Audience measurement (PostHog)
Site audience measurement is handled by PostHog, deployed
in self-hosted mode on our own infrastructure at
mb99999-2086-ph.fast-mage.com.
No data is transmitted to any third-party provider, neither to PostHog Inc.
nor to any actor located outside the European Union.
Purpose: anonymous audience measurement, analysis of
browsing journeys and content improvement.
Legal basis: free, informed and revocable consent of the
user, collected via the consent banner displayed on the first visit.
Data processed: pages viewed, length of visit, device and
browser type, referring URL, short-lived session identifier.
Retention period: 13 months from collection, in line with
the CNIL recommendation on audience measurement solutions.
PostHog is configured in cookieless mode by default
(cookieless_mode: "on_reject"):
until you give your consent, no information is stored on your terminal.
Audience measurement then relies on a short-lived server-side identifier,
without any persistent cookie and without any identifier reusable from one
visit to another.
You may withdraw your consent at any time via the global
CookieConsent
banner accessible at the bottom right of every page. Withdrawing consent
is as straightforward as giving it and does not affect the lawfulness of
the processing carried out before that withdrawal.
8. Hosting and place of processing
fast-mage.com is hosted by FASTEO on its own managed hosting infrastructure. All servers and datacenters used are located in European Union member states, mainly in France, Germany, the Netherlands and Finland.
The infrastructure operators relied upon by FASTEO are European actors, selected for their GDPR compliance and their legal establishment within the European Union: OVH, Scaleway, Hetzner and UpCloud.
9. Transfers outside the European Union
As a matter of principle, no personal data collected by fast-mage.com is transferred to any country located outside the European Economic Area. Should such a transfer nevertheless become necessary for technical or contractual reasons, it would be governed by the appropriate safeguards provided for in Articles 44 to 49 of the GDPR, in particular the standard contractual clauses adopted by the European Commission, and the corresponding information would be communicated to you beforehand.
10. Retention periods
Data retention periods are determined according to the purpose of the processing and the applicable legal obligations:
| Data category | Period |
|---|---|
| Contact requests and prospect messages | 3 years from the last exchange |
| Customer data linked to the performance of a contract | Duration of the contractual relationship, then 3 years for prospecting |
| Invoices and accounting records | 10 years from the closing of the financial year (Article L.123-22 of the French Commercial Code) |
| Connection logs and technical logs | 12 months maximum |
| PostHog audience measurement data | 13 months (CNIL recommendation) |
| Consent cookies | 6 months maximum |
11. Data security
FASTEO implements the appropriate technical and organizational measures to ensure the confidentiality, integrity and availability of your data, in accordance with Article 32 of the GDPR:
- Encryption of data in transit (TLS 1.2 minimum, HSTS enabled)
- Encryption of backups at rest
- Access control through strong authentication for administrators
- Network segmentation and server hardening
- Continuous access logging and monitoring
- Regular backups stored in distinct datacenters within the European Union
- Incident response plan and 72-hour notification procedure in the event of a data breach
12. Your rights
In accordance with Articles 15 to 22 of the GDPR, you have the following rights regarding the personal data that FASTEO processes about you:
- Right of access: obtain confirmation that data concerning you is being processed and receive a copy of it.
- Right to rectification: have inaccurate data corrected or incomplete data completed.
- Right to erasure: obtain the deletion of your data in the cases provided for by the GDPR.
- Right to restriction: obtain the suspension of the processing of your data in certain situations.
- Right to data portability: receive the data you have provided to us in a structured and commonly used format.
- Right to object: object at any time to the processing of your data on grounds relating to your particular situation, and without reason in the case of commercial prospecting.
- Right to withdraw consent: withdraw at any time a previously given consent, without that withdrawal affecting the lawfulness of the prior processing.
- Right to set post-mortem directives: organize the fate of your data after your death, in accordance with the French Data Protection Act.
To exercise any of these rights, send your request by email to contact@fast-mage.com or by post to FASTEO, 57 avenue du Maréchal Juin, 64200 Biarritz, France.
FASTEO may request proof of identity in the event of a reasonable doubt about your identity. A reply will be provided within a maximum period of one month from receipt of your request, extendable by two months in the event of particular complexity.
13. Complaint to the CNIL
If, after having contacted us, you consider that your data protection rights are not being respected, you may lodge a complaint with the French Data Protection Authority (CNIL):
- online: www.cnil.fr/en/plaintes
- by post: CNIL, 3 Place de Fontenoy, TSA 80715, 75334 Paris CEDEX 07, France
14. Changes
FASTEO reserves the right to modify this privacy policy at any time, notably to take into account any legal, regulatory or technical change. The applicable version is the one published at the date of your visit, identifiable by the "Last update" mention shown at the top of the page. In the event of a substantial change affecting processing based on your consent, a new consent will be requested from you.
15. Contact
For any question relating to this policy or to the processing of your personal data:
- by email: contact@fast-mage.com
- technical support: support@fast-mage.com
- by phone: +33 9 72 39 22 22
- by post: FASTEO, 57 avenue du Maréchal Juin, 64200 Biarritz, France