This privacy policy (the “Policy”) sets out how AKREA DIGITAL collects, processes, stores and safeguards your personal data when you visit www.akrea.digital (the “Website”). All processing is carried out in full compliance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and any other applicable data protection legislation.
AKREA DIGITAL takes your privacy seriously and is committed to maintaining the highest standards of personal data protection.
Who controls your data
The controller responsible for your personal data is:
AKREA DIGITAL
Publication manager: Mr Arthur CASTANET
Registered with the Paris Trade and Companies Register under number 852 059 161
EU VAT number: FR30852059161
75008 Paris
France
Phone: +33 1 85 09 02 15
Email: hello@akreadigital.com
AKREA DIGITAL decides how and why your data is processed through the Website.
What counts as personal data
Personal data is any piece of information that can identify you — either on its own or when combined with other data.
What data we collect
3.1 — Information you give us
We collect personal data when you fill in a contact form on our secure subdomain forms.akreadigital.com.
This may include:
Your name
Email address
Phone number
Professional details
The content of your message
We only collect what is needed to handle your enquiry. No personal data is gathered automatically — we never collect anything without a deliberate action on your part.
3.2 — Domain name data
When you register or manage domain names through domains.akreadigital.com, we may need to collect certain data required by ICANN and the relevant registries — such as registrant identity, administrative contacts and billing details.
This data may be shared with our accredited registrar partner Tucows Inc., but only to the extent strictly necessary to deliver the service.
3.3 — CRM data
Information you share through forms or professional exchanges may be stored in our CRM system, which runs on Odoo.
We use it for:
Handling incoming enquiries
Following up on business opportunities
Preparing quotes and invoices
Managing contracts
3.4 — Website analytics
We use Visitors Now, LLC to understand how people use the Website.
The tool is set up with privacy as the default:
No persistent analytics cookies
No ad tracking whatsoever
Full respect for “Do Not Track” and “Global Privacy Control” signals
All statistical data is processed within the EU and cannot be traced back to any individual visitor.
AKREA DIGITAL is the data controller; Visitors Now, LLC acts as a data processor under Article 28 of the GDPR.
3.5 — Payment data
Payments for AKREA DIGITAL services are handled by Stripe, Inc., a trusted payment service provider.
When you make a payment, the following data may be processed:
Your name
Email address
Billing address
Payment method details
Transaction data
Payment details are collected and processed directly by Stripe on their own PCI-DSS-compliant infrastructure. They never pass through our servers.
AKREA DIGITAL never sees your full card number.
Stripe acts in two capacities:
As our data processor for payments made through the Website
As an independent data controller for its own regulatory obligations — including fraud prevention, anti-money laundering, financial compliance and other duties that apply to licensed payment institutions
You can read Stripe’s own privacy policy at: https://stripe.com/privacy
Why we process your data
We use your data strictly for the following purposes:
Responding to your enquiries
Managing pre-contractual and contractual relationships
Administration and accounting
Domain name registration and management
Producing anonymised website statistics
We do not use the Website for unsolicited marketing or advertising profiling of any kind.
Legal grounds for processing
We rely on the following legal grounds under the GDPR:
Taking steps at your request before entering into a contract
Performing a contract with you
Complying with a legal obligation
Our legitimate interest in strictly necessary audience measurement
Your consent, where required by applicable law
Who we share your data with
We work with a small number of trusted technical partners who process data on our behalf:
Odoo (CRM, related infrastructure, appointment booking and call scheduling via calendar, videoconferencing, and, subject to the user's prior consent, the sending of certain marketing emails and SMS)
Deftform (form management)
Visitors Now, LLC (website analytics)
Tucows Inc. (accredited domain registrar)
Stripe, Inc. (payment processing)
Mailjet SAS (sending of transactional emails and, subject to the user's prior consent, marketing emails; servers located within the European Union)
Each of these partners:
Only processes data on our documented instructions
Is bound by strict contractual confidentiality and security obligations
May engage its own technical subprocessors (hosting, infrastructure, anti-fraud services, etc.) in line with applicable regulations
Is not allowed to use personal data for its own commercial purposes
Where a partner also acts as an independent data controller for its own legal obligations (notably Stripe), that processing is governed by its own privacy policy.
Data transfers outside the European Union
In the course of delivering our services, some personal data may be transferred to entities located outside the European Union.
These transfers only take place when strictly necessary to deliver the service — for example, payment processing, domain name registration or technical infrastructure.
7.1 — Transfers to Canada
Domain name registration and management services delivered in partnership with Tucows Inc. may involve transferring data to Canada.
Canada benefits from a European Commission adequacy decision covering commercial organisations subject to the Personal Information Protection and Electronic Documents Act (PIPEDA).
Transfers to these entities are therefore deemed to provide an adequate level of protection under Article 45 of the GDPR.
Depending on the domain extension involved, some operations may also be handled by entities or registries based within the EU.
7.2 — Transfers to the United States
Some of our service providers — notably Stripe, Inc. — are based in the United States.
Transfers to these entities are safeguarded under Articles 44 et seq. of the GDPR, through:
The EU–US Data Privacy Framework, where applicable
Standard contractual clauses approved by the European Commission
Appropriate technical and organisational safeguards
Where these providers act as independent data controllers for their own regulatory obligations, such transfers are carried out under their own responsibility and compliance framework.
7.3 — General safeguards
AKREA DIGITAL ensures that every data transfer outside the EU:
Has a valid legal basis
Is backed by appropriate safeguards
Has been assessed for the level of protection it provides
Is limited to the data that is strictly necessary
How long we keep your data
We keep your data only for as long as it is needed:
Contact data: 3 years from the last interaction
Contract data: the duration of the contract, plus any legally required retention period
Domain name data: as long as required by regulation
Anonymised analytics data: only as long as needed for analysis
Your rights
Under Articles 15–22 of the GDPR, you have the right to:
Access your data
Have inaccurate data corrected
Request deletion of your data
Restrict how we process your data
Object to processing
Receive your data in a portable format
To exercise any of these rights, get in touch at: hello@akreadigital.com
If you are unhappy with our response, you have the right to lodge a complaint with your local data protection authority.
How we keep your data safe
We take appropriate technical and organisational steps to protect your data, ensuring:
Security
Confidentiality
Integrity
Availability
Access is strictly limited to authorised personnel on a need-to-know basis.
We never sell your data
AKREA DIGITAL does not sell, rent or hand over personal data to any third party for commercial gain. Full stop.
Changes to this policy
We may update this Policy from time to time to reflect changes in the law, our operations or best practice.
The version that applies is always the one published on the Website at the time of your visit.
Last updated: 13 May 2026