Privacy

This page explains, simply, what data this website collects and what we do with it (European GDPR regulation and the French Data Protection Act).

Last updated: 3 November 2026.

Controller

Patrick Celli EI (sole trader), publisher of the website (see the legal notice). Contact: contact form.

What we collect, and why

• Contact form: name, e-mail address, subject and message. To answer you and, if you ask, to present your company. Legal basis: your consent (tick box).
• Company account: name, username, e-mail address, password (stored encrypted). To manage your account and your profile. Legal basis: provision of the service (contract). When you first log in, you confirm that you have read this page.
• Security log: IP address and login actions. To protect the website against intrusions. Legal basis: legitimate interest (security).
• Company registration request: name, e-mail address, country, registration number, official name of the company, sector and activity, IP address. If you wish: how you heard about us (optional), to know how companies discover the website. The number is checked automatically: for France with the State's official register, for the other countries of the European Union with the European Commission's VIES service, for China, Thailand and Vietnam according to its format. A person then always checks the request: no decision is taken by the machine alone. The IP address from which the request was sent is kept as evidence and is only used as a clue: on its own, it is never a reason for refusal. The website only deduces the country from it, on its own server, using a public table (DB-IP, CC BY 4.0 licence): the address is not sent to any other service. This country may be wrong (VPN, phone, travel). Each new registration is compared with refused or unpublished registrations (number, name, e-mail address, phone, website): a similarity is only flagged to a person, never refused automatically. Legal basis: legitimate interest (fraud prevention).
• Log of pages visited: IP address, page viewed and time, nothing else (no cookie). To detect robots, attack attempts and fake registrations; an address that comes back three times in a suspicious way (mass copying of the website, searching for flaws) may be blocked. Legal basis: legitimate interest (security).
• Block list: e-mail address and registration number of a refused registration request (false number, company not found or closed) or of a company removed from the website after a disagreement file, to prevent new attempts. Legal basis: legitimate interest (fraud prevention).
• Introduction requests: your company's number, e-mail address, IP address, company targeted and date. To check that the requester is a registered company, to limit repeated requests (one per month to the same company, 10 per day at most) and to respect the block requested by a company. An automatic acknowledgement of receipt is sent to the address given (3 per day at most). Legal basis: legitimate interest (protecting companies against harassment and abuse).
• Verification records: at each check, we keep the date, the time, the register consulted and what it showed (official number, name and address, status of the company). This record is sent to both companies when an introduction is accepted. Legal basis: legitimate interest (being able to prove what was checked, in the event of a dispute).
• Contact details of registered companies (never shown on the website): e-mail address, contact person, phone. They are used only for introductions accepted by both companies, and are sent only to the registered address. Legal basis: performance of the service requested by the company.
• Purchases and invoices (introduction credits, visibility options, checking a partner): official name and address of the company, registration or VAT number, e-mail address, product purchased, amount, date, and number of credits remaining. To issue invoices and keep your credit account. Legal basis: performance of the contract and legal obligation (accounting). Card payments are made through SumUp, outside the website: we never see your card number. The only bank detail stored on the website is the IBAN that a company enters itself in My area for a refund by bank transfer: it is encrypted, visible only to the administrator, and deleted as soon as the refund is paid or declined.
• Disagreement files: when a company asks us to stop putting it in touch with another one, we open a file and ask both companies for their version, with exactly the same questions: name, e-mail address, IP address, company number, and the answers given (dates, number, date and amount of a quote, order or payment, number of exchanges, free account). No company has access to the other's answers. To decide fairly: lift or keep the block, send a warning or remove a profile. A person always reads both versions and takes the decision: no decision is taken by the machine alone. Legal basis: legitimate interest (preventing abuse and treating both companies fairly).
• Your contact person (optional): photo, first name and job title of the person who answers the other companies, only if the company sends them and with the agreement of the person photographed (kept as evidence, with its date and time). The photo is checked by a person before it is shown and is never automatically compared with another face. Legal basis: consent, which can be withdrawn at any time in My space (the photo is then deleted).
• Supporting documents passed on to the other company (optional): only if the company ticked the agreement box for the introduction, and if the other company asks for them. The agreement (with its date and time) and any withdrawal of it are kept in the evidence file. Legal basis: consent, which can be withdrawn at any time in My space.
• Regular check of French companies: we send only the SIREN number to the State's official directory and to the BODACC (public service, free of charge); the dated result is kept in the evidence file. Legal basis: legitimate interest (welcoming only real and active companies).

"What you miss" (anonymous questionnaire): what you miss, your country of origin and of residence, your town if you give it. We do not ask for your name. Your IP address is not stored: only an encrypted fingerprint is used to limit submissions (10 per day), and it is deleted after 2 days. Your e-mail is optional, only if you tick the agreement box. Purpose: to know what is missing, in order to write our guides and help companies offer it. Legal basis: your consent (e-mail) and our legitimate interest (anonymous answers).

Report content: the address of the page, the reason, your explanation, your name and your e-mail, your declaration of good faith, and an encrypted fingerprint of your IP address (to limit submissions to 5 per day and to detect repeated abusive reports). Purpose: to examine reports of illegal content, answer you, inform the company concerned and, if a person is threatened, alert the authorities. Legal basis: legal obligation (European Regulation 2022/2065, articles 16 to 18). Your name is not passed on to the company concerned, unless required by law.

How long

• Messages: 3 years after the last exchange.
• Company accounts: as long as the account exists, then 3 years.
• Security log: 12 months, then deleted automatically.
• Log of pages visited: 15 days, then deleted automatically.
• Block list: 3 years, then deleted automatically.
• Blocking of an IP address: 12 months at most, then lifted automatically.
• Register of requests (registrations, introductions, messages), with the IP address, date and time of sending: 1 year, then deleted automatically; 5 years for a registration that cannot be checked or that was refused because it does not match the registers (Registration conditions, point 4 quater).
• Evidence file of each company (checks, ticked boxes with their text, date, time and IP address): for the whole duration of the registration, then 5 years after the profile is removed (Registration conditions, point 4 bis).
• Block requested by a company: 3 years at most, then deleted automatically.
• Verification records: 5 years, then deleted automatically.
• Copy of e-mails sent by the website: 3 years, then deleted automatically.
• Contact details of registered companies: as long as the profile is online; deleted with it.
• Credit account: as long as the account exists, then 3 years.
• Invoices and accounting documents: 10 years (article L123-22 of the French Commercial Code).
• Disagreement files and companies' versions: 3 years after the file is opened, then deleted automatically.

"What you miss" answers: 3 years, then deleted; the IP address fingerprint: 2 days.

Content reports and decisions: 5 years (the period during which legal action is possible), then deleted.

Who has access

Only the person in charge of the website. Your data are never sold or transferred. The website is hosted in France (OVH). To check a French company, the State's official register receives only the company's number.

Introductions outside the European Union

An introduction may concern a company located in China, Thailand or Vietnam. These countries do not offer data protection recognised as equivalent by the European Union. We pass on your contact details only at your express request, after warning you of this risk, and only what is useful for the introduction (article 49 of the GDPR). You can refuse at any time.

Number of visits to profiles

Every day, the website counts the number of visits to each company profile. It keeps neither your IP address, nor a cookie, nor your name: only the profile, the day and a number. So as not to count the same visit twice, an encrypted fingerprint of your IP address, calculated with a key that changes every day, is kept until the next day, then deleted. Legal basis: our legitimate interest (counting visits without tracking you). This number is shown to the company concerned in "My space".

Cookies

No advertising or audience measurement cookies: no banner is therefore needed. Only one cookie is used:

Security

• Encrypted connection (HTTPS).
• No external service (no Google, no Facebook, nothing else).
• Protection against script injection (CSP).
• Mandatory two-step verification for the administration.
• Log of actions, deleted after 12 months.
• Regular backups, kept in France on an encrypted medium.

Your rights

You can ask for access to your data, their correction, their erasure, the restriction of their use, their portability, or object to their use.

Account holders: correct your information in your profile, and ask for the export or deletion of your data with the request form in your account.

Other people: write to us through the contact form. We answer within one month.

You can also object to the log of pages visited, or ask to be removed from the block list if you think you are on it by mistake: write to us through the contact form.

If you consider that your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).

History

• 13 October 2026: first version; addition of the registration check, the log of pages visited (15 days) and the block list. 14 October 2026: addition of the controlled introduction (register of requests, 90 days; blocks requested by companies, 3 years) and automatic acknowledgements of receipt; opening to companies of the European Union (VIES), verification records (5 years), copy of e-mails sent (3 years). The same day: addition of disagreement files (versions of both companies, 3 years).
• 29 October 2026: paragraph "Number of visits to profiles" and optional question "how you heard about us" added to the registration request.
• 30 October 2026: register of requests kept for 1 year instead of 90 days (5 years for a registration that cannot be checked or that was refused); evidence file; IP address kept as a clue (country deduced on our server, without sending it to another service); comparison of new registrations with refused or unpublished registrations.
• 3 November 2026: card payments made through SumUp, outside the website; IBAN entered by the company for a refund by bank transfer: encrypted, then deleted.

1 November 2026: addition of the "What you miss" questionnaire and of the "Report content" form.