Skip to content
Elsässer

Privacy policy — Elsässer

Last updated: 15/10/2026

1. Who we are

The website https://elsasser.tech is published by Elsässer, specialized in sovereign open-source infrastructure and IT solutions for SMEs and small businesses (Alsace and France).
Data controller contact: contact@elsasser.tech.

2. Scope

This policy describes how Elsässer collects, uses, stores and protects personal data when you use elsasser.tech and its forms (contact, newsletter, callback request).

3. Data collected on the website

Depending on the forms used, we may collect:

  • Contact form: name, email address, subject, message content.
  • Callback request: name, phone and/or email, optional message.
  • Newsletter: email address, consent evidence (timestamp, technical IP, user-agent), subscription status.
  • Security technical data: IP address, limited application logs (anti-abuse / rate-limiting), technical session cookie for CSRF protection on forms.

4. Purposes and legal bases

  • Respond to contact requests — pre-contractual measures / legitimate interest.
  • Handle a callback request and call the prospect back — pre-contractual measures.
  • Send the newsletter — explicit consent (unchecked box).
  • Secure the website (CSRF, rate limiting, abuse prevention) — legitimate interest.

5. Recipients and processors

No sale of personal data to third parties.

  • Elsässer team (handling requests).
  • Website host (IONOS) — hosting infrastructure.
  • Email (SMTP) for contact / callback notifications.

6. Transfers outside the EU

Data is hosted with the website hosting provider (European Union / France depending on IONOS infrastructure).

7. Retention periods

  • Contact messages and callback requests: for as long as needed to handle the request, then deletion or limited archiving if legally required.
  • Newsletter: until unsubscribe or withdrawal of consent.
  • Anti-abuse technical logs: short duration, limited to security.

8. Security

Measures include: HTTPS, CSRF protection, rate limiting, isolation of secrets, restricted hosting access rights.

9. Cookies

The website uses strictly technical cookies / session storage (PHP session, CSRF token, language preference). No advertising cookies and no third-party analytics trackers by default.

10. Newsletter

Subscription requires an unchecked consent box. You can unsubscribe at any time via the link received or the unsubscribe page.

11. Your rights (GDPR)

You have rights of access, rectification, erasure, restriction, objection, portability, and the right to withdraw consent where applicable, as well as the right to lodge a complaint with the CNIL (https://www.cnil.fr).

To exercise your rights: contact@elsasser.tech.

12. Changes

This policy may be updated. The date at the top of the page prevails. The online version at https://elsasser.tech/confidentialite is the applicable version.