Privacy notice

The controller of your personal data is Elias Hikmi, entrepreneur individuel (EI), trading as HAI Systems. Full publisher details are in the legal notice.

Address

1 avenue de la Porte Brancion, 75015 Paris, France

Email

contact@hai-systems.com

Phone

+33 7 67 19 99 19

We have not appointed a data protection officer, because the law doesn't require one for our activity. Send any question or request about your data to contact@hai-systems.com.

When you request an audit

The form asks for your name, your work email, your company, your team size and, if you want, a few lines on where your team's time goes.

Netlify stores each request with your IP address and browser details, and uses them to check the request for spam.

If you reached the site through a link with campaign tags (utm_source, utm_medium, utm_campaign), the form also sends those tags, so we know which link brought you.

Name, work email, company and team size are required, because we need them to reply and to prepare the call. You don't have to give them, but without them the form can't be sent. The message is optional.

The self-check on the home page runs in your browser. If you use it, its result is copied into the message box, where you can edit or delete it. Nothing from it reaches us unless you send the form.

Please don't put passwords, health information or your own customers' personal details in the message.

When we talk

If you email us or we hold the audit call, we keep the emails, the date of the call, our notes and the written summary we send you.

When you visit

Our host, Netlify, records technical data for each request: your IP address, browser and device type, the page asked for, the referring page, and the date and time. It needs them to deliver the pages and to protect the site from abuse.

We don't use cookies, advertising trackers, social media plugins or fingerprinting.

Answer you

We reply, set up the call, hold it and send your written summary. Legal basis: our legitimate interest in answering the businesses that contact us and doing the work they ask for (GDPR art. 6(1)(f)).

Follow up

We may email you about the work we discussed, for example to answer a question or send a proposal you asked for. We don't add you to a newsletter or an automated email sequence. Every email says how to stop them, and a single reply is enough. Legal basis: legitimate interest (art. 6(1)(f)).

Campaign tags

When the form sends campaign tags, we note which of our links brought your request, to see which ones work. Legal basis: our legitimate interest in knowing which of our links bring requests (art. 6(1)(f)).

Security

Server logs and the spam check on form requests keep the site and the form working. Legal basis: our legitimate interest in keeping the site available and free of abuse (art. 6(1)(f)).

Clients

If you become a client, we use your details to deliver the work (art. 6(1)(b) when the contract is with you, art. 6(1)(f) when it is with your company), and we keep invoices because French law requires it (art. 6(1)(c)).

Our legitimate interests are the ones above: answering the businesses that contact us, doing the work they ask for, knowing which of our links bring requests, and keeping the site running safely. You can object at any time (see section 07).

We make no automated decisions about you, and we do no profiling.

Within HAI, only the people working on your request see your details. We don't sell or rent your data, and we don't share it for advertising.

These services process it for us, under contract and only on our instructions (GDPR art. 28):

Netlify, Inc. · United States

Hosts the site, receives and stores form requests, and keeps server logs. As part of its form service, it checks each request for spam with Akismet, a service of Automattic Inc. (United States). Safeguards: EU-US Data Privacy Framework and standard contractual clauses.

Airtable · United States

Formagrid Inc., doing business as Airtable, stores a copy of each request in our lead table. Safeguard: standard contractual clauses.

Email and calls

Our email and video-call providers carry our emails and the audit call.

We may also disclose data when the law requires it, for example to a court or a public authority.

Some of the services above are based in the United States, so your data may be processed there.

These transfers rely on the European Commission's adequacy decision of 10 Jul 2023 for companies certified under the EU-US Data Privacy Framework, and on the Commission's standard contractual clauses in each provider's data processing agreement. For a copy of these safeguards, write to contact@hai-systems.com.

Requests and notes

Your request, our emails, call notes and your summary: 3 years from your last contact with us, by form, email, reply or call. Then we delete them.

Do-not-contact list

If you ask us to stop contacting you, we keep your email address for 3 years, only so that we don't write to you again.

Client records

Contract records for the length of the contract plus 5 years. Invoices for 10 years, as French accounting law requires.

Server logs

As long as Netlify needs them to deliver and secure the site, under its own retention rules.

Under the GDPR and the French Data Protection Act, you can:

• See the data we hold about you, and get a copy.
• Correct it if it's wrong.
• Have it deleted.
• Ask us to pause its use while a question about it is settled.
• Receive the data you gave us in a common format, where this right applies.
• Tell us what should happen to your data after your death.

Your right to object

You can object at any time to our use of your data based on legitimate interest, including follow-up emails. Tell us and we stop. For follow-up emails, a single reply is enough.

How to ask

Email contact@hai-systems.com, ideally from the address you used with us, or write to 1 avenue de la Porte Brancion, 75015 Paris, France. We reply within 1 month. We ask for proof of identity only if we can't otherwise be sure the request is yours.

If you're not satisfied

You can complain to the CNIL, the French data protection authority: cnil.fr, 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France. You can also complain to the data protection authority of the EU country where you live or work.

No cookies, no advertising trackers, no social media plugins. Fonts and scripts are served from this site, not from Google or any other third party.

We don't run any analytics tool. Nothing on this site contacts a third party until you follow a link.

Nothing is stored on your device.

The site is served over HTTPS only. Form requests can be opened only by the people working on them, through accounts protected by two-factor authentication. Our own code never writes your details to logs.

If a breach puts your data at risk, we'll tell the CNIL and, where the law requires, tell you.

We update this page when our tools or practices change, and we change the "Last updated" date at the top. If a change affects how we use data you've already sent us, we'll email you before it applies.