Privacy policy
Last updated: August 2026
This English version is a translation provided for convenience. In the event of any discrepancy, the French version prevails.
This policy describes how MDDev (Assilya) collects and processes personal data through the assilya.fr website, in accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act of 6 January 1978, as amended.
It covers the website only. Processing carried out within the Assilya platform (application) is described in the application's own privacy policy.
Data controller
The controller of the data collected through the website is MDDev, 156 route de la Salvetat, 31470 Fontenilles, France. Contact: contact@assilya.fr, phone +33 (0)5 82 95 06 78.
No data protection officer (DPO) has been appointed; any question may be sent to the contact address above.
Data collected and purposes
The following data is processed through the website:
- Prospects (demo form): name, business email, phone number (optional), store name, platform, message volume and optional message. Purpose: handle your request, arrange a demo and contact you back.
- Usage data: technical logs, connection and browsing data. Purposes: security, abuse prevention, maintenance and improvement of the website and, subject to your consent, audience measurement.
Legal bases
- Consent: demo form, non-essential cookies.
- Pre-contractual measures: handling of your demo request and follow-up contact.
- Legitimate interest: website security and abuse prevention.
Recipients and sub-processors
Data is never sold. It is accessible to authorised MDDev staff and to technical sub-processors acting on instructions and bound by confidentiality:
- OVHcloud (OVH SAS): website hosting, within the European Union.
- Resend: delivery of emails related to the demo form.
- Google: reCAPTCHA (form anti-spam protection) and, where applicable, Google Tag Manager, Google Analytics 4 (audience measurement) and Google Ads (advertising and conversion measurement), subject to consent.
Transfers outside the European Union
Some sub-processors (notably Google and Resend) are established in the United States or may process data there. Such transfers are governed by appropriate safeguards within the meaning of Articles 44 et seq. GDPR: European Commission standard contractual clauses and, where applicable, certification under the EU-US Data Privacy Framework.
Retention periods
- Prospects: up to 3 years from the last contact.
- Usage data: for the time strictly necessary for the security and maintenance of the website.
- Cookies: as per the durations shown in the table below.
Security
MDDev implements appropriate technical and organisational measures to protect data: encryption in transit, access control, website hosting within the European Union, backups and logging.
Your rights
In accordance with the GDPR, you have the right to access, rectify, erase, object to, restrict and port your data, as well as the right to withdraw your consent and to set instructions on the fate of your data after your death. To exercise them, write to contact@assilya.fr.
You may also lodge a complaint with the French data protection authority, the CNIL.
Changes
This policy may be updated to reflect changes to the website or regulations. The last update date is shown at the top of the page.
Cookies and trackers
On your first visit, a banner lets you accept or refuse non-essential cookies. You can change your choice at any time using the button below.
| Cookie / tracker | Purpose | Duration |
|---|---|---|
| laravel_session | Maintains the browsing session (strictly necessary) | Session |
| XSRF-TOKEN | Protection against cross-site request forgery, CSRF (strictly necessary) | 2 hours |
| cc_cookie | Stores your cookie preferences (strictly necessary) | 6 months |
| _ga, _ga_* | Audience measurement, Google Analytics 4 via Google Tag Manager (subject to consent) | 13 months |
| _gcl_*, _gac_* | Advertising and conversion measurement, Google Ads (subject to consent) | 90 days |
| _GRECAPTCHA | Form anti-spam protection, Google reCAPTCHA (subject to consent) | 6 months |
The form is protected by reCAPTCHA: Google's privacy policy and terms of service apply.
Manage my cookies
You can review or withdraw your consent at any time: