Data Controller
Controller: SDR Web
Company ID: 99247526900013
Email: contact@sdr-web.fr
Phone: +33 6 41 96 43 90
Address: Montpellier, France
Collected Data
Via the contact form:
- First and last name
- Email address
- Company name (optional)
- Requested service
- Message
Automatically collected technical data:
- IP address
- Browser type
- Visited pages
- Time spent on the website
Purpose of Processing
Your personal data is collected for the following purposes:
- Responding to contact requests
- Providing a personalized quote
- Commercial follow-up
- Improving our services
- Meeting legal obligations
Legal Basis
The processing of your personal data is based on your explicit consent (contact form) and our legitimate interest in improving our services.
You may withdraw your consent at any time by contacting us at contact@sdr-web.fr.
Data Retention Period
- Contact data: Up to 3 years after last contact
- Technical data: Up to 13 months
- Accounting records: 10 years (legal obligation)
Data Recipients
Your personal data is intended for:
- The data controller for project follow-up (SDR Web)
Appointments are booked through a tool developed in-house by SDR Web. The information you provide (name, email, phone, company, message) is stored in our database, hosted in the European Union (Neon, Frankfurt region), and in our internal customer relationship management tool. An event is created in our professional calendar (Google Calendar) and confirmation and reminder emails are delivered by our provider Resend. The website also sets audience-measurement and, where applicable, advertising cookies — only after your consent — detailed in the “Cookies, audience measurement and advertising” section below.
Cookies, audience measurement and advertising
No non-essential cookie is set without your consent. You can accept or refuse it via the banner shown on your first visit, and change it at any time (see “Manage my consent” below).
Strictly necessary cookies
Required for the website to function (storing your consent choice, security). Exempt from consent.
Audience measurement — Google Analytics 4
We use Google Analytics 4 (Google Ireland Ltd) to understand website traffic: pages viewed, traffic sources, device type, visit duration. These cookies are set only after your consent. If you refuse via the banner, no data is sent to Google. As long as you have not made a choice, no cookie is set or read: the tool operates in “Consent Mode” and only receives technical signals without cookies or advertising identifiers (your IP address is nevertheless transmitted to Google, as with any internet request), used for aggregated statistical estimates. Data may be transferred to Google, including in the United States, under the European Commission's Standard Contractual Clauses.
Advertising and remarketing
Subject to your consent, advertising trackers may be enabled to measure and optimise our campaigns (Google Ads signals and, where applicable, the Meta/Facebook Pixel).
First-party audience measurement (SDR Web)
SDR Web measures traffic on this website using a tool hosted on its own infrastructure, at two levels. (1) Anonymous measurement, cookieless and without retaining your IP address (ephemeral session identifier, country-level geolocation only), exempt from consent in line with the French data protection authority (CNIL) guidance. (2) Enhanced tracking able to recognise returning visitors, enabled only after your consent.
Technical error monitoring (Sentry)
We use Sentry (data hosted in the European Union, Frankfurt region) to detect the website's technical errors. This processing is always active under our legitimate interest in the stability and security of the service, without retaining your IP address and without setting any cookie. Sentry acts as a processor, under a data processing agreement.
Browsing recording (Microsoft Clarity)
Subject to your consent, we use Microsoft Clarity to understand how our pages are used: recording of your browsing (mouse movement, clicks, scrolling), heatmaps and friction signals such as dead clicks or rage clicks. What you type into our forms (name, phone, email) is masked and is not transmitted; the text displayed on our pages is captured. No recording takes place if you refuse the banner, nor before you have made a choice.
What you should know before accepting. Your contracting entity is Microsoft Ireland Operations Limited (Ireland). Unlike our other providers, Microsoft acts for this tool as an independent controller and not as a processor: it determines part of the uses it makes of this data itself, including its own operational and advertising purposes. Transfers to Microsoft Corporation in the United States take place, framed by standard contractual clauses concluded between Microsoft group entities, to which SDR Web is not a party. Finally, Microsoft offers no individual deletion: an erasure request concerning these recordings can only be satisfied by deleting the entire project, which we will do upon the first admissible request.
To locate the recording matching a request you have sent us, a technical session identifier, ephemeral and specific to this website, is transmitted to Microsoft. It contains neither your name, email nor phone number, but it does allow us to link that recording to your quote request. Recordings are retained for 30 days by Microsoft; aggregated statistics for up to 13 months. You may withdraw your consent at any time via “Manage cookies” at the bottom of the page.
Manage my consent
You can withdraw your consent at any time, just as easily, via the “Manage cookies” link at the bottom of every page, or by contacting us at contact@sdr-web.fr. Audience-measurement data is kept for a maximum of 13 months.
Your Rights
Under GDPR, you have the following rights:
- Right of access: know what data is processed about you
- Right to rectification: correct inaccurate data
- Right to erasure: request deletion of your data
- Right to restriction: limit the processing of your data
- Right to data portability: receive your data in a structured format
- Right to object: object to processing on legitimate grounds
To exercise your rights: contact us at contact@sdr-web.fr, specifying your request and including a copy of your ID.
Response time: within 1 month after receiving your request.
Security
We implement appropriate technical and organizational measures to protect your personal data:
- Encrypted data transmission (HTTPS)
- Restricted access to data
- Regular backups
- Regular security updates
Complaint
If you believe your rights are not respected, you may lodge a complaint with the French Data Protection Authority (CNIL):
CNIL
3 Place de Fontenoy - TSA 80715
75334 PARIS CEDEX 07
Phone : 01 53 73 22 22
www.cnil.fr
Last updated: July 2026