Legal Notice

Site publisher

Company name: Smart CTO (EI Alex Galey)
Legal form: sole proprietorship (entrepreneur individuel)
Publication director: Alex Galey
SIRET: 893 382 721 00015
Intra-EU VAT number: FR54 893 382 721
Email: contact+landing@smartcto.fr

Host

This site is hosted in France by Froggit (Haïbu SCOP SAS, 173 rue Antoine Durafour, 42100 Saint-Étienne, France — SIREN 939 290 664), on the Scaleway SAS (Paris) infrastructure. Data is stored exclusively in France and is not subject to the US Cloud Act.

Intellectual property

All elements of the site, including texts, are the exclusive property of Smart CTO or its partners. Any reproduction, representation, modification, publication or adaptation of all or part of the site's elements, by whatever means or process, is prohibited without the prior written authorization of Smart CTO.

Liability

Smart CTO cannot be held liable for direct or indirect damage caused to the user's equipment when accessing the site and resulting either from the use of equipment that does not meet the indicated specifications, or from the appearance of a bug or an incompatibility.

Privacy Policy

Data controller

The controller of personal data is Smart CTO (EI Alex Galey). In accordance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679) and the French Data Protection Act (loi Informatique et Libertés) of 6 January 1978 as amended, we are committed to protecting your personal data.

Data collected

This site does not collect any personal data directly. No contact form, no user account, and no tracking cookie on the site's pages (see "Cookies" for the /rdv page).

Appointment booking goes through our /rdv page, which embeds the calendar from Cal.com. This calendar (a third-party service) loads automatically when you open the /rdv page, and only on that page: your browser then contacts Cal.com, which may set the cookies needed for booking to work. The calendar may contain information pre-filled in the "notes" field: the source of the click (e.g. "Hero", "Pricing") and, if you have completed the quiz, your score and your answers. These notes are visible and editable before you confirm your booking. The data entered during booking is processed by Cal.com (see "Subcontractors").

Audience analytics

We use Umami, a self-hosted, open-source audience analytics solution. Umami sets no cookies, collects no personal data and does not allow cross-site tracking. The data is aggregated and anonymous (page views, referrers, countries). The Umami instance is hosted in France. This processing is based on our legitimate interest (article 6.1.f of the GDPR).

Cookies and local storage

The pages of this site set no cookies, except for the /rdv page (see below).

The Cal.com calendar loads as soon as you open /rdv. It sets only technical cookies, needed for the booking you request by opening that page: Cloudflare bot protection (__cf_bm, 30 minutes) and session security tokens (__Secure-next-auth, deleted when you close the browser). It also stores the booking in progress and your time format in your browser's local storage. No advertising or audience-measurement cookies. If you'd rather not load Cal.com, send me an email.

Only a theme preference (light/dark) is stored in your browser's local storage (localStorage). This data remains exclusively on your device and is never transmitted to our servers.

Subcontractors

Froggit / Scaleway — Website hosting, servers located in France.
Umami — Anonymous audience analytics, self-hosted in France.
Bunny Fonts — Web fonts, GDPR-compliant (no transfer of personal data).
Cal.com — Appointment booking, Cal.com, Inc. (United States), data hosted in the United States (AWS). The data entered during booking is processed by Cal.com as a processor, in accordance with its privacy policy.

Data transfers outside the EU

No data is transferred outside the European Union by this site, except for appointment booking: Cal.com, Inc. hosts and processes booking data in the United States. As Cal.com is not certified under the EU-US Data Privacy Framework, this transfer relies on the European Commission's standard contractual clauses, which Cal.com states it uses. The site's hosting and audience analytics are carried out exclusively in France.

Your rights

In accordance with the GDPR (articles 15 to 22) and the French Data Protection Act, you have the following rights:

Right of access (art. 15): to obtain confirmation as to whether or not data concerning you is being processed.
Right to rectification (art. 16): to request the correction of inaccurate data.
Right to erasure (art. 17): to request the deletion of your data.
Right to restriction (art. 18): to request the restriction of processing.
Right to data portability (art. 20): to receive your data in a structured, machine-readable format.
Right to object (art. 21): to object to the processing of your data.

To exercise these rights: contact+rgpd@smartcto.fr. You may also lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés — www.cnil.fr).

Contact

For any question regarding this privacy policy: contact+rgpd@smartcto.fr.

Photo credits

Some photographs on this site come from Unsplash and are used in accordance with the Unsplash license (free use, commercial and non-commercial).

Last updated: 28 September 2026.