Legal information
Privacy policy
This policy describes how we process the personal data of visitors to this website, of our clients, prospects and partners, and the data our clients entrust to us. It applies in compliance with the GDPR and the French Data Protection Act. We collect only what is strictly necessary, we do not track your browsing, and your data stays in France.
Data controller
Unos — full details in the legal notice. Contact for any question about your data: rgpd@unos.fr
Contact form
| Data | Name, business e-mail, company (optional), message content. |
|---|---|
| Purpose | To answer your request and, if you wish, to prepare a commercial proposal. |
| Legal basis | Your consent (tick box) and pre-contractual measures taken at your request (art. 6.1.a and 6.1.b GDPR). |
| Recipients | Unos only. The message is routed through our e-mail delivery provider (Mailjet, hosted in the European Union). No transfer or resale. |
| Retention | 3 years after our last exchange, then deletion; at the end of the contractual relationship for clients, subject to legal retention obligations. |
| Hosting | Servers located in France (OVH), administered by the publisher. No transfer outside the European Union. |
Clients and prospects
As part of our services (IT maintenance, hosting, outsourced CIO, AI services, solutions development), Unos processes the business data required for the commercial and contractual relationship: identity and role of contacts, business contact details, exchanges, quotes, contracts, invoices, support tickets and intervention reports.
Legal bases: performance of the contract or pre-contractual measures (art. 6.1.b), our legal obligations, in particular accounting and tax (art. 6.1.c), and our legitimate interest in managing and developing our business (art. 6.1.f) — for example to inform you of our offers, with the option to object at any time.
Retention: for the duration of the contractual relationship, then 5 years for contractual documents (limitation period) and 10 years for accounting records; 3 years after the last contact for prospects.
Data processed on behalf of our clients
When we host, maintain or develop our clients' systems, we may access personal data they process (user accounts, mailboxes, databases, backups). We then act as a processor within the meaning of Article 28 of the GDPR: Unos processes this data only on the client's documented instructions, under a contract specifying the subject matter, duration, nature and purposes of the processing, the security measures and what happens to the data at the end of the service.
The platforms we host are located in France, on dedicated servers we administer. Our staff are bound by a confidentiality obligation and access data only when technically necessary, in a logged manner. We only engage another processor with the client's prior agreement.
Data subjects concerned by this processing must exercise their rights with the client, who is the controller; we assist the client in responding.
Internal tools and transfers outside the European Union
For our internal operations (e-mail, documents, video conferencing, calendar), we use Google Workspace. Your business exchanges with us may therefore be stored on this platform. Google Cloud EMEA Limited (Ireland) processes this data within the European Union; any transfers to the United States are governed by the “Data Privacy Framework” adequacy decision and the European Commission's standard contractual clauses.
Our transactional e-mails (form, notifications) are routed through Mailjet (Sinch, France), whose servers are located in the European Union. Our artificial intelligence tools are chosen and configured, project by project, in agreement with the client; no client data is used to train third-party models.
Apart from these cases, we do not transfer any personal data outside the European Union.
Job applications
If you send us an application, we keep your CV and our exchanges for the duration of the recruitment, then for a maximum of 2 years with your agreement for future opportunities. This data is only accessible to the people in charge of recruitment.
Technical logs
Like any web server, ours records for each request the IP address, date, requested page and browser. These logs are used only for security and diagnostics (attack detection, troubleshooting). They are kept for a maximum of 12 months, in line with our legal obligations, then deleted.
Cookies and trackers
No advertising cookies, no third-party tools, no fonts loaded from an external service. The only possible cookies are technical (login session to the site administration) and exempt from consent under the CNIL's guidelines. That is why no consent banner is imposed on you.
Security
Encrypted exchanges (HTTPS), servers kept up to date and monitored, restricted access and strong authentication for administration, encrypted backups. We apply to our own website what we recommend to our clients.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to withdraw your consent at any time and to set instructions on what happens to your data after your death (French Data Protection Act). To exercise these rights, write to us at the address above stating your request; we may ask for proof of identity in case of reasonable doubt, and we reply within one month.
If, after contacting us, you believe your rights are not being respected, you may lodge a complaint with the CNIL (www.cnil.fr).
Changes
This policy may evolve, in particular if we add a service. The online version prevails; the date below indicates its last revision.
Last updated: 6 novembre 2026