Skip to content
FOSCA BioTech
ENFR
Back to home

Privacy policy

Last updated: June 2026

FOSCA BioTech respects your privacy and is committed to protecting your personal data. This policy explains how we collect and process personal data when you visit our website, and sets out your rights under the French Data Protection Act (loi Informatique et Libertés) and the EU General Data Protection Regulation (GDPR).

The data controller is FOSCA BioTech, Bergerac, Dordogne, France. Contact: privacy@fosca.tech.

1. Data we collect

  • Contact form data: name, email address, company, phone (optional), and message text, submitted voluntarily when you use the contact form.
  • Analytics data (with consent only): page views, session duration, referrer, and approximate country, collected via Google Analytics 4 (Google LLC, USA). This is only activated after you give explicit consent via our cookie banner.
  • Technical data: IP address and standard HTTP headers logged by our hosting provider (Bluehost) for security purposes. Logs are retained for 30 days.

2. Cookies and tracking

We use cookies only with your prior consent, in line with the requirements of the CNIL (Commission Nationale de l'Informatique et des Libertés). The only optional cookie we set is the Google Analytics measurement cookie (_ga, _ga_*), which we use solely to understand aggregate website usage. You can accept or decline analytics cookies via the banner shown on your first visit, and you can change your choice at any time by clearing your browser cookies.

We do not use advertising cookies, cross-site tracking, or sell any data to third parties.

3. Legal basis for processing

  • Contact form submissions: legitimate interest (responding to your enquiry) and, where applicable, pre-contractual steps.
  • Analytics: your explicit consent (Article 6(1)(a) GDPR).
  • Security logs: legitimate interest (maintaining site security).

4. Data transfers

If you consent to analytics, your data will be processed by Google LLC in the United States under the EU-US Data Privacy Framework. Contact form submissions are processed by Formspree Inc. (USA), which provides appropriate safeguards under standard contractual clauses.

5. Data retention

Contact form submissions are retained for up to 24 months, after which they are deleted. Analytics data is retained for 14 months in Google Analytics (the minimum configurable period). Security logs are deleted after 30 days.

6. Your rights

Under GDPR and French law, you have the right to:

  • Access, correct, or request erasure of your personal data.
  • Object to or restrict processing.
  • Withdraw consent at any time (this does not affect prior processing).
  • Lodge a complaint with the CNIL at www.cnil.fr.

To exercise your rights, contact us at privacy@fosca.tech. We will respond within 30 days.

7. Changes to this policy

We may update this policy from time to time. The current version is always published at this URL with the date of last update shown above.

8. Contact

Email: privacy@fosca.tech
Address: Bergerac, Dordogne, France