Privacy policy
Last updated:
Data controller
The data controller is Nina Vienney, founder, acting on behalf of 5 Sens Collection, a company in the process of incorporation.
If you have any questions about your data, write to experience@5senscollection.com.
Data collected
When you send the call request form: full name, property, business email, phone (optional) and the date on which you ticked the form checkbox. If you reach the form through the “Apply” button of the founding circle, we also record with your request that it is an application. When you then choose your slot: time zone and chosen slot.
When you request your pre-assessment from the ICS simulator: business email, property type, your five self-assessment ratings, and the ICS pre-score and result shown.
With each of these requests, we also record the language of the site and where your visit came from: referring site, campaign parameters in the link (source, medium, campaign name) and landing page.
For your appointment: the event created in our calendar, which includes your name, property, email address, phone number (if given) and the video call link, as well as the emails relating to it. We also keep follow-up notes on our exchanges.
For the security of the site: our database keeps only a hashed form of your IP address and, to limit booking attempts, of your email address; our host also keeps short-lived technical logs (IP address, browser, pages visited and, if an email fails to send, the email address concerned).
The name you type for the engraving stays in your browser: it is never sent to us.
Purposes and legal bases
Answering your request, arranging your appointment and sending you the pre-assessment you request: creating the calendar event and the video call link; confirmation, rescheduling and cancellation emails; an email reminder the day before the appointment; the invitation added to your calendar, with the reminders you have set there. Legal basis: steps taken at your request prior to entering into a contract (Article 6(1)(b) of the GDPR).
Following up on our professional exchanges and knowing through which channel your request reached us. Legal basis: our legitimate interests in following up the requests we receive and knowing where they come from (Article 6(1)(f) of the GDPR). You may object at any time by writing to experience@5senscollection.com.
Protecting the site against abuse by limiting the number of requests per IP address and of bookings per email address, and monitoring it so that errors are fixed quickly. Legal basis: our legitimate interests in keeping the site secure (Article 6(1)(f) of the GDPR).
Your name, property and business email are needed to respond to your request; your phone number is optional. The form checkbox confirms that you have read this policy. The simulator pre-score is a self-assessment: it leads to no automated decision about you.
Recipients and processors
Your data is processed by Nina Vienney. Only to the extent strictly necessary, it is entrusted to the following technical providers, which act on our behalf:
- Google (Google Workspace): the calendar in which your appointment is created, the Google Meet video call link, the sending of emails and the storage of encrypted backup copies of the database in the company’s Google Drive;
- Vercel: hosting of the site and images, technical processing and logs;
- Neon: the database in which requests and appointments are stored, as well as emails waiting to be sent;
- Plausible or Vercel Web Analytics, only if enabled: cookie-free analytics;
- Sentry (Functional Software, Inc.), only if enabled: technical error reports from the site’s server, hosted in the European Union (Frankfurt, Germany); these reports contain no IP address, email address or visitor-entered content, no cookie is set, and they are kept for at most 90 days.
Your data is never sold, rented or passed on to third parties for commercial purposes.
Retention
- Call and pre-assessment requests: three years after the last contact.
- Appointments: three years after the date of the appointment.
- Calendar events and emails relating to your requests and appointments (Google Workspace): three years after the last contact.
- Emails sent by the site (sending queue): seven days; thirty days for an email that could not be sent.
- Hashed IP and email addresses: two days at most.
- The site’s technical error log, which holds no personal data: 90 days.
- Our host’s technical logs: a short period.
- Encrypted backup copies of the database (encrypted drive and Google Workspace): two months at most, each copy being replaced by the next one every month.
Once a year, data that has reached the end of these periods is deleted; backup copies of the database are erased no later than thirty days afterwards.
Transfers outside the European Union
Vercel, Neon and Sentry are companies based in the United States. Google may also process data outside the European Union.
These transfers rely on the mechanisms provided for by the GDPR: the European Commission’s standard contractual clauses or, for a provider certified under the EU–US Data Privacy Framework, that framework. You can obtain a copy of these safeguards by writing to experience@5senscollection.com.
Your rights
You have the rights of access, rectification, erasure, restriction of processing and data portability, as well as the right to object to processing based on our legitimate interests, including following up on our exchanges. You may also set out instructions on what happens to your data after your death.
To exercise these rights, write to experience@5senscollection.com.
If you believe your rights have not been respected, you may lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).
Cookies and local storage
The site sets no advertising cookies and uses no third-party trackers. Its fonts are hosted on the site itself.
When enabled, the analytics tool (Plausible or Vercel Web Analytics) works without cookies. It counts events that contain no personal data, such as button clicks, language, use of sound, the simulator pre-score or a confirmed appointment.
Your browser’s local storage holds your sound setting, whether the video is paused and the name typed for the engraving. You can clear them at any time in your browser settings.
During your visit, your browser’s session storage also keeps where your visit came from (referring site, campaign parameters, landing page); it is sent to us with your request and is cleared when you close the tab. When you switch language, it briefly keeps the place on the page where you were, to take you back there.
Security
The site is served over HTTPS: data is encrypted in transit. The number of requests per IP address and of bookings per email address is limited to prevent abuse.
The emails about your appointment contain a link to reschedule or cancel it. This link is personal to you.