Privacy policy

How OrdiPat collects, uses and protects your personal data, in compliance with the GDPR.

Last updated: 5 October 2026

Personal data

Personal data is collected in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), and with the French Data Protection Act No. 78-17 of 6 January 1978.

The data marked as mandatory in the contact form is required to handle your enquiry. The data OrdiPat may collect includes:

  • your first and last name;
  • your company;
  • your email address;
  • your phone number;
  • the content of your message;
  • the IP address, browser and type of device used (technical logs).

Processing activities by purpose

Receiving requests submitted via the contact form

Sub-purpose: handling follow-ups to contact requests received

Data controller Legal basis Retention period Data recipients Transfer outside the EU
OrdiPat SAS Art. 6.1.f — Legitimate interest of the data controller Manual deletion: 1 year from last contact The data controller and any authority legally authorised to access the data None. The website and email server are hosted by Rapidomaine, based in France (Paris).

Receiving quote requests

Sub-purpose: reviewing the request and preparing a commercial proposal

Data controller Legal basis Retention period Data recipients Transfer outside the EU
OrdiPat SAS Art. 6.1.b — Pre-contractual measures taken at the request of the person Manual deletion: 3 years from last contact in the absence of a contract The data controller and any authority legally authorised to access the data None. The website and email server are hosted by Rapidomaine, based in France (Paris).

Receiving requests to exercise GDPR rights

Sub-purpose: reviewing and responding to requests received by email and post

Sub-purpose: dispute handling

Data controller Legal basis Retention period Data recipients Transfer outside the EU
OrdiPat SAS Art. 6.1.c — Necessary for compliance with a legal obligation Manual deletion: 3 years from closure of the file The data controller and any authority legally authorised to access the data None. The website and email server are hosted by Rapidomaine, based in France (Paris).

Web server log management and website security

Sub-purpose: logging of access to and use of the OrdiPat website

Sub-purpose: limiting contact form submissions per IP address

Data controller Legal basis Retention period Data recipients Transfer outside the EU
OrdiPat SAS Art. 6.1.c — Necessary for compliance with a legal obligation
Art. 6.1.f — Legitimate interest (website security)		 Automatic deletion: Apache logs 15 days, application and mail logs 3 months, IP address fingerprint 10 minutes The data controller and any authority legally authorised to access the data None. The website and email server are hosted by Rapidomaine, based in France (Paris).

Exercising your rights

Under the GDPR, you may:

  • access the personal data concerning you;
  • request its rectification or update;
  • request its erasure;
  • request the restriction of its processing;
  • object to its processing when it is based on OrdiPat’s legitimate interest;
  • exercise your right to data portability, where applicable;
  • set out instructions regarding what happens to your data after your death.

To exercise these rights, email dpo@ordipat.fr. We will reply within the legal time limit of one month.

If you believe your data is not being processed in accordance with the regulations, you may lodge a complaint with the CNIL, the French data protection authority (+33 1 53 73 22 22).

Cookies

A cookie is a small file, or tracker, placed and read when you visit a website, read an email, or install or use software or a mobile application, whatever the device used.

This website uses no audience measurement, advertising or social media cookies. It only places cookies that are strictly necessary for it to work, which are exempt from consent:

Cookie Purpose Duration
ordipat_locale Remembers the language you chose. 1 year
ordipat_csrf Protects the contact form against fraudulent submissions. 2 hours
ordipat_session Shows the result of a contact form submission when JavaScript is disabled. 2 hours