Privacy policy

The data controller is Veejo SAS, a société par actions simplifiée (SAS) with a share capital of €1,000, registered office Hangar 230, Aéroport de Toussus-le-Noble, 78117 Toussus-le-Noble, France, 932 536 691 R.C.S. Versailles.

We have not appointed a data protection officer. For any privacy question or request, write to [email protected].

This policy covers the websites veejo.fr, operators.veejo.fr, event.veejo.fr. The Veejo app at app.veejo.fr has its own terms and privacy policy, which govern your account data there.

The table below lists everything the sites do with personal data.

When an operator fills in the brief form on operators.veejo.fr/recruitment/start, we collect the company name, contact name, email, phone number, details of the roles to fill and any free text you add. This data is stored in our lead database, hosted by Supabase acting as our processor, on servers located in the European Union (France or Germany).

We use it to answer your request and prepare the recruitment engagement (pre-contractual measures, art. 6.1.b GDPR), and for B2B follow-up based on our legitimate interest (art. 6.1.f). You can object to follow-up at any time.

The information in the form is necessary to process your request; without it we cannot answer. While you fill it in, a draft is kept in your browser's sessionStorage so you do not lose your input. The draft stays on your device until you submit, and it is cleared after submission.

We keep prospect data for 3 years from the last contact. For clients, we keep it for the duration of the contract plus the applicable legal limitation periods.

Tickets for Veejo evenings are sold through Billetweb, a French ticketing platform. Its ticket office is embedded on event.veejo.fr and only loads when you scroll to it; we ask it not to run audience measurement. Billetweb sends your tickets by email and handles the payment.

Past events sold on event.veejo.fr used Stripe as payment processor. Payment details are processed by Stripe. Purchase records are kept for 10 years to meet our accounting obligations.

Our servers record technical logs: IP address, user agent, pages requested and timestamps. Our hosting provider, Hostinger, keeps them for 1 year for security purposes, on the basis of our legitimate interest in protecting the sites.

When you write to [email protected], we use your message and contact details to answer you. We keep the exchange for 3 years after the last message.

The sites set no advertising cookies. Our fonts and embedded videos are self-hosted, so viewing a page sends no request to Google or to a video platform.

Audience measurement (pages viewed, approximate country, device type) runs only if you accept it in the cookie banner. Nothing is loaded before you choose, and declining is as simple as accepting. We keep your choice in your browser for 6 months, then ask again. You can change it at any time from Cookie settings at the bottom of every page.

Without your consent, we use browser storage only for functions that are strictly necessary:

• sessionStorage: the draft of the recruitment brief, cleared once you submit it;
• localStorage: your cookie choice and the date you made it.

Under CNIL guidance, this storage is exempt from consent. You can clear it at any time from your browser settings.

Some pages offer a WhatsApp link (wa.me). Nothing is shared with Meta unless you click it; once you do, Meta processes your data under its own privacy policy.

The Rotate podcast on the pilots and podcast pages shows a still image hosted by Veejo. The YouTube player (youtube-nocookie.com) only loads when you press play; from then on, Google processes your data under its own privacy policy. Apple Podcasts and Spotify are plain links.

Your data is accessed only by the Veejo team and by the providers that help us run the sites: Supabase (lead database), Billetweb (event tickets), Stripe (past payments) and Hostinger (hosting). They process data on our behalf and under our instructions. We do not sell your data.

Website and lead data are hosted in the European Union: the sites by Hostinger, the lead database by Supabase on servers in France or Germany. Stripe, used for past event ticketing, may process payment data outside the European Union; such transfers are covered by appropriate safeguards (the EU-US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses).

We apply technical and organisational measures suited to the risk, including encrypted connections and access limited to the people who need the data.

We do not make decisions about you based solely on automated processing, including profiling.

Under the GDPR and the French Data Protection Act, you have the following rights:

• Access: obtain a copy of the personal data we hold about you.
• Rectification: have inaccurate or incomplete data corrected.
• Erasure: have your data deleted, unless we must keep it to meet a legal obligation.
• Restriction: ask us to limit the use of your data in certain cases.
• Objection: object at any time to processing based on our legitimate interest, including follow-up messages.
• Portability: receive the data you gave us in a structured, machine-readable format.
• Withdrawal of consent: where processing relies on your consent, withdraw it at any time.
• Post-mortem directives: under French law, set instructions for what happens to your data after your death.

To exercise them, write to [email protected]. We answer within one month. We may ask for proof of identity if we have a reasonable doubt about who is making the request.

If you think your rights are not respected, you can lodge a complaint with the CNIL, 3 Place de Fontenoy, 75007 Paris, France, www.cnil.fr.

We may update this policy when our processing changes. The date at the top of the page shows the latest version.

Veejo SAS, Hangar 230, Aéroport de Toussus-le-Noble, 78117 Toussus-le-Noble, France. Email: [email protected]. Phone: +33 7 81 08 96 16 (WhatsApp (opens in a new tab)).