Privacy Policy.

1. Who we are

Wormsensing S.A.S (the "Controller"), headquartered at 2 rue des Murailles, 38170 Seyssinet-Pariset, France. Contact: contact@wormsensing.com. For any data-protection request, please use the same address with the subject line "Privacy request".

2. What data we collect

We collect personal data only when you actively submit it through one of our forms or when you contact us by email. The categories are:

• Identification data — first name, last name, professional email, company, role / title, country.
• Free-text content — what you write in the message field of our forms (use case, technical question, project description).
• Technical data — server logs of the request (IP address, user agent, timestamp). Stored for security and fraud-prevention purposes only.
• Job applications — first name, last name, email, phone number (optional), CV and cover letter, when you apply for a position.
• Audience data — pages visited, referring site, browser, device type, country and page-load performance, measured without cookies (see section 8).

We do not collect special categories of data (health, religion, biometric, etc.) and we do not request payment information on this site.

3. Why we collect it

• Answer your inquiry — when you request an evaluation kit, ask a technical question or contact sales.
• Provide a Dragonfly® evaluation kit — logistics and shipping coordination.
• Manage commercial relationships — sales follow-up, account management, ongoing customer support.
• Recruitment — review your application and contact you about the position you applied for.
• Security & fraud prevention — protect the site and our services against abusive use.
• Statistical analysis — aggregate analytics on site usage, never tied back to individual users.

4. Legal basis (GDPR Art. 6)

• Legitimate interest — B2B commercial communication with professionals who have contacted us, sales follow-up, customer-relationship management.
• Consent — for any optional marketing communications (newsletters, product announcements) which are always opt-in.
• Contractual necessity — to deliver products or services you have ordered.
• Steps prior to a contract — to review a job application you send us.
• Legal obligation — for record-keeping required by French commercial and tax law.

5. How long we keep it

• Active commercial contacts — 3 years from the last meaningful interaction.
• Customers — for the duration of the commercial relationship + 10 years for accounting/tax records (French Commercial Code obligation).
• Newsletter / marketing — until you unsubscribe.
• Server logs — 1 year maximum.
• Job applications — 2 years after our last contact, unless you ask us to delete them sooner. If you join us, your application moves to your employee file.
• Audience measurement — aggregated statistics only: no visitor profile is kept.

6. Who has access

Personal data is accessed strictly on a need-to-know basis. The following categories of recipients may process your data:

• Wormsensing internal teams — sales, engineering support, marketing, finance — only when relevant to their job.
• Technical sub-processors:
  • Vercel Inc. (USA) — site hosting, execution of the forms (Paris region) and cookie-free audience measurement (Web Analytics, Speed Insights).
  • Resend (USA/EU) — transactional email delivery.
  • Microsoft (Microsoft 365) — the mailboxes that receive your messages and applications.
• French or European authorities — only when legally required (judicial request, tax audit, etc.).

Where a sub-processor may access data from outside the European Union, the transfer relies on the EU-U.S. Data Privacy Framework or on the European Commission's Standard Contractual Clauses.

7. Your rights

Under GDPR Articles 15-22, you have the right to:

• Access — get a copy of the personal data we hold about you.
• Rectification — correct any inaccurate or incomplete data.
• Erasure — request deletion ("right to be forgotten"), subject to legal retention obligations.
• Restriction — limit processing in certain circumstances.
• Portability — receive your data in a machine-readable format.
• Objection — object to processing based on legitimate interest.
• Withdraw consent — for any consent-based processing, at any time.

To exercise any of these rights, email contact@wormsensing.com We respond within one month, and may ask you to confirm your identity if we have a reasonable doubt about it.

You also have the right to lodge a complaint with the CNIL — the French data-protection authority — cnil.fr.

8. Cookies & tracking

This site sets no advertising or tracking cookie. It keeps two settings in your browser's local storage: your language, if you pick one, and your cookie choice, when we ask for it.

We measure the site's audience without cookies, with Vercel Web Analytics and Speed Insights: pages visited, referring site, browser, device type, country and page-load performance. Visits are not linked from one day to the next or across sites, and no profile is built. You can switch this measurement off for your browser:

If we add Google Analytics, it will only load after you accept it in our cookie banner; its cookies last 13 months at most, and you can change your choice at any time.

9. Security

We take reasonable technical and organisational measures to protect your data: HTTPS everywhere, principle of least privilege for internal access, encrypted backups, regular security reviews. No system is perfectly secure — in the event of a data breach affecting your rights, we notify you and the CNIL within 72 hours per GDPR Art. 33-34.

10. Changes to this policy

We may update this Privacy Policy as our services evolve. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated to active customers via email.

11. Related documents

See also our Legal notice and General Terms of Sale.