Privacy policy
We are committed to protecting your personal data in accordance with the GDPR and best practice in digital sovereignty.
This English translation is provided for information only; the French version prevails.
Your data is hosted exclusively in France and Europe, on sovereign infrastructure.
Data controller
The controller of personal data processing is:
- Company name
- NextHop
- Representative
- Sylvain Rutten
- Address
- France
- contact@nexthop.fr
- DPO contact
- dpo@nexthop.fr
Data collected
We collect only the data strictly necessary for our services to operate, in line with the data minimisation principle required by the GDPR.
2.1 Browsing data (collected automatically)
- IP address - anonymised after collection
- Browser type - version and operating system
- Pages viewed - URLs visited on the website
- Visit duration - time spent on each page
2.2 Data you provide voluntarily
When you use our contact form:
- Name - to personalise our reply
- Email address - to reply to you
- Company (optional) - to put your request in context
- Message - the content of your request
We never collect sensitive data (ethnic origin, political opinions, health data, sexual orientation, etc.) within the meaning of Article 9 of the GDPR.
Purposes of processing
Your data is used exclusively for the following purposes:
- Handling contact requests - answering your questions and requests for information
- Anonymised statistical analysis - understanding how the website is used in order to improve it
- Website security - detecting and preventing intrusion attempts
What we NEVER do
- Sell your data to third parties
- Use your data for advertising purposes
- Transfer your data outside the European Union
- Create marketing profiles without your consent
Legal basis for processing
In accordance with the GDPR, each data processing operation is based on a specific legal basis:
| Processing | Legal basis | Article |
|---|---|---|
| Replying to contact requests | Performance of pre-contractual measures | Art. 6(1)(b) |
| Audience statistics | Legitimate interest | Art. 6(1)(f) |
| Website security | Legitimate interest | Art. 6(1)(f) |
| Non-essential cookies | Consent | Art. 6(1)(a) |
Retention period
We keep your data only for as long as necessary for the purposes for which it was collected:
When these periods expire, your data is deleted or irreversibly anonymised.
Data recipients
6.1 Internal access
Only authorised persons within NextHop have access to your data, to the extent necessary for the performance of their duties.
6.2 Processors
We use carefully selected processors, all subject to the GDPR and hosting data in Europe:
- Hosting
- Scaleway (France) - servers located in Paris
6.3 Transfers outside the EU
In line with our digital sovereignty commitment, your data is never transferred to countries outside the European Union. All our service providers are subject to European law.
Data security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure or destruction.
- Encryption - communications secured with TLS 1.3, data encrypted at rest
- Controlled access - strong authentication, principle of least privilege
- Secure infrastructure - ISO 27001-certified hosting, firewall, 24/7 monitoring
- Monitoring - intrusion detection, access logging, regular audits
Your rights
In accordance with the GDPR, you have the following rights over your personal data:
- Right of access - obtain confirmation that your data is being processed and receive a copy of it
- Right to rectification - correct inaccurate or incomplete data
- Right to erasure - request the deletion of your data under certain conditions
- Right to data portability - receive your data in a structured, readable format
- Right to object - object to processing on legitimate grounds
- Right to restriction - request the temporary suspension of processing
How to exercise your rights
To exercise any of these rights, send us an email at dpo@nexthop.fr stating your identity, the right you wish to exercise and any information useful for handling your request. We undertake to reply within one month.
Complaint to the CNIL
- Body
- Commission Nationale de l’Informatique et des Libertés
- Address
- 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
- Website
- www.cnil.fr
Cookie policy
A cookie is a small text file placed on your device when you visit a website. It is used to store information about your browsing.
9.1 Cookies used
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| session_id | Keeping the user session | Session | Essential |
| cookie_consent | Remembering your cookie preferences | 12 months | Essential |
| theme | Theme preference (light/dark) | 12 months | Functional |
9.2 Managing cookies
You can change your cookie preferences at any time through your browser settings or by deleting cookies already installed.
In line with our commitment to privacy, we use no advertising, third-party tracking or marketing profiling cookies.
If you have any questions about this document, please do not hesitate to contact us.