Privacy policy

Data controller

The data controller is ONLYMORE Group, a SAS registered with the Trade and Companies Register under number {{NUMERO_RCS}}, with its registered office at {{ADRESSE_COMPLETE}}.

Data Protection Officer (DPO): privacy@onlymore.group

Purposes of processing

We collect and process your personal data for the following purposes:

• Responding to contact requests (investors, press, partners)
• Managing investor relationships (authorized prospecting, Calendly meetings, follow-up)
• Measuring site audience via Plausible Analytics (no cookie, no personal data)
• Sending, on request, institutional information (newsletter, communications)
• Complying with legal and regulatory obligations

Legal bases

• Explicit consent (GDPR Article 6.1.a): newsletter, meeting request
• Legitimate interest (GDPR Article 6.1.f): audience measurement, site security
• Performance of pre-contractual measures (GDPR Article 6.1.b): investor exchanges
• Legal obligation (GDPR Article 6.1.c): retention of accounting records

Data collected

• Identity: last name, first name, position, company
• Contact details: email address, phone (optional), LinkedIn
• Content of exchanges: messages, possible attachments
• Anonymized technical data: country, device type, page visited (via Plausible, no IP stored)

Retention periods

• Investor data: 3 years after last interaction
• B2B prospecting data: 3 years after last contact
• Newsletter: until unsubscribe
• Anonymized technical data: 25 months maximum
• Accounting and legal archives: applicable legal durations

Recipients and subprocessors

Your data is accessible only to authorized persons of ONLYMORE Group and to our technical subprocessors:

• Vercel Inc. (hosting, eu-west-3 Paris region)
• Plausible Analytics (audience measurement, EU servers, no cookie)
• Calendly (meeting booking, only if you consent)
• Cloudflare Turnstile (anti-spam on forms, no tracking cookie)

Transfers outside the EU

Data hosted on Vercel is stored in the eu-west-3 (Paris) region. No transfer of personal data outside the European Economic Area is made without appropriate safeguards (European Commission standard contractual clauses).

Your rights

In accordance with articles 15 to 22 of the GDPR, you have the following rights:

• Right of access to your data
• Right of rectification
• Right to erasure (right to be forgotten)
• Right to restriction of processing
• Right to portability of your data
• Right to object, particularly to prospecting
• Right to set post mortem directives
• Right to withdraw your consent at any time

To exercise these rights, contact us at privacy@onlymore.group. We respond within one month.

CNIL complaint

If, after contacting us, you consider that your rights are not respected, you have the right to lodge a complaint with the French Data Protection Authority (CNIL): www.cnil.fr.

Security

We implement appropriate technical and organizational measures to protect your data: HTTPS/TLS encryption, content security policy (CSP), restricted access, logging. A security vulnerability can be reported to security@onlymore.group.

Changes

This policy may evolve. The version in force is the one published on this page, with its update date.