Privacy policy
What data we process, why, for how long, and your rights.
Last updated: 25 August 2026
Data controller
The controller for the processing described here is SAS NAVITI (see legal notice), reachable at reseau@caladeo.com for any question relating to your data. No data protection officer (DPO) has been appointed; this address is your single point of contact.
Data processed and purposes
- Network application: agency identity, professional contact details, registration, guarantees, references or verifiable evidence of activity. Purpose: reviewing the application and deciding on membership. Legal basis: pre-contractual measures.
- Member accounts: name, professional e-mail, password (hashed), role, connection logs. Purpose: access to the member area and security. Legal basis: performance of the membership contract.
- Network activity: messages between agencies, requests and offers, Feed posts, ratings, items synchronised from the Caladeo software. Purpose: operation of the network and reliability indicators (response time and rate, rating). Legal basis: performance of the contract.
- Contact form: name, e-mail, message. Purpose: responding to your request. Legal basis: legitimate interest.
No data is sold or used for advertising purposes. As the network is strictly B2B, we do not process the data of the agencies' end customers: each agency remains responsible for the data of its own customers.
Recipients
The data is accessible to the network team and, for what is public by nature (agency profile, Feed posts), to visitors or other members according to the chosen level of visibility. Our technical processors: the host (Laravel Cloud, EU infrastructure) and our e-mail delivery provider (Google). No transfer outside the European Union is carried out without appropriate safeguards, namely the European Commission's standard contractual clauses and/or the provider's certification under the EU-U.S. Data Privacy Framework.
Retention periods
- Application file: 2 years after the decision (if refused) or for the duration of membership (if accepted).
- Member account and activity: for the duration of membership, then 3 years after leaving the network.
- Contact form messages: 1 year.
Your rights
In accordance with the GDPR, you have the right to access, rectify, erase, restrict, object to and port your data. You may also set directives regarding the retention, erasure and communication of your data after your death. Write to reseau@caladeo.com; we respond within one month, which may be extended by two months for complex requests. You may also lodge a complaint with the CNIL (cnil.fr), the French data protection authority.
Cookies
The site only uses strictly necessary technical cookies: login session, form security and language preference. No advertising cookies, no third-party trackers; this is why no consent banner is displayed.
Security
Encrypted connections (HTTPS), hashed passwords, member-area access limited to users invited by their agency, official documents stored in a private space not publicly accessible.