Privacy

Last updated: 17 September 2026.

Browsing the website

This version has no data collection form, audience analytics or advertising trackers. Email and phone links open your apps; LinkedIn and Malt are external links, with no embedded widgets.

Data controller

IDRWAY, 3 allée de Normandie, 92000 Nanterre, France.
redwane.id.hammou@idrway.com

Redwane Id Hammou, president of IDRWAY, is your point of contact for data protection.

Your contact enquiries

When you contact IDRWAY, your professional contact details, your enquiry and any attachments you choose to provide are used to understand your needs, reply and prepare a potential engagement. Please share only necessary information, without passwords or sensitive data.

Providing this information is voluntary. A reply address and information about your needs are necessary to handle your enquiry; without them, IDRWAY may be unable to respond.

When an individual requests a quotation in their own name, the processing needed to prepare it is based on the requested pre-contractual steps (GDPR Article 6(1)(b)). For other correspondence, including with company representatives, it is based on IDRWAY’s legitimate interest in responding to professional enquiries (Article 6(1)(f)).

Who receives your data?

Enquiries are handled by Redwane Id Hammou. Microsoft 365 provides business email and Hostinger provides website hosting, within the scope of their services. Contacting IDRWAY does not forward your enquiry to its expert network: any involvement and necessary information are agreed with you.

How long is your data kept?

For an enquiry that does not lead to an engagement, IDRWAY applies a retention period of 12 months after the last contact. A monthly manual review identifies and deletes correspondence that has reached this limit. This is not an automatic deletion rule configured in Microsoft 365.

If an engagement is agreed, relevant correspondence becomes part of the contractual records and follows the retention periods applicable to that relationship. Only records needed to meet a legal obligation or handle a dispute may be kept separately, with restricted access, for the period justified by that obligation or dispute.

Hosting and technical logs

The website is hosted on a VPS in Paris, France. Nginx access logs are disabled. Error logs may contain an IP address, date, requested path and diagnostic information; they help detect and resolve incidents, based on the legitimate interest in securing the service.

The selected policy sets a maximum retention period of 30 days for website technical errors and 6 months for security events and administrator access managed by IDRWAY. No systematic browsing history is planned.

Daily rotation and deletion of the relevant logs have been active on the VPS since 17 September 2026. Thresholds below the 30-day and 180-day limits allow an operational margin; some system logs are retained for less time. Tasks must be monitored: a stopped server or a failed task can delay deletion. Backups are separate from active logs: Hostinger retains two weekly VPS backups in the Netherlands, replacing the oldest as new backups are created. Data deleted from the server may remain in these copies until replacement. IDRWAY has not tested their restoration.

In the event of an incident or dispute, only necessary records may be set aside with restricted access for a justified period. This does not extend the retention of all logs.

Providers and international transfers

Hosting the VPS in France does not guarantee that all support or email processing remains within the European Union. Microsoft and Hostinger document international processing and associated contractual safeguards, including standard contractual clauses where applicable. The Microsoft admin center currently reports data-at-rest storage in France for Exchange Online. The account preference permits regional storage within the EU/EFTA, with no change before 13 December 2026; this does not guarantee that all support processing remains within that area.

Hostinger data processing agreement
Microsoft transfer safeguards. You can request further information or a copy of the applicable safeguards from the contact listed on this page.

Cookies

No consent banner is displayed because no non-essential trackers are used. This decision must be reassessed if analytics, remotely hosted video, a booking module or another third-party service is added.

This website does not profile you or make automated decisions about you. LinkedIn’s and Malt’s policies apply when you choose to visit their websites.

Contact and exercising your rights

Subject to the GDPR’s conditions, you have rights of access, rectification, erasure and restriction. You may object to processing based on legitimate interests on grounds relating to your situation. Data portability applies where its legal conditions are met.

For any request about your personal data: redwane.id.hammou@idrway.com.

You may also lodge a complaint with the French data protection authority (CNIL). Contact the CNIL