The data controller is GEOYA, a simplified joint-stock company (société par actions simplifiée) with a share capital of 7,317,930 euros, head-quartered at 89 rue Taitbout — 75009 PARIS, registered with the Paris Trade and Companies Register (RCS PARIS) under number 880 269 246.
Its legal representative is Mr Emmanuel NÉRÉ, President.
Geoya attaches great importance to the protection of personal data and is committed to complying with the General Data Protection Regulation of 27 April 2016 (GDPR) and the French Data Protection Act of 6 January 1978.
This policy aims to describe how we collect and process personal data in connection with the use of our website www.geoya.fr.
The purpose of this policy is to explain what data is collected on the website, for what purposes, and what your rights are.
1 – Personal data processed
1.1 Data collected automatically (cookies & connection history)
When you browse the website, we collect technical information relating to the browser and the device, identifiers and cookies strictly necessary for operation, and connection logs:
IP address;
Pages viewed;
Date and time of connection;
Technical cookies (allowing the website to function).
Our cookie management policy can be accessed here.
1.2 Data collected via the contact form
When you use our contact form on the website, we collect:
First name and surname;
Email address;
Job title & Company (optional);
Content of the message.
1.3 Booking an appointment for a demonstration
When you use the booking tool for a demonstration, we collect:
First name and surname;
Email address;
Availability and time zone;
Subject of the meeting;
Technical metadata required for scheduling (calendar tool).
2 – Purposes of processing
Personal data is processed by Geoya for the following purposes:
2.1 Operation of the website and user relationship management
The purpose of the processing operations carried out is:
to ensure the operation, maintenance, security and integrity of the website;
to enable the management of requests sent via contact forms;
to group and schedule meetings, demonstrations and discussions necessary for presenting Geoya solutions via Calendly.
2.2 Compliance with legal and regulatory obligations
Data is also processed in order to:
comply with the legal obligations of the data controller, particularly with regard to accounting, taxation, social security, information systems security and the management of individuals' rights;
ensure compliance with applicable regulatory obligations.
2.3 Confidentiality of collected data — No marketing
Geoya uses your personal data for specific purposes, as described in this policy.
The information you provide is kept confidential and used solely within the scope of your relationship with Geoya (Geoya trademark) and its affiliates.
Geoya does not engage in unsolicited commercial prospecting and does not process any data for direct marketing purposes without an appropriate legal basis (including prior consent where required).
Geoya does not transfer your data to a third party for prospecting or commercial purposes.
3 – Legal bases for processing
3.1 Legitimate interest
Geoya processes certain data in order to ensure:
the operation, maintenance, improvement and security of the website;
the prevention of malicious acts;
the production of technical analyses and internal statistics necessary for improving the website;
responding to requests sent via the contact form;
organising and managing appointments or demonstrations regarding the solutions offered.
This processing is strictly necessary to guarantee the stability, security and quality of the service provided to website visitors and is necessary to respond to requests prior to the potential conclusion of a commercial relationship.
3.2 Compliance with legal or regulatory obligations
The data collected by Geoya to comply with its legal and regulatory obligations is based on compliance with a legal obligation incumbent on the data controller.
4 – Recipients of the data
Personal data is intended exclusively for the following categories of recipients:
4.1 Internal teams
These are the following categories:
authorised support staff;
operational teams (diagnostics management, report generation);
technical teams (security, application maintenance);
employees of other companies under a service contract with Geoya.
4.2 Subprocessors acting on behalf of Geoya
Geoya may transfer certain data to subprocessors, particularly in the following areas:
hosting;
technical maintenance and support;
appointment booking (scheduling tool);
videoconferencing used for remote diagnostics;
collection or processing of technical data necessary for the diagnostic (e.g. professional tools).
4.3 Technical partners and appointed experts
Solely within the scope of Geoya services:
Saretec, for carrying out diagnostics or developing digital tools;
Sixense, for carrying out diagnostics or developing digital tools;
other partners contractually bound to Geoya to perform part of the services;
our technical service providers (host, maintenance), acting as subprocessors in compliance with the GDPR.
No data is sold, rented or shared for commercial purposes.
5 – Retention period of collected data
All collected data: 12 months after the last interaction.
6 – Hosting & security
The website is hosted by: Framer B.V, Rozengracht 207B, 1016 LZ Amsterdam, Netherlands.
Geoya implements all appropriate technical and organisational measures to protect your data against unauthorised access.
7 – Your rights
In accordance with the GDPR and the French Data Protection Act, you have the following rights regarding your data:
right of access;
right to rectification;
right to erasure;
right to restriction of processing;
right to object;
right to data portability;
right to withdraw consent (for data requiring your consent);
right to define instructions regarding the outcome of your data after your death.
To exercise your rights, contact: contact@geoya.fr
We may ask you for additional information to confirm your identity if we cannot identify you with certainty.
You also have the right to lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL).
Online: https://www.cnil.fr/fr/plaintes
By post: Commission nationale de l'informatique et des libertés, Service des plaintes, 3 Place de Fontenoy, 75007 PARIS.
8 – Modification of the policy
Geoya reserves the right to modify this policy, with modifications taking effect upon publication on the website. The last update date of this document is: June 2026.