Privacy policy
Last updated: 25 September 2026
1. Data controller
Bestlog S.à r.l.-S (Bestlog Technology)
30, rue des Mines
L-4631 Oberkorn
Grand Duchy of Luxembourg
Contact: contact form
2. Data collected
- Contact form: first name, last name, professional email address, subject of interest, message, and the language and page from which the request is sent.
- Spam protection (hCaptcha): IP address and technical browser data, analysed by hCaptcha to tell humans from bots.
- Audience measurement (Google Analytics 4), only if you accept it: pages viewed, visit duration, device and browser type, approximate location, pseudonymous identifier.
- Hosting provider technical logs: IP address, date and time, pages requested, for security and proper operation.
We do not collect any sensitive data and do not carry out any fully automated decision-making or profiling.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Answering your request and, where relevant, sending you a commercial proposal | Pre-contractual steps at your request (Art. 6(1)(b)) and legitimate interest (Art. 6(1)(f)) |
| Protecting the form against spam and abuse | Legitimate interest (Art. 6(1)(f)) |
| Measuring website audience to improve it | Consent (Art. 6(1)(a)), which you can withdraw at any time |
| Ensuring website security and operation | Legitimate interest (Art. 6(1)(f)) |
4. Retention periods
- Contact requests: 2 years from the last exchange, then deleted or anonymised. If a business relationship follows, data are kept for the duration of the relationship and then as required by law.
- Audience measurement data: according to Google Analytics settings, 14 months maximum.
- Cookie choices: 12 months.
5. Recipients and processors
Your data are processed by Bestlog and are never sold. They may be processed on our behalf by the following technical providers:
| Provider | Role | Location |
|---|---|---|
| OVH SAS | Website hosting | France (EU) |
| Formspree, Inc. | Receiving contact form messages | United States |
| Intuition Machines, Inc. (hCaptcha) | Spam protection | United States |
| Google Ireland Ltd / Google LLC | Audience measurement (if consented), web fonts | Ireland (EU) / United States |
| jsDelivr | Delivery of the cookie management script | International network |
6. Transfers outside the European Union
Some providers are located in the United States. These transfers are governed by the EU–US Data Privacy Framework where the provider is certified under it, or otherwise by the standard contractual clauses adopted by the European Commission.
7. Cookies
| Cookie | Purpose | Duration | Consent |
|---|---|---|---|
| tarteaucitron | Storing your cookie choices | 12 months | Not required (necessary) |
| hCaptcha | Spam protection of the form | Set by the provider | Not required (necessary) |
| _ga, _ga_* | Google Analytics 4 audience measurement | Up to 2 years | Required |
No audience measurement cookie is set before you agree. You can change your choice at any time:
8. Your rights
Under the GDPR, you have the right of access, rectification, erasure, restriction, portability and objection, as well as the right to withdraw your consent at any time. To exercise them, use our contact form, mentioning “Data protection”. We reply within one month.
You may also lodge a complaint with the Luxembourg data protection authority (Commission nationale pour la protection des données, CNPD) — 15, boulevard du Jazz, L-4370 Belvaux — cnpd.public.lu.
9. Security
We implement appropriate technical and organisational measures (encrypted HTTPS connection, restricted access, spam protection) to protect your data against unauthorised access, loss or disclosure.
10. Changes
This policy may be updated. The date of the last update is shown at the top of this page.