Legal
Privacy Policy
How OmniLab (21Factory SAS) processes personal data in accordance with the GDPR.
This privacy policy explains how 21Factory SAS ("we", "us", "OmniLab") processes personal data collected through this website, in accordance with the EU General Data Protection Regulation 2016/679 (GDPR) and the French Data Protection Act ("Loi Informatique et Libertés").
1. Data controller
The data controller is 21Factory SAS, registered at the RCS of Bordeaux under number 921 975 462, whose registered office is located at Spaces Bordeaux Euratlantique, Rue d'Armagnac, Bâtiment E1, 33000 Bordeaux, France.
For any question relating to your personal data, you may contact us at privacy@21factory.com.
No Data Protection Officer (DPO) has been formally appointed; the President of the company acts as the privacy contact.
2. What we collect and why
2.1 Contact form
When you submit our contact form, we collect the data you provide (typically: name, email address, company, and the content of your message).
| Purpose | Legal basis | Retention |
|---|---|---|
| Respond to your enquiry, manage the commercial relationship. | Pre-contractual measures taken at your request (GDPR art. 6-1-b); our legitimate interest in answering prospects (art. 6-1-f). | 3 years from the last contact, then deletion or archiving for legal-obligation purposes only. |
Submissions to the contact form are forwarded internally via Slack (Slack Technologies LLC, USA) so that our team can reply quickly. See section 4 on international transfers.
2.2 Audience measurement (Google Analytics)
Subject to your consent, we use Google Analytics 4 (provided by Google Ireland Limited) to measure how visitors use our website (pages viewed, sessions, country, device type).
| Purpose | Legal basis | Retention |
|---|---|---|
| Measure site audience and improve content. | Your consent (GDPR art. 6-1-a), collected through our cookie banner. | Cookies: 13 months max. Aggregated data: 14 months. |
If you refuse, no Google Analytics tag is loaded and no analytics cookie is set. You can change your mind at any time via the "Manage cookies" link.
3. Recipients of your data
Your data is accessed only by authorised personnel of 21Factory and by the following processors (sous-traitants), acting on our instructions under written agreements compliant with GDPR art. 28:
- Slack Technologies LLC (USA) — internal notifications of contact-form submissions. Transfer mechanism: EU-US Data Privacy Framework certification.
- Google Ireland Limited (Ireland) — audience measurement (Google Analytics 4), only after your consent. Transfer mechanism: EU-US Data Privacy Framework certification of Google LLC.
- Vercel Inc. (United States) — website hosting; infrastructure deployed in the European Union (Frankfurt region). Transfer mechanism: EU-US Data Privacy Framework certification.
We do not sell your personal data, nor do we share it with third parties for their own marketing purposes.
4. International data transfers
Some of our processors are located outside the European Union (United States). When this is the case, we rely on transfer mechanisms recognised by the European Commission: adequacy decisions (notably the EU-US Data Privacy Framework) or, failing that, Standard Contractual Clauses (Decision 2021/914).
5. Your rights
In accordance with GDPR articles 15 to 22, you have the right to: access your data, rectify it, request its erasure, restrict its processing, object to its processing, request its portability, and withdraw your consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal).
You may exercise these rights by writing to privacy@21factory.com, providing proof of identity. We will reply within one month.
If you believe your rights are not respected, you may lodge a complaint with the French supervisory authority: CNIL — 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.
6. Cookies
For details on cookies and trackers used by this website, please refer to our Cookie Policy.
7. Updates to this policy
We may update this policy to reflect changes in our practices or in applicable regulations. The version in force is always available at this URL, with the last-updated date shown above.