Privacy Policy

Version 1.0 · Effective 1 January 2025 · Last updated April 2026

This notice explains how AINSORA collects and processes personal data through the website https://www.ainsora.com. It applies to visitors who use the contact form, submit an RMA request, or otherwise interact with the site. It does not apply to data processed under separate contractual agreements.

1. Data Controller

The data controller for this website is AINSORA, operating within the IncubaTest business incubator under a CAPE agreement (Contrat d'Appui au Projet d'Entreprise — French law no. 2003-721 of 1 August 2003). The legal host entity is IncubaTest, operated by BGE Yvelines, 6 avenue de la Mauldre, ZA de la Couronne des Prés, 78680 Epône, France.

For all privacy-related enquiries, contact: info@ainsora.com

2. Data We Collect and How

We collect personal data through the following site functions:

Contact form

Name, email address, company name, and message content. Submitted voluntarily when you send an enquiry via the contact form on this site.

RMA (Return Merchandise Authorization) form

Name, surname, company, email address, phone number, shipping address (street, city, postcode, country), product serial numbers, part numbers, fault descriptions, and any files attached to the request. Submitted when you initiate a warranty or repair request.

Server access logs

IP address, browser type and version, pages visited, time and date of visit, referring URL. Collected automatically by the web server on each page request.

Spontaneous job applications

If you submit your CV via the contact form or by email, we process your name, contact details, and any information contained in the documents you provide.

3. Why We Process Your Data

We process personal data for the following purposes, each with the lawful basis noted:

PurposeLawful basis (GDPR Art. 6)
Responding to contact form enquiriesLegitimate interests (Art. 6(1)(f)) — responding to a commercial or support enquiry
Processing RMA and warranty requestsPerformance of a contract or pre-contractual steps (Art. 6(1)(b))
Maintaining server access logs for security and diagnosticsLegitimate interests (Art. 6(1)(f)) — website security and stability
Reviewing job applications for future recruitmentLegitimate interests (Art. 6(1)(f)) — evaluating candidates for future roles

We do not use your data for automated decision-making or profiling. We do not sell personal data to third parties. We do not send marketing communications unless you have separately requested them.

4. Who Receives Your Data

Your data is shared only where necessary to fulfil the purpose for which it was collected:

  • IncubaTest / BGE YvelinesLegal host entity — may access data in the context of providing administrative and accounting support under the CAPE framework.
  • Hosting and infrastructure providersThe web server and email infrastructure providers who process data on our behalf under data processing agreements.
  • Logistics and courier providersWhere an RMA request results in a physical shipment, the return address and contact details are shared with the carrier engaged for that shipment.
  • No othersWe do not share personal data with analytics platforms, advertising networks, data brokers, or any other third parties.

5. How Long We Keep Your Data

Data typeRetention period
Contact form submissions3 years from last contact, or until you request deletion
RMA recordsDuration of the applicable warranty period plus 2 years
Server access logs12 months, then deleted
Job applications2 years from submission, or until you withdraw your application

6. Cookies and Analytics

This website uses technical cookies that are strictly necessary for it to function. These cookies do not track browsing behaviour across other sites and do not require consent under French CNIL guidance (délibération no. 2013-378).

We do not currently deploy third-party analytics or advertising cookies. If we introduce analytics tools in the future that set non-essential cookies, we will update this notice and implement an appropriate consent mechanism before doing so.

Server access logs (IP address, pages visited, timestamps) are collected automatically as described in section 2. These are not used for profiling and are deleted after 12 months.

7. Your Rights

Under the General Data Protection Regulation (GDPR — Regulation (EU) 2016/679), you have the following rights regarding your personal data:

  • Right of access (Art. 15)Request a copy of the personal data we hold about you.
  • Right to rectification (Art. 16)Ask us to correct inaccurate or incomplete data.
  • Right to erasure (Art. 17)Request deletion of your data, subject to applicable legal obligations.
  • Right to restriction (Art. 18)Ask us to limit how we use your data while a dispute is resolved.
  • Right to data portability (Art. 20)Receive your data in a structured, commonly used format where processing is based on contract or consent.
  • Right to object (Art. 21)Object to processing based on legitimate interests; we will cease unless we can demonstrate compelling grounds.

To exercise any of these rights, send a written request to info@ainsora.com. We will respond within 30 days. We may ask you to verify your identity before processing the request.

You also have the right to lodge a complaint with the French data protection authority:

CNIL — Commission Nationale de l'Informatique et des Libertés
3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
www.cnil.fr

8. Data Security

We apply reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Form submissions are transmitted over HTTPS. Access to personal data is restricted to personnel who need it to perform their role.

No transmission over the internet is unconditionally secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the CNIL within 72 hours as required by GDPR Art. 33.

9. Changes to This Notice

We may update this privacy notice when we introduce new site features, change processors, or when regulatory guidance changes. The version number and last-updated date at the top of this page will reflect any revision. We encourage you to review this page periodically.

10. Contact

For any question about this privacy notice or to exercise your rights:

AINSORA
Email: info@ainsora.com
Legal host: IncubaTest — 6 avenue de la Mauldre, ZA de la Couronne des Prés, 78680 Epône, France