Privacy policy
Last updated: October 20, 2026
This page explains how Extra SAS uses the personal data collected on the extra-entreprise.com website, in particular through its contact form. It does not cover the projects we run for our clients, which have their own contract.
1. Who is responsible
The data controller is Extra SAS, which publishes this website. For any question about your data, write to us at support@hello-extra.com.
2. The data collected
Contact form
When you send the contact form, we receive your name, your company, your email address, your phone number and, if you write one, your message, along with the page and the language of the site. To limit abuse, we keep an encrypted fingerprint of your IP address, which cannot be turned back into it, and delete it by the next day at the latest. The IP address itself is not recorded.
Contacting us
If you write to us, we receive your message, your contact details and any documents you attach.
Using the website
Our host processes technical data (IP address, browser type, pages requested) to display the website and protect it. We do not measure the website’s audience and use no advertising tool on it.
3. Why, and on what basis
- Answering your request (first conversation, information, proposal): these are steps taken at your request before a possible contract.
- Useful commercial follow-up after your request, related to your professional activity: this is our legitimate interest. You can object at any time, simply, by writing to us.
- Running and securing the website: this is our legitimate interest.
4. How long
- Requests and prospects: 3 years at most from collection or from your last contact with us. After that, the data is deleted or anonymized during our regular reviews.
- If you object to commercial follow-up: we only keep what is needed to respect your choice and not contact you again.
5. Who has access
Only the members of the Extra team who need it to handle your request have access. We also use service providers, each for its own part:
- Cloudflare: hosting and protecting the website, sending the notification to the team. Cloudflare’s privacy policy.
- Supabase: storing the requests received through the form. Supabase’s privacy policy.
6. Transfers outside the European Union
These providers, or their subcontractors, may process data outside the European Union, notably in the United States. These transfers rely on the safeguards each provider offers, such as the EU–US Data Privacy Framework when the provider takes part in it, or the European Commission’s standard contractual clauses. You can write to us to find out more.
8. Your rights
At any time, you can:
- access your data and get a copy of it;
- have it corrected or erased;
- ask for its use to be restricted;
- receive it in a common format, when its use is based on your request;
- object to its use based on our legitimate interest, and always to commercial follow-up, without having to give a reason;
- tell us what you would like to happen to your data after your death.
Write to us at support@hello-extra.com. We reply within one month, and may ask you to confirm your identity if necessary.
If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority: www.cnil.fr/fr/plaintes.
9. Changes
We will update this page if our practices change. The date at the top of the page shows the latest version.