Privacy Policy
This policy explains how Cadarsir collects and uses the personal data of visitors to the cadarsir.fr website.
For any questions or to exercise your rights: romain@cadarsir.fr.
Information sent via forms is recorded in Evolut and transmitted to Cadarsir by email. The website is hosted by IONOS SARL. Data is neither sold nor rented.
The site may place trackers strictly necessary for its operation. In the current configuration, no optional services requiring your prior agreement, such as an external iframe, are activated. If such a service is added, it will remain blocked until you make a choice, and a consent interface will allow you to accept, refuse, and then modify this choice.
To exercise these rights, write to romain@cadarsir.fr specifying your request. Proof of identity may be requested only in case of reasonable doubt regarding your identity.
If you feel, after contacting Cadarsir, that your rights are not being respected, you can lodge a complaint with the CNIL.
Processed data includes event titles, descriptions, dates, times, time zones, and recurrences, as well as technical identifiers necessary for synchronisation. Account identification information and OAuth authorisation tokens are also kept to maintain the connection.
The call to create this space does not transmit the visitor's name or the content of their request to Google. No artificial intelligence service is involved in this call.
Data stored in Evolut is accessible to authorised users and, within the limits of their tasks, to Cadarsir and technical service providers necessary for hosting and operating the service, notably IONOS.
Google data is neither sold nor rented. Its use is limited to the features authorised by the account holder, in accordance with the Google API Services User Data Policy, including its Limited Use requirements.
OAuth tokens necessary for the operation of integrations are stored server-side. They allow the application to maintain the connection without asking for or storing the Google account password.
Disconnecting in Evolut deletes the access tokens stored for that connection. For Calendar, it stops synchronisation without deleting the calendar and its events in Google.
Disconnection does not automatically delete appointments and other data already recorded in Evolut. A request for erasure can be sent to romain@cadarsir.fr, according to the procedures described in this policy.
Data obtained via Google Workspace APIs, including Google Calendar and Google Meet, including raw, aggregated, anonymised, or derived data, is not used, transferred, or sold to create, train, or improve general-purpose artificial intelligence or machine learning models. This restriction applies to Cadarsir and service providers acting on its behalf, in accordance with Google's Limited Use requirements.
In the Cadarsir booking process, the creation of the Google Meet link is carried out directly between Evolut and Google, after appointment validation. No artificial intelligence service is involved in this call and no data received from Google during this call is sent to an AI service through this process.
When a user uses an AI assistant, exchanges may include their messages, the content they communicate, and the context or tool results necessary for their request. These elements may be transmitted to the AI provider mobilised to process the request. The use of these assistants does not authorise the training of general-purpose models on data obtained via Google Workspace APIs.
Depending on the features activated and authorisations granted, processed data may include account identifiers and information, posts and their media, comments and information accessible about their authors, as well as performance statistics. Authorisation tokens are stored server-side to maintain connections. Cadarsir does not request or store social account passwords.
This data is used to prepare, schedule, publish, and manage content, process comments, and measure service results. Modifications or deletions are limited to the possibilities offered by the platforms and the scope entrusted by the client. This connection does not provide general access to personal profiles or private conversations.
Cadarsir performs this deletion manually: cancellation of still-scheduled posts, disconnection of social accounts from Postiz, deletion of connection tokens and relevant data in Postiz, as well as files, exports, and copies held by Cadarsir, including in any backups. Data that must be kept to comply with a legal obligation is limited to what is necessary and is no longer used for social media management.
The holder can withdraw the application's authorisation from the settings of the relevant platform. This withdrawal blocks subsequent access but does not automatically delete data already recorded in Postiz or posts present on social networks.
Requests for deletion can be sent to romain@cadarsir.fr, specifying the account concerned, without transmitting a password. After verifying the request, Cadarsir manually proceeds with the deletion of the relevant data and informs the requester of its processing, as well as any data whose retention remains mandatory. The rights described in this policy remain applicable.
Deletion applies to data held by Cadarsir. It does not delete the client's social accounts or posts already present on the platforms. Their eventual deletion is subject to a separate instruction from the client; data held by the platforms remains subject to their own policies.
Last updated: 15 October 2026.
1. Data Controller
The data controller is Romain Cadarsi, sole trader (EI), trading as Cadarsir, located at 65 rue des All Blacks, 34070 Montpellier, France.For any questions or to exercise your rights: romain@cadarsir.fr.
2. Data Collected and Purposes
Cadarsir only processes data necessary for the following purposes:- Contact form: identity and contact details provided, subject of the request, and message content, in order to respond to inquiries and ensure follow-up.
- Comments and reviews: identity or pseudonym, email address, and submitted content, in order to receive, moderate, and, where appropriate, publish contributions.
- Audience measurement: anonymised browsing data collected with Matomo, to understand traffic and improve the site.
3. Legal Basis
- Contact requests are processed based on Cadarsir's legitimate interest in responding to inquiries or, when they concern a service, to take pre-contractual measures at the individual's request.
- Comments and reviews are processed based on the consent given at the time of submission.
- Anonymised audience measurement meets Cadarsir's legitimate interest in knowing how its site is used and improving its operation.
4. Recipients and Storage
Data is accessible only to Cadarsir and, within the limits necessary for their tasks, to technical service providers involved in the site's operation.Information sent via forms is recorded in Evolut and transmitted to Cadarsir by email. The website is hosted by IONOS SARL. Data is neither sold nor rented.
5. Retention Periods
- Contact requests, comments, and reviews: 2 years from the last exchange or collection, unless a legal obligation imposes a different duration or a valid erasure request is made before this term.
- Matomo audience measurement cookies: 13 months maximum.
- Audience measurement data: 25 months maximum.
6. Matomo and Cookies
Cadarsir only uses Matomo to produce anonymised traffic statistics. Matomo is configured according to the criteria applicable to audience measurement exempt from consent: data is used exclusively for site analysis on behalf of Cadarsir, is not cross-referenced with other processing, and does not allow global tracking of browsing. No third-party statistical, advertising, or tracking services are used.The site may place trackers strictly necessary for its operation. In the current configuration, no optional services requiring your prior agreement, such as an external iframe, are activated. If such a service is added, it will remain blocked until you make a choice, and a consent interface will allow you to accept, refuse, and then modify this choice.
7. Your Rights
Depending on the processing concerned, you have a right of access, rectification, erasure, restriction, objection and, where conditions are met, a right to portability. You can also withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.To exercise these rights, write to romain@cadarsir.fr specifying your request. Proof of identity may be requested only in case of reasonable doubt regarding your identity.
If you feel, after contacting Cadarsir, that your rights are not being respected, you can lodge a complaint with the CNIL.
8. Security
Cadarsir and its service providers implement appropriate technical and organisational measures to protect data against unauthorised access, loss, alteration, or disclosure.9. Google Connections in the Evolut Application
Cadarsir operates the Evolut application, which offers connections to Google depending on the features activated. These connections require authorisation from the relevant Google account holder. Visitors booking an appointment on Cadarsir do not need to connect their Google account.Google Calendar: Schedule Synchronisation
When a client activates this connection, Evolut creates a dedicated Google calendar and synchronises its events with their Evolut schedule. The authorisation used applies to calendars created by the application, and not to all of their personal calendars.Processed data includes event titles, descriptions, dates, times, time zones, and recurrences, as well as technical identifiers necessary for synchronisation. Account identification information and OAuth authorisation tokens are also kept to maintain the connection.
Google Meet: Appointment Link Creation
On Cadarsir, the Google Meet connection is used with the operator's Google account. After manual validation of an appointment request, Evolut creates a Google Meet space and associates the resulting link with the appointment.The call to create this space does not transmit the visitor's name or the content of their request to Google. No artificial intelligence service is involved in this call.
10. Recipients and Google Data Exchanges
Data necessary for the activated features is exchanged between Evolut and the corresponding Google services. Meet links are communicated to the persons concerned by the appointment.Data stored in Evolut is accessible to authorised users and, within the limits of their tasks, to Cadarsir and technical service providers necessary for hosting and operating the service, notably IONOS.
Google data is neither sold nor rented. Its use is limited to the features authorised by the account holder, in accordance with the Google API Services User Data Policy, including its Limited Use requirements.
11. Google Data Protection
Exchanges with Google APIs use encrypted HTTPS connections during transport. Connection management interfaces are protected by authentication and authorisation controls.OAuth tokens necessary for the operation of integrations are stored server-side. They allow the application to maintain the connection without asking for or storing the Google account password.
12. Disconnection and Deletion
The holder can disconnect their account from the management interface and withdraw authorisation from their Google account.Disconnecting in Evolut deletes the access tokens stored for that connection. For Calendar, it stops synchronisation without deleting the calendar and its events in Google.
Disconnection does not automatically delete appointments and other data already recorded in Evolut. A request for erasure can be sent to romain@cadarsir.fr, according to the procedures described in this policy.
13. Google Data and Artificial Intelligence
Evolut offers artificial intelligence assistance features for content management and writing. Their existence does not mean that data obtained via Google connections is used by these assistants.Data obtained via Google Workspace APIs, including Google Calendar and Google Meet, including raw, aggregated, anonymised, or derived data, is not used, transferred, or sold to create, train, or improve general-purpose artificial intelligence or machine learning models. This restriction applies to Cadarsir and service providers acting on its behalf, in accordance with Google's Limited Use requirements.
In the Cadarsir booking process, the creation of the Google Meet link is carried out directly between Evolut and Google, after appointment validation. No artificial intelligence service is involved in this call and no data received from Google during this call is sent to an AI service through this process.
When a user uses an AI assistant, exchanges may include their messages, the content they communicate, and the context or tool results necessary for their request. These elements may be transmitted to the AI provider mobilised to process the request. The use of these assistants does not authorise the training of general-purpose models on data obtained via Google Workspace APIs.
14. Social Media Management
As part of its services, Cadarsir uses a self-hosted instance of Postiz to manage social accounts that its clients authorise it to administer, including Facebook Pages and Instagram professional accounts.Depending on the features activated and authorisations granted, processed data may include account identifiers and information, posts and their media, comments and information accessible about their authors, as well as performance statistics. Authorisation tokens are stored server-side to maintain connections. Cadarsir does not request or store social account passwords.
This data is used to prepare, schedule, publish, and manage content, process comments, and measure service results. Modifications or deletions are limited to the possibilities offered by the platforms and the scope entrusted by the client. This connection does not provide general access to personal profiles or private conversations.
15. Responsibilities
When Cadarsir acts on behalf of a client, processing is carried out according to their instructions and within the contractual framework of the service. The client determines the purposes and legal basis of processing concerning their community. Technical authorisation to connect to a social network does not, in itself, constitute the consent of the individuals whose data appears in the content.16. Comment Processing
Moderation and responses to comments are carried out manually by authorised persons, within the framework of the service agreed with the client. Comments and their authors' data are not transmitted to an artificial intelligence provider to prepare, generate, or publish responses.17. Recipients
Data is accessible to persons authorised for the service and to technical service providers necessary for its operation. Data necessary for the activated features is exchanged with the relevant social platforms. It is neither sold nor rented.18. Retention and Deletion
Social data stored in Postiz is used during the service, then deleted within a maximum of 30 days after its end, unless a legal obligation imposes the retention of certain data.Cadarsir performs this deletion manually: cancellation of still-scheduled posts, disconnection of social accounts from Postiz, deletion of connection tokens and relevant data in Postiz, as well as files, exports, and copies held by Cadarsir, including in any backups. Data that must be kept to comply with a legal obligation is limited to what is necessary and is no longer used for social media management.
The holder can withdraw the application's authorisation from the settings of the relevant platform. This withdrawal blocks subsequent access but does not automatically delete data already recorded in Postiz or posts present on social networks.
Requests for deletion can be sent to romain@cadarsir.fr, specifying the account concerned, without transmitting a password. After verifying the request, Cadarsir manually proceeds with the deletion of the relevant data and informs the requester of its processing, as well as any data whose retention remains mandatory. The rights described in this policy remain applicable.
Deletion applies to data held by Cadarsir. It does not delete the client's social accounts or posts already present on the platforms. Their eventual deletion is subject to a separate instruction from the client; data held by the platforms remains subject to their own policies.
19. Policy Updates
This policy may evolve to reflect changes to the site, processing, or regulations.Last updated: 15 October 2026.