Data Processing

Updated 2 October 2026

CASE 1 – Data from the sowhen.fr website

The information you provide on our website is stored in a digital file by SARL SoWhen? so that we can respond to your requests. The legal basis for processing this data is that it is necessary in order to respond to the request made by the person who submitted it (requests related to recruitment or service provision).

The data collected will be communicated only to the following recipients: SoWhen?’s internal teams.

The data is kept for the entire exchange period necessary for the client file (commercial and operational exchanges).

You have the right to access, correct, delete, or limit the use of your data.

Visit cnil.fr for more information about your rights.

To exercise these rights or for any questions about the processing of your data, you can

contact (where applicable) our data protection officer or the service responsible for exercising these rights: dataprivacy@sowhen.fr .

CASE 2 – Data related to projects carried out by SoWhen? for its clients

The information collected during exchanges between SoWhen? and its client is stored in a

digital file by SoWhen? so that we can respond to your requests. The legal basis for processing this data is that it is necessary for the proper fulfillment of a contract or the

preparation of a contract with the person involved (service provision). The data collected is stored locally on our servers in France and on the secure French cloud Leviia. This data is neither shared nor sold to third parties. This data is encrypted and archived at the end of the project.

The data collected will be communicated only to the following recipients: SoWhen?’s

teams.

The data is kept for the entire exchange period necessary for the client file (commercial and operational exchanges).

You have the right to access, correct, delete, or limit the use of your data.

Visit cnil.fr for more information about your rights.

To exercise these rights or for any questions about the processing of your data, you can contact: dataprivacy@sowhen.fr .

CASE 3 – Data related to projects carried out by SoWhen? for its clients with devices on physical sites (events, showrooms, headquarters…).

The information collected (contact emails) on the devices created by SoWhen? for its

clients is stored in a digital file by SoWhen? so that we can respond to your requests. The legal basis for processing this data is that it is necessary for the proper performance of the relevant experience. The collected data is only used during the device’s operation in order to be able to deliver digital gifts (photos or videos).

The data collected will be communicated only to the following recipients: SoWhen?’s teams.

The data is kept for the entire exchange period necessary for the client file. The data is permanently deleted at the end of the operation.

You have the right to access, correct, delete, or limit the use of your data.

Visit cnil.fr for more information about your rights.

To exercise these rights or for any questions about the processing of your data, you can contact: dataprivacy@sowhen.fr .

CASE 4 – Cookies, audience measurement and form protection

On your first visit, a banner asks for your choice; “Accept” and “Reject” carry the same weight. You can change your mind at any time with the “Cookie settings” link at the bottom of every page. Your choice is kept in the cc_cookie cookie for 6 months.

Audience measurement, only if you accept. The legal basis is your consent; if you reject, neither tool is loaded.

– Google Analytics (Google Ireland Limited) counts visits and pages viewed. It sets cookies (_ga, _ga_*) kept for up to 13 months; its advertising features are turned off. This data may be transferred to the United States, under the EU–US Data Privacy Framework.

– Umami, a statistics tool hosted on a TAKOLOR server (analytics.takolor.net), counts visits and pages viewed without cookies and without passing this data to any third party.

Form protection. On pages with a form, the hCaptcha service (Intuition Machines, Inc.), provided by our form delivery service Web3Forms, checks that a person, not a robot, is sending it. It may process technical data (IP address, information about your browser) and set the cookies this check needs. The legal basis is our legitimate interest in protecting our forms from spam; without this check, the form cannot be sent. Messages sent through the forms pass through Web3Forms before reaching us by email.

For any question about this processing, you can contact: dataprivacy@sowhen.fr .