Skip to content

Your data

Privacy

What rebondx.com collects about you, why, for how long, and how to exercise your rights, under the General Data Protection Regulation (GDPR) and the French Data Protection Act.

Last updated:

Data controller

ICRC, [[ADRESSE_SIEGE]], is the controller of the processing described on this page. For any question about your data, or to exercise your rights: contact@rebondx.com.

In brief

  • No account, no audience measurement, no advertising: the site does not track your browsing.
  • It collects your data only when you entrust it with them: a request sent through a form, or a subscription to The Letter.
  • It sets no audience-measurement or advertising cookie, and so shows no consent banner.

Your requests

The “Request a proposal”, “Submit my application” and “Join the network” buttons open a form. When you send it, RebondX receives:

  • your answers, depending on the form: name, email, role, company, number of senior executives, situation, profile, telephone, the address of your LinkedIn profile and message;
  • the page you send it from, and its language;
  • the campaign parameters (“utm”) of the link that brought you to the site, if it had any: your browser keeps them until the tab is closed (sessionStorage), without a cookie, to attach them to your request.

This information is used to answer your request and to present RebondX's services to you. Legal basis: steps taken at your request before a contract, or ICRC's legitimate interest in following up the requests it receives. It is stored in RebondX's CRM (Odoo, run by ICRC) and kept for three years after your last contact with us, then deleted.

To limit abuse, the site's server keeps in memory the IP address a request comes from (for an IPv6 address, its /64 network) for the hour following your last request, so as to accept five an hour at most. It writes it neither to disk nor to its logs, which never hold your answers.

If sending fails, the form offers to write to contact@rebondx.com instead: your email program opens with a prefilled message, which is only sent if you send it yourself.

The Letter

To receive The Letter, you give your email address and tick the consent box, then confirm your subscription through the link in the email you receive. Legal basis: your consent, which you can withdraw at any time through the unsubscribe link in every issue.

RebondX's CMS (Odoo, run by ICRC) keeps your email address, your language, the date of your consent and the site where you gave it, along with the opens and clicks of each issue, for as long as you remain subscribed.

An unconfirmed subscription is deleted within 25 hours. The IP address of the request is kept only as a fingerprint (a keyed hash), never in clear, to limit abuse.

After you unsubscribe, we keep your address and the date you unsubscribed, so as not to write to you again and to be able to prove your choice. You can ask for them to be erased at contact@rebondx.com.

Anti-bot check

The forms and The Letter are protected by Cloudflare Turnstile, which tells people from bots by examining your browser, usually without asking you anything. Its module loads from Cloudflare's servers as soon as a protected form appears: The Letter's, at the bottom of most pages, and a request's, when you open it.

Cloudflare then receives your IP address and technical information about your browser; on sending, the site or the CMS also passes your IP address to it with the verification token. Cloudflare uses them to detect bots, as its privacy policy for Turnstile explains. Legal basis: ICRC's legitimate interest in protecting its forms from automated submissions.

The servers your browser contacts

The site's pages, fonts and photographs come from the site itself. Your browser also contacts the server of RebondX's CMS, which provides The Letter's settings and the images of the Perspectives articles, and Cloudflare's, for the anti-bot check. Like any web server, they receive your IP address and technical information about your browser.

Cookies and storage

The site sets no audience-measurement or advertising cookie. It only uses:

  • NEXT_LOCALE, a cookie that remembers the language of the pages you read when it differs from your browser's, so that the address rebondx.com takes you back to it; it is deleted when you close your browser;
  • rebondx:utm, in the tab's storage (sessionStorage), which keeps the campaign parameters of the link you arrived by until the tab is closed;
  • the technical data that Cloudflare Turnstile's module may store on its own domain, needed for the check.

None of them measures the site's audience or follows you from one site to another.

Recipients

Your data is intended for ICRC's RebondX team; it is neither sold nor passed on. Also involved:

  • RebondX's CMS and CRM (Odoo), run by ICRC;
  • Cloudflare, for the anti-bot check;
  • [[PRESTATAIRE_EMAIL]], which sends The Letter and its confirmation emails;
  • [[HEBERGEUR_NOM]], the site's host.

Transfers outside the European Union

[[TRANSFERTS_HORS_UE]]

Any transfer of your data outside the European Union is covered by the safeguards the GDPR provides for, such as an adequacy decision or standard contractual clauses. You can obtain a copy of them at contact@rebondx.com.

Your rights

You have the right to access, rectify, erase, restrict and port your data, the right to object to its processing and the right to withdraw your consent at any time, without affecting what was done before. You can also set instructions on what happens to your data after your death. To exercise these rights, write to contact@rebondx.com.

If, after contacting us, you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority, or with the data protection authority of your country in the European Union.