Controller
Jérôme Natio, a French sole trader using Natio Connect, is the controller. Contact: contact@natio.re — 17 rue des Caramboles, Appartement 17 — 97490 Sainte-Clotilde, La Réunion, France.
Purposes and legal bases
| Purpose | Main data | Legal basis |
|---|---|---|
| Activation request | Professional identity, contact details, domain, plan | Pre-contract steps |
| Contact request | Identity, email, subject, optional domain, message | Pre-contract steps or legitimate interest in replying |
| Order and service | Account, configuration, support messages | Contract |
| Billing and accounts | Legal identity, invoices, payment references | Legal obligation |
| Security | Technical logs, IP address, security events | Legitimate interest |
The public forms do not automatically enrol the requester in marketing. Required fields are needed to assess, answer or perform the service; phone and the contact form domain are optional.
Recipients and retention
Authorised Natio Connect personnel and necessary hosting, email, domain and payment providers receive data on a need-to-know basis. Unsuccessful requests are normally retained for up to three years after the last useful exchange; account and support evidence for up to five years after the contract; invoices for ten years; security logs for up to twelve months unless an incident requires longer retention.
International transfers
Primary hosting and email are in the EEA. Global providers such as Stripe may process some data outside the EEA under an adequacy decision, standard contractual clauses or another recognised safeguard.
Your rights
Depending on the processing, you may request access, correction, erasure, restriction, portability or object to a legitimate-interest processing. Email contact@natio.re and state the right you wish to exercise. You may complain to the French data protection authority, CNIL, at cnil.fr.
Email and mini-site data
The customer is controller for personal data it processes through its mailboxes and mini-site contact form. Natio Connect acts as processor for that content under the Data Processing Agreement.