Last updated: October 17, 2026
The controller of the data collected on pikali.fr is PIKALI, SARL, 37 Rue Principale, 67310 Dahlenheim, reachable at contact@pikali.fr.
We collect only the data that is necessary:
The data is used to respond to contact requests, manage accounts and orders, issue invoices, provide support, and comply with our legal and accounting obligations.
The processing relies on the performance of the contract (orders, account), consent (contact form) and compliance with legal obligations (invoicing, accounting).
Showcasing our work as a commercial reference (article 11 of our Terms of Sale) relies on our legitimate interest in making our work known. Where such a showcase mentions the name of an individual, that person may object at any time, without justification, at contact@pikali.fr; the reference is then removed within 30 days.
Account data is retained for the duration of the business relationship; accounting documents (invoices) are retained for 10 years in accordance with the law. Contact messages are retained for the time necessary to process them.
Data is never sold. It may be passed on to our strictly necessary technical subcontractors, within the scope of their assignments: Hetzner (hosting, European Union), LWS (delivery of our emails, France) and SumUp (payment for store orders, acting as an independent controller). If you accept audience measurement, Google (Google Analytics) receives the visit statistics described in article 8b.
When you request a free website diagnosis, your business contact details and the information in your request are processed by an AI model (Anthropic, United States) that helps us prepare the analysis. This transfer outside the European Union is covered by European Commission standard contractual clauses. You may request an analysis without the use of this tool by writing to contact@pikali.fr.
Are you a client of our services? When we host or maintain your website, we process data on your behalf (that of your visitors and customers): in that case our GDPR data processing agreement applies, not this policy.
In accordance with the GDPR and the French Data Protection Act, you have a right of access, rectification, erasure, restriction and objection regarding your data. To exercise these rights: contact@pikali.fr. You may also lodge a complaint with the French data protection authority (CNIL).
Without your consent, the pikali.fr website only places cookies strictly necessary for its operation: the login session for the customer area and the pk_consent cookie, which remembers your cookie choice for no more than 6 months. With your consent, it also places the Google Analytics audience measurement cookies (_ga, _ga_ZH2BD57P9R), described in article 8b. No advertising cookies are placed.
On your first visit, a banner lets you accept, refuse or customise this choice; refusing is as easy as accepting and does not deprive you of any feature of the site. You can change your mind at any time: cookie settings (a link also found at the bottom of every page). If you withdraw your consent, the Google Analytics cookies are deleted.
To know how many people view each page and how many submit a form, pikali.fr records, for each page view, the date, the page address, the site you came from where applicable, and a non-reversible technical fingerprint calculated from your IP address and your browser using a key that changes every day. This fingerprint can neither identify you nor recognize you from one day to the next; the IP address itself is not stored. No cookie is placed for this measurement, no data is passed on to a third-party provider, and the processing is hosted on our own servers within the European Union. In accordance with the CNIL (French data protection authority) guidelines on audience measurement tools exempt from consent, this measurement does not require your prior consent.
Purpose: measuring the site's audience and improving it — pages viewed, where visits come from (search engines, artificial intelligence assistants, social networks, links), device and browser used, approximate city, requests sent from our forms and purchases made in the store (order number and amount). This data is never used for advertising: Google's advertising features are disabled.
Legal basis: your consent. Until you have accepted audience measurement, no Google script is loaded and no data is sent to Google.
Retention period: Google Analytics cookies expire no later than 13 months after being placed; the related statistics are kept for 14 months in Google Analytics, then deleted.
Recipient and transfer: Google Ireland Limited, which may transfer this data to Google LLC in the United States. This transfer is governed by the EU–US Data Privacy Framework (European Commission adequacy decision of 10 July 2023), to which Google LLC has adhered, supplemented by the European Commission's standard contractual clauses.