1. Who we are
Hetivo builds vertical software platforms for mobility, automotive, fleet, travel and finance operations. This website — hetivo.com — is our marketing site.
For the purposes of the GDPR, the data controller for personal data collected through this website is:
- HETIVO, a société par actions simplifiée (SAS) incorporated in France
- Share capital: €1,000
- Registered office: 14 Passage Dubail, 75010 Paris, France
- Registered with the Paris Trade and Companies Register under RCS Paris 104 582 721
- Email: sales@hetivo.com
Because we are established in France, our lead supervisory authority is the French data protection authority, the Commission Nationale de l'Informatique et des Libertés (CNIL).
We have not appointed a Data Protection Officer, as we are not required to do so under Article 37 of the GDPR. Data protection enquiries are handled by the contact above.
2. What this policy covers
This policy covers personal data we process through this website only. It does not cover:
- Our products (Hetigo, Mecanix, Hetidrive, Hettos and Hetipetty), which are governed by the separate agreement and privacy terms in place with each customer. Where we process data inside those platforms on a customer's instructions, we act as a processor and the customer is the controller.
- Third-party websites we may link to. We are not responsible for their privacy practices.
3. What we collect
We keep this deliberately minimal. There is no account system, no newsletter sign-up and no advertising on this site.
3.1 Information you give us
If you complete the contact form, we collect:
- Name (required)
- Email address (required)
- Company name (optional)
- The message you write (required) — please avoid including sensitive personal details in it
If you email us directly at sales@hetivo.com, we receive whatever you choose to put in that message.
3.2 Information collected automatically
Our hosting provider records standard server log data whenever a page is requested. This is a normal part of how any website is delivered and defended:
- IP address
- Browser type and version (user agent)
- The page or file requested, and the date and time
- Referring page, where your browser sends one
What we do not do
We do not use cookies, analytics, advertising pixels or any other tracking technology on this site. We do not build visitor profiles, we do not track you across other websites, and we do not sell or rent personal data to anyone — ever. We also do not make any decisions about you by automated means, and we do not carry out profiling.
4. Why we use it, and our legal basis
The GDPR requires us to have a lawful basis for each use of your personal data. Ours are set out below.
| What we do | Data used | Legal basis (GDPR Art. 6) |
|---|---|---|
| Reply to your enquiry and discuss whether our products fit your operation | Name, email, company, message | Art. 6(1)(b) — steps taken at your request before entering into a contract. Where no contract is in prospect, Art. 6(1)(f) — our legitimate interest in responding to people who contact us. |
| Keep a record of business correspondence | Contact details and message history | Art. 6(1)(f) — our legitimate interest in managing our business relationships and having a record of what was agreed. |
| Deliver the website, keep it available, and protect it against abuse, spam and attack | Server log data (incl. IP address); anti-spam checks on the contact form | Art. 6(1)(f) — our legitimate interest in the security and integrity of our systems. |
| Comply with legal or regulatory obligations, or establish and defend legal claims | Whichever data is relevant | Art. 6(1)(c) — legal obligation; and Art. 6(1)(f) — legitimate interest in defending claims. |
Where we rely on legitimate interests, we have weighed those interests against your rights and freedoms. You can object to that processing at any time — see Your rights.
Providing your details through the contact form is entirely voluntary. It is not a statutory or contractual requirement. If you would rather not provide them, simply don't use the form — but we won't be able to reply.
5. Cookies and tracking
This website sets no cookies at all and uses no tracking technologies. Because we place nothing on your device beyond what is strictly necessary to display the page, no consent banner is required. Our Cookie Policy explains this in full.
All fonts and images are served from our own domain, so loading a page on hetivo.com does not send your IP address to any third-party content network.
6. Who we share it with
We do not sell, rent or trade personal data. We share it only with service providers who process it on our behalf, under contract and on our instructions:
| Provider | What they do | What they process |
|---|---|---|
| Netlify (Netlify, Inc., USA) | Hosts this website and receives contact-form submissions | Server log data including IP address; the contents of the contact form |
| Our email provider | Delivers and stores the enquiries you send us | Your name, email address and message |
Each of these acts as a processor under Article 28 of the GDPR and is bound to process data only as we instruct, to keep it secure, and not to use it for their own purposes.
We may also disclose personal data where we are legally required to — for example in response to a valid court order or a lawful request from a public authority — or to establish, exercise or defend legal claims.
7. International transfers
Our hosting provider is based in the United States, so personal data covered by this policy may be transferred to and stored outside the European Economic Area.
Where personal data leaves the EEA, we rely on the safeguards permitted by Chapter V of the GDPR — principally the European Commission's Standard Contractual Clauses incorporated into our agreement with the provider, together with the technical measures described in section 9. You are entitled to ask us for a copy of the safeguards that apply; use the contact details in section 14.
8. How long we keep it
| Data | Retention period |
|---|---|
| Contact-form submissions and email correspondence that do not lead to a business relationship | 24 months from your last contact with us, then deleted |
| Correspondence with customers and active prospects | For the duration of the relationship, and then for as long as needed to meet legal, accounting or contractual obligations |
| Server log data | Retained by our hosting provider for a short period for security and diagnostics, then deleted or aggregated into anonymous statistics |
When a retention period ends, we delete the data or irreversibly anonymise it so it can no longer be linked to you.
9. How we protect it
We apply technical and organisational measures appropriate to the risk, as required by Article 32 of the GDPR:
- The entire site is served over HTTPS, with HTTP Strict Transport Security enabled, so traffic between your browser and our site is encrypted.
- Access to enquiry data is limited to the members of our team who need it in order to respond.
- We minimise what we collect in the first place — the smallest amount of data is the easiest to protect.
- Our hosting and email providers maintain their own recognised security programmes.
No method of transmission or storage is completely secure. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours as required by Article 33, and will inform you directly where Article 34 requires it.
10. Your rights
If you are in the EEA or the UK, the GDPR gives you the following rights over your personal data. They are free to exercise.
- Access (Art. 15) — ask whether we hold data about you, and receive a copy of it.
- Rectification (Art. 16) — have inaccurate data corrected and incomplete data completed.
- Erasure (Art. 17) — ask us to delete your data, where one of the grounds in Article 17 applies.
- Restriction (Art. 18) — ask us to pause processing while a dispute about accuracy or legitimate interests is resolved.
- Portability (Art. 20) — receive the data you gave us in a structured, commonly used, machine-readable format, or have it sent to another controller.
- Objection (Art. 21) — object at any time to processing based on our legitimate interests. We will stop unless we can show compelling legitimate grounds that override your interests, or we need the data for legal claims.
- Withdraw consent (Art. 7(3)) — where we rely on consent, withdraw it at any time. This does not affect processing carried out before you withdrew it.
- Automated decisions (Art. 22) — not be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not carry out such processing.
To exercise any of these, email sales@hetivo.com. We will respond within one month as required by Article 12(3). If your request is complex we may extend that by up to two further months, and we will tell you within the first month if we do. We may need to verify your identity before we act, so that we do not disclose your data to someone else.
11. Complaints
If you think we have handled your personal data incorrectly, please contact us first — we would like the chance to put it right.
You also have the right under Article 77 of the GDPR to lodge a complaint with a supervisory authority. As we are established in France, our lead authority is:
- Commission Nationale de l'Informatique et des Libertés (CNIL)
- 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
- www.cnil.fr
You may equally complain to the supervisory authority of the EU or EEA member state where you live, where you work, or where the alleged infringement took place. If you are in the United Kingdom, the relevant authority is the Information Commissioner's Office (ICO). Contacting us first does not affect any of these rights.
12. Children
This is a business-to-business website and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.
13. Changes to this policy
We may update this policy to reflect changes in what we do or in the law. The "last updated" date at the top always shows the current version. If we make a material change, we will make that clear on this page. We encourage you to check back from time to time.
14. How to contact us
For any question about this policy, or to exercise any of your rights:
- Email: sales@hetivo.com
- Post: HETIVO SAS, 14 Passage Dubail, 75010 Paris, France
See also our Cookie Policy.