Legal notice
This English version is provided for convenience. In the event of any discrepancy, the French version prevails.
1. Website publisher
The website oneye.fr is published by:
- Curious Holding, a French single-shareholder simplified joint-stock company (SASU)
- Share capital: €1
- Registered office: 47 rue Vivienne, 75002 Paris, France
- Company in the process of registration with the Paris Trade and Companies Register (RCS). The SIREN number will be published on this page as soon as it is assigned.
- Contact: contact@oneye.fr
2. Publication director
Gautier Justeau, President of Curious Holding.
3. Hosting
The website is hosted by:
- Netlify, Inc.
- 101 2nd Street, San Francisco, CA 94105, United States
- www.netlify.com — privacy@netlify.com
- Netlify does not publish a contact telephone number.
The serverless functions and databases associated with the service run in European regions (Frankfurt, Ireland, Paris). The website's static files (pages, images, stylesheets) are delivered by a global content delivery network, which means they may be served from servers located outside the European Union.
4. Intellectual property
All content on this website — text, illustrations, diagrams, code, as well as the Oneye brand and logo — is the property of Curious Holding or is licensed to it. Any reproduction, representation, adaptation or exploitation, in whole or in part, without prior written authorisation is prohibited.
5. Personal data
Data controller
Curious Holding, 47 rue Vivienne, 75002 Paris — contact@curiousholding.eu.
No Data Protection Officer (DPO) has been appointed: appointment is not mandatory under Article 37 of the GDPR given the nature and volume of the processing carried out.
Data processed and legal bases
- Contact requests. When you write to us, we process your email address and the content of your message in order to reply. Legal basis: the publisher's legitimate interest in responding to enquiries addressed to it (Article 6(1)(f) GDPR).
- Account and authentication. Using the Oneye service requires creating an account: email address, login credentials and technical session data. Legal basis: performance of the contract or pre-contractual measures (Article 6(1)(b) GDPR).
- Audience measurement. We measure website traffic using GoatCounter, configured without cookies and without a persistent identifier. Legal basis: the publisher's legitimate interest in knowing its website's audience (Article 6(1)(f) GDPR).
- Technical logging. The host records technical logs (IP address, timestamp, resource requested) necessary for the operation and security of the website. Legal basis: the publisher's legitimate interest in ensuring the security and availability of the service (Article 6(1)(f) GDPR).
How the Oneye service works
The Oneye service is designed not to produce personal data from video feeds: frames are analysed on the fly and then destroyed, no face is analysed, no facial recognition is used and no person is identified. The personal data processed by Curious Holding is therefore limited to that described above.
Recipients and processors
- Netlify, Inc. — website hosting and serverless functions — European Union (Frankfurt) and global content delivery network.
- Supabase — database and authentication — Paris (eu-west-3 region).
- Resend — delivery of transactional emails.
- GoatCounter — audience measurement — European Union.
These providers act as processors within the meaning of Article 28 of the GDPR and use the data only to carry out Curious Holding's instructions. No data is sold or transferred to third parties for commercial purposes.
Transfers outside the European Union
Users' personal data is stored in the European Union. Hosting is nonetheless provided by Netlify, Inc., a company incorporated under US law: the resulting transfers (in particular technical logs and service administration data) are governed by the standard contractual clauses adopted by the European Commission (Implementing Decision (EU) 2021/914) and by Netlify's participation in the EU-U.S. Data Privacy Framework.
Retention periods
- Contact requests: three years from the last exchange.
- Account data: for the duration of the contractual relationship, then deletion or archiving within the applicable legal time limits.
- Technical logs: twelve months at most.
- Audience statistics: aggregated data, with no identifier that could recognise you.
Your rights
You have the right to access, rectify, erase, restrict and port your data, as well as the right to object to processing based on legitimate interest. These rights can be exercised by writing to contact@curiousholding.eu; a reply is sent within one month.
If, after contacting us, you believe your rights are not being respected, you may lodge a complaint with the French data protection authority, the Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr, or with the supervisory authority of your country of residence.
6. Cookies
This website uses no advertising cookies, no tracking cookies and no third-party trackers for behavioural measurement. The GoatCounter audience-measurement tool is used without cookies and without a persistent identifier.
Only cookies strictly necessary for the operation of the service may be set, in particular the session cookie linked to authentication. These cookies are exempt from consent under Article 82 of the French Data Protection Act (loi Informatique et Libertés). No consent banner is therefore displayed.
7. Applicable law
Curious Holding is a company incorporated under French law with its registered office in France. This website and the processing described above are governed by French law, in particular Regulation (EU) 2016/679 (GDPR) and French Act No. 78-17 of 6 January 1978 as amended (loi Informatique et Libertés). Any dispute falls within the jurisdiction of the French courts, subject to mandatory consumer-protection provisions.