Welcome to setforge's universe
PRIVACY POLICY
This policy describes how SETFORGE collects, uses and protects the personal data of users of the www.setforge.net website.
SETFORGE undertakes to process personal data in accordance with the General Data Protection Regulation (GDPR), the French Data Protection Act and any applicable regulations.
1. Data Controller
The controller of the data collected on the website is:
SETFORGE
41 Avenue Berthelot
42150 L'Horme - France
Telephone: +33 4 77 31 01 01
Email: contact@setforge.net
Data Protection: dpo@setforge.net
2. Personal Data Collected
Contact form
SETFORGE may collect:
- first and last name;
- company and email address;
- SETFORGE department concerned by the request;
- content of the message and attachments;
- date and history of exchanges.
Fields marked as required are necessary to process the request. Users are asked to provide only the information strictly necessary.
Job applications
When a person submits an application or sends a CV, SETFORGE may collect their identity, contact details, CV, cover letter, qualifications, skills, experience and exchanges that take place during the recruitment process.
Browsing data
Depending on the tools enabled and the user's choices, the following may notably be collected: IP address, device, browser, operating system, pages viewed, date, time and duration of the visit, source of the visit and actions carried out on the website.
3. Purposes and Legal Bases
Management of contact requests
The data is used to receive, forward to the relevant department, process and follow up requests. Depending on the request, the processing is based on SETFORGE's legitimate interest or on the performance of pre-contractual measures requested by the user.
Management of relationships with prospects and professional contacts
Information may be recorded in SugarCRM and Microsoft Dynamics 365 in order to centralize exchanges, qualify and follow up requests and manage professional relationships. The processing is based on SETFORGE's legitimate interest or on pre-contractual measures.
Newsletter and communications
When the user has subscribed or where regulations allow it, SETFORGE may use their email address to send news, invitations or institutional and commercial communications using Brevo.
Where required, consent is obtained through a voluntary action, by means of a dedicated box that is not pre-checked. For professional communications related to the recipient's activity, the processing may be based on legitimate interest. Each communication allows the recipient to unsubscribe or object simply and free of charge.
Submitting a contact form or a job application does not automatically result in subscription to the newsletter.
Management of job applications
The data is used to review applications, contact candidates, organize interviews and manage recruitment. This processing is based on pre-contractual measures taken at the candidate's request and on SETFORGE's legitimate interest.
Audience measurement and website improvement
Subject to consent where required, SETFORGE uses analytics tools to compile statistics, understand the use of the website and improve its content and features. The tools actually used are identified in the Cookie Management Policy and in the cookie settings module.
Security
Technical data may be processed on the basis of SETFORGE's legitimate interest in order to protect the website, detect abnormal behavior and secure forms and attachments.
4. Data Recipients
The data is accessible, within the limits of their responsibilities, to the relevant SETFORGE departments, including sales, marketing and communication, human resources, IT and security teams, as well as persons responsible for compliance.
It may also be transmitted to service providers acting on behalf of SETFORGE: hosting provider, website service providers, publishers of SugarCRM and Microsoft Dynamics 365, Brevo, providers of analytics tools and technical service providers responsible for forms or attachments.
These recipients may use the data only for the tasks entrusted to them. Data may also be disclosed where required by law or to defend SETFORGE's rights.
5. Retention Periods
Unless required by law or by a particular situation, the following reference periods apply:
- contact requests with no commercial follow-up: for the time required to process the request, then for a maximum of three years after the last exchange;
- prospects and professional contacts: three years from the last active contact or the last expression of interest;
- customers and contractual relationships: during the relationship, then for the applicable legal periods;
- newsletter: until unsubscription, withdrawal of consent or, in the absence of interaction, three years after the last active contact;
- successful job application: integration of the necessary information into the employee's file;
- unsuccessful job application: for the duration of the recruitment process, then for a maximum of two years after the last contact, subject to the candidate being informed and to their right to object;
- technical logs and security data: for a limited period corresponding to security and investigation needs;
- cookies and audience measurement: according to the Cookie Management Policy.
At the end of these periods, the data is deleted, anonymized or archived where retention is necessary to comply with a legal obligation or defend SETFORGE's rights.
6. Transfers Outside the European Union
Some service providers may process data or make it accessible from a country outside the European Union or the European Economic Area. SETFORGE then ensures that a mechanism recognized by the GDPR is in place, including an adequacy decision, the European Commission's Standard Contractual Clauses or any other appropriate safeguard.
Further information may be requested at dpo@setforge.net.
7. Security and Confidentiality
SETFORGE implements appropriate technical and organizational measures to protect data against unauthorized access, loss, alteration, disclosure, destruction or unlawful use. Access is limited to authorized persons.
Attachments may be subject to security checks. SETFORGE may refuse or delete any file presenting a risk to its systems. However, no electronic transmission or storage system can guarantee absolute security.
8. Rights of Individuals
Subject to the conditions provided for by the regulations, any person may exercise their rights of access, rectification, erasure, restriction, objection and portability, withdraw their consent at any time and define instructions regarding the handling of their data after their death.
Requests may be sent to dpo@setforge.net or by post to:
SETFORGE - Data Protection
41 Avenue Berthelot
42150 L'Horme
France
The request must allow its author to be sufficiently identified. Proof of identity may be requested only where necessary to confirm their identity.
9. Complaint to the CNIL
If, after contacting SETFORGE, a person considers that their rights are not being respected, they may submit a complaint to the Commission nationale de l'informatique et des libertés:
CNIL
3 Place de Fontenoy
TSA 80715
75334 Paris Cedex 07
France
www.cnil.fr
10. Cookies
The website may use strictly necessary cookies as well as audience measurement cookies or cookies from third-party services. Cookies that are not strictly necessary are placed only after consent has been obtained where required.
Users can accept, refuse or configure cookies using the banner provided for this purpose and change their choices at any time. For more information, they can consult the Cookie Management Policy.
11. Third-Party Links and Services
The website may contain links or integrate services offered by third parties, which may collect data according to their own privacy policies. SETFORGE invites users to consult these policies before using the services concerned.
12. Updates to the Policy
SETFORGE may modify this policy to take into account changes to the website, the processing carried out or the regulations.
Last updated: September 2026