Privacy policy
This page explains which personal data this website processes, why, how long it is kept and what your rights are under the General Data Protection Regulation (GDPR) and the French Data Protection Act.
Data controller
Joan, founder of EyKa ElektroniK (a personal project; the company is being set up). For any question about your data: [email protected] or the contact form.
What this website doesn't do
- On the public website: no cookies, no advertising trackers, no third-party analytics. Only an anonymous counter, without cookies, counts the pages viewed (see the table).
- Nothing is loaded from a third-party server: fonts, images and components are hosted with the website.
- No selling of data, no profiling, no automated decisions.
- The forms send nothing while you fill them in: only what you confirm with the send button is transmitted.
Two small things stay in your browser and are never sent: closing the survey banner (tab memory, “sessionStorage”, cleared when the tab closes) and, if you click FR or EN, your language choice (“localStorage”, key “eyka_lang”, which you can clear with the site data in your browser).
Data processed
| Processing | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Market research survey (“Share your opinion”) | Answers (car, interests, rough budget, free text); date sent; language of the page | Market research: choosing the products, the cars and the prices | Consent (sent voluntarily, email optional) | 24 months at most after sending, then automatically deleted |
| Waiting list and prototype testing (optional boxes) | Email address and related answers | Sending you news and telling you about the launch; offering you a test, with no commitment | Consent (boxes not pre-ticked), can be withdrawn at any time | Until you unsubscribe, 24 months at most after sending |
| Contact form | Name or nickname (optional), email address, subject, message, date, language of the page | Replying to you | Consent (tick box) | 24 months at most after sending, then automatically deleted; sooner if you ask |
| Limiting repeated submissions (survey and contact) | Encrypted fingerprint of the IP address (HMAC with a random key changed every day), number of submissions that day. The IP address itself is not stored. | Protecting the forms against automated submissions | Publisher's legitimate interest | Deleted the next day |
| Private “Full project” area (by invitation only) | Invited person's email address (entered by the publisher, or by the person themselves when opening an invitation link) and the publisher's note (e.g. their name, or the name they gave), dates of first and last visit, number of pages viewed; one-time sign-in code, sign-in cookie and the access service's sign-in log (email, date, IP address, country, browser) | Restricting access to invited people for a limited time; knowing who viewed what and when; showing the email as a watermark to discourage sharing | Publisher's legitimate interest (protecting confidential work) | Invitation: 12 months at most after it ends (expiry or withdrawal). Sign-in log: period set by Cloudflare's access service |
| Visit counter (public website) | No personal data: for each page displayed, the website adds 1 to a counter per day, page, page language, type of device (phone, tablet, computer), country and referring website (search engine, social network…). No IP address, no identifier, no cookie: it is impossible to recognise a person or follow their path through the site. | Knowing which pages people find useful and where visitors come from, to improve the website | Publisher's legitimate interest | 24 months, then automatically deleted |
| Technical hosting logs | IP address, pages requested, date, browser | Running and securing the website | Publisher's legitimate interest | Period set by the host (see its privacy policy) |
All data will be deleted if the project is abandoned.
Private area cookie
The public website sets no cookies. Only people invited to the private area receive, after entering their sign-in code, a sign-in cookie (“CF_Authorization”) set by the access service. It is strictly necessary for the service you asked for (staying signed in): it is not used for analytics or advertising, so it does not require consent.
Host and processor
The website, the forms, their database, the new-message notice sent to the publisher and the private area's access service are provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, United States, acting as a processor (Cloudflare Pages, D1, Workers, Email Routing and Zero Trust Access). Data may be processed outside the European Union. These transfers are covered by Cloudflare's data processing agreement, which relies on the EU–US Data Privacy Framework and the European Commission's standard contractual clauses.
Your rights
You have the right to access, correct, delete, restrict, object to and port your data, and to withdraw your consent at any time without affecting what was done before. You can also give instructions on what happens to your data after your death.
To use these rights, have your answers or your message deleted, or have your invitation withdrawn: [email protected]. We reply within one month.
If you feel your rights have not been respected, you can complain to the CNIL, the French data protection authority (cnil.fr).
Security
Individual answers and messages can only be seen by the publisher, from admin pages protected by the access service and restricted to his email address. People invited to the private area only see totals.
Updates
Last updated: 6 November 2026.