Privacy Policy

1. Introduction and Data Controller

Welcome to HoldSoft. We respect your privacy and are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and French Law (Loi Informatique et Libertés). This privacy policy explains how we collect, use, protect, and share information when you use our website.

2. Purpose and Legal Basis

This website is informational only. HoldSoft is a technology investment holding company. We present our investment philosophy and portfolio companies. We are not offering investment opportunities or services to the general public. We process personal data based on:

• Your consent when you submit the contact form (GDPR Art. 6.1.a)
• Our legitimate interest in responding to partnership inquiries (GDPR Art. 6.1.f)

3. Data We Collect

We collect minimal personal data:

We do not use tracking cookies or collect any data beyond what is stated above.

4. How We Use Your Data

Personal data submitted via the contact form is used exclusively to:

• Respond to your partnership or collaboration inquiry
• Evaluate potential strategic partnerships
• Maintain a record of communications for business purposes

We do not use your data for marketing, profiling, or automated decision-making.

5. Data Recipients and Transfers

Your data may be accessed by:

• HoldSoft team members (for the purpose of responding to inquiries)
• Technical service providers:
• - Vercel Inc. (hosting, servers located in AWS Paris, France)
• - Vkode (contact form processing via KHub CMS, French company, data stored in France)
• - Plausible Analytics (privacy-friendly analytics, EU-based, GDPR-compliant, no personal data collected)

Your data is stored and processed exclusively within the European Union (France). We do not transfer personal data outside the EU.

6. Data Retention

• Contact form submissions: 3 years from last contact (standard French commercial prospect retention period)
• Server logs: Anonymized after 7 days, deleted after 90 days
• Analytics data: Aggregated only, retained for 12 months

After these periods, data is permanently deleted unless legal obligations require longer retention.

7. Cookies and Tracking

We do not use advertising or tracking cookies.

Technical cookies used:

• Next.js session cookies (essential for website functionality, no personal data)
• Language preference (to remember your language choice)

Plausible Analytics does not use cookies and is fully GDPR-compliant without requiring consent.

8. Your Rights (GDPR)

Under the GDPR and French law, you have the following rights:

• Right of access (Art. 15): Request a copy of your personal data
• Right to rectification (Art. 16): Correct inaccurate data
• Right to erasure (Art. 17): Request deletion of your data ('right to be forgotten')
• Right to restriction (Art. 18): Limit how we use your data
• Right to data portability (Art. 20): Receive your data in a structured format
• Right to object (Art. 21): Object to processing based on legitimate interest
• Right to withdraw consent (Art. 7.3): Withdraw consent at any time

To exercise these rights, contact us at: hello@holdsoft.eu

We will respond within 1 month (extendable to 3 months for complex requests).

9. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the French Data Protection Authority:

10. Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or alteration:

• HTTPS encryption for all data transmission
• Secure hosting infrastructure (Vercel on AWS Paris)
• Access controls and authentication
• Regular security updates and monitoring

While we take security seriously, no internet transmission is 100% secure. You transmit data at your own risk.

11. Children's Privacy

This website is intended for business professionals and adults (18+). We do not knowingly collect data from children under 18. If you believe a child has provided us with personal data, please contact us immediately.

12. Changes to This Policy

We may update this privacy policy to reflect changes in our practices or legal requirements. Significant changes will be communicated via a notice on our website. The 'Last updated' date at the top indicates when this policy was last revised.

13. Contact Us

For any questions, concerns, or requests regarding this privacy policy or your personal data, please contact us: