Back to home

Legal

Privacy Policy

Last updated: August 10, 2026

This website places zero cookies, uses no audience measurement tools, and makes no requests to third-party services. The only data processed is what web servers log technically, and information sent voluntarily via email.

01

Data Controller

The data controller is the site publisher, identified in the legal notice. Questions regarding this policy or data can be addressed to contact@altairworks.org.

Given the limited nature and volume of processing operations, appointment of a Data Protection Officer (DPO) is not required under Article 37 GDPR.

02

Scope of this Policy

This policy applies strictly to the website altairworks.org.

Ecosystem applications—Converthor, JsonUtils, CalcHero, and TextUtils—are hosted on separate domains, run on distinct infrastructures, and do not fall under this policy. Some deploy analytics (Google Analytics 4) under consent not present here. Please refer to each individual application for its specific privacy practices.

03

Data Processed on this Site

Two forms of data processing occur, described below:

a. Server Connection Logs

Like web servers generally, incoming HTTP requests are logged automatically: IP address, timestamp, requested URI, response status code, user agent string, and referrer if provided. These logs are used solely to ensure server security, service reliability, and incident diagnosis. They are not used for profiling or tracking, and are not correlated with other data sources.

b. Emails Sent to Contact

When writing to the contact address, email addresses and message contents are processed solely to respond. No web contact form exists on this site.

04

Legal Bases

Server connection logs are processed based on legitimate interest (Article 6.1.f GDPR) to guarantee the security, availability, and technical integrity of the service.

Email correspondence is processed based on legitimate interest to respond to requests received (Article 6.1.f GDPR).

05

Cookies & Trackers on Hub

This hub website stores zero cookies—whether technical, analytics, or advertising—and uses no equivalent client-side storage or fingerprinting technologies. Consequently, no consent banner is required or displayed.

All typography and icons are self-hosted locally from this server, preventing IP addresses from leaking to external font providers during page rendering.

06

Recipients and Processors

No data is sold, rented, or transferred to third parties for commercial purposes.

Data described in Article 03 is accessible to the publisher and OVH SAS, our server hosting provider acting as a data processor under Article 28 GDPR. The email infrastructure provider operates under the same framework.

Data may additionally be communicated to administrative or judicial authorities upon lawful request pursuant to applicable legislation.

07

Transfers Outside the European Union

Servers hosting this website are located within the European Union. Data processing described herein involves no transfers outside the European Economic Area.

08

Data Retention Periods

  • Server connection logs: 12 months, followed by automated deletion.
  • Emails and associated metadata: duration required to process inquiries, up to a maximum of 3 years from the last exchange.

Beyond these thresholds, data is permanently erased or anonymized, unless statutory retention obligations apply.

09

GDPR Rights

Under Regulation (EU) 2016/679 and applicable data protection legislation, the following rights apply regarding personal data:

  • Right of access (Art. 15) — obtain confirmation of processing and a copy of data held.
  • Right to rectification (Art. 16) — request correction of inaccurate or incomplete data.
  • Right to erasure (Art. 17) — request deletion of personal data.
  • Right to restriction of processing (Art. 18) — request temporary freezing of processing operations.
  • Right to data portability (Art. 20) — receive data in a structured, machine-readable format.
  • Right to object (Art. 21) — object on grounds relating to particular situations to processing based on legitimate interests.
  • Post-mortem instructions (Art. 85 French DPA) — define directives regarding retention or erasure of data after death.

These rights may be exercised by contacting contact@altairworks.org. Responses are provided within one month of receiving requests (extendable by two months for complex inquiries, with prior notice).

10

Automated Decision-Making

None of the processing activities described above involve automated decision-making or profiling under Article 22 GDPR.

11

Complaints / Supervisory Authority

If data protection rights are considered unfulfilled, a complaint may be lodged with the French data protection authority (CNIL):

  • CNIL — Commission Nationale de l’Informatique et des Libertés
  • 3 place de Fontenoy — TSA 80715 — 75334 Paris Cedex 07 — France
  • Phone: +33 1 53 73 22 22
  • www.cnil.fr
12

Policy Updates

This privacy policy may be updated to reflect site evolutions, infrastructure changes, or legal requirements—notably upon establishment of the legal entity planned for 2027. The last updated date appears at the top of this page.