Privacy Policy,
How Paithena collects, uses and protects your personal data.
Last updated: 5 October 2026
1. Data Controller
This website is operated by Paithena [legal form], registered with the Trade and Companies Register (RCS) of [city] under number [SIREN], with its registered office at 10 chemin de St Martin, 01700 St Maurice de Beynost. Paithena is the data controller for the personal data collected through this website, under the conditions described below.
2. Our Two Roles Under the GDPR
Depending on the context, Paithena acts in two different capacities:
Data Controller
For data collected through this website (contact form, cookies) and for managing our own business relationship with our clients.
Data Processor
For payroll and social security data that we process on behalf of our clients (companies, accounting firms). These clients remain the data controllers with respect to their employees, in accordance with a Data Processing Agreement (DPA) entered into with each client.
This policy only applies to our role as the data controller for this website. The processing of your employees’ payroll data is governed separately by the service agreement entered into between Paithena and your company or accounting firm.
3. Data Collected
As part of your use of this website, we may collect:
- Data that you provide through the contact form (first name, last name, email address, telephone number, message, and declared profile);
- Browsing data (cookies, see the dedicated section);
- Data exchanged during a call or appointment booked through our online booking tool.
4. Purposes of the Processing
| Data | Purpose |
|---|---|
| Contact form | Respond to your request and contact you again |
| Browsing data | Audience measurement and website improvement |
5. Legal Basis
The processing described above is based, as applicable, on:
- The performance of pre-contractual measures taken at your request (contact form, appointment booking);
- Your consent (non-essential cookies);
- Paithena’s legitimate interest in ensuring the proper functioning and security of its website.
6. Data Recipients
The data collected is intended for authorised Paithena team members. It may be shared with our technical service providers (hosting provider, appointment booking tool, email marketing platform), to the extent necessary for them to perform their services and in compliance with the GDPR. This data is never sold to third parties.
7. Data Retention Period
- Contact form data: 3 years from the date of the last contact if no business relationship is established;
- 13 mois maximum pour les cookies. Browsing data: a maximum of 13 months for cookies.
8. Data Security
Paithena implements appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure, including secure hosting in France/EU, restricted access limited to authorised personnel, and encryption of sensitive communications.
9. Your Rights
In accordance with the GDPR, you have the following rights regarding your personal data:
- Right of access and rectification;
- Right to erasure (“right to be forgotten”);
- Right to restriction of processing;
- Right to data portability;
- Right to object, in particular to direct marketing;
- Right to withdraw your consent at any time, where the processing is based on consent.
To exercise these rights, please contact us at the address provided in Section 11.
10. Cookies
This website uses cookies that are strictly necessary for its operation, as well as audience measurement cookies, subject to your consent. You can change your preferences at any time through the cookie management banner or your browser settings.
11. Contact & Complaints
For any questions regarding this policy or to exercise your rights, you can contact us at: contact@paithena.fr .
If you believe that your rights have not been respected, you may lodge a complaint with the CNIL (French Data Protection Authority): www.cnil.fr .
12. Changes to this Privacy Policy
Paithena reserves the right to modify this Privacy Policy at any time, in particular to comply with any regulatory, legal or technical developments. The date of the latest update is indicated at the top of this page.