Privacy policy
What happens to the information you share with us, and your rights.
Last updated: 13 October 2026
This English translation is provided for information only. The French version is the only legally binding one.
In short
The website itself sets no cookies and does not measure its audience. The mini check-ups are calculated in your browser: nothing is sent. The information you send us through the form is used to answer your request and, if you wish, to prepare our support. You can ask at any time to access, correct or delete it.
Data controller
- Controller
- TOLTEKA, SARL
- Postal address
- 7 avenue Michel Chevalier, 06130 Grasse, France
- Phone
- 06 42 92 19 87
Data collected
Through the form: full name, email address, phone (optional), plan, professional situation and message. Your name, email address and message are needed to reply to you. The rest is optional. If you come from a mini check-up, its summary is added to your message: you can see it and edit it before sending.
Through the mini check-ups: nothing. Calculations are done in your browser and the figures you enter never leave your device. The summary is kept while the tab is open, only if you click “Talk to an adviser”.
To limit automated submissions: when you send the form, the server keeps a fingerprint of your IP address, hashed and made unreadable, for one hour at most.
During any visit: like any server, the hosting provider’s server records technical logs (IP address, date and time, page requested, browser type), used for security and for the website to run properly.
Purposes and legal bases
- Answering your request and preparing any support with you: pre-contractual measures taken at your request (article 6.1.b of the GDPR).
- Contacting you again about your financial situation for 12 months: your consent, given with the second box of the form (Article 6(1)(a) GDPR). You can withdraw it at any time by simple request.
- Protecting the website against automated submissions and abuse (IP address fingerprint, technical logs): legitimate interest (article 6.1.f).
- Keeping client records for the periods required by law: legal obligation (article 6.1.c).
The first box of the form confirms that you have read this policy; the second records your agreement to be contacted again. Your information is never sold.
Recipients
The TOLTEKA advisers handling your request. If your project goes ahead, the partners involved in the chosen solution: APRIL Assurances, CERES FINANCES, THESEIS and, through it, partner insurance companies, asset managers and banks (the list is given in the legal notice).
Service providers
| Provider | Role | Location and safeguards | When |
|---|---|---|---|
| o2switch | Hosting of the website and the sending script | France | At all times |
| Google Workspace (Google) | The firm’s email: receiving messages sent to contact@tolteka.fr, mailbox managed by Fabienne Albin Rogge, managing director | Google Ireland Limited; possible transfers to the United States, governed by the EU-US Data Privacy Framework, to which Google LLC adheres | With each message sent |
| Google Calendar (Google) | Online booking | Google Ireland Limited; possible transfers to the United States, governed by the EU-US Data Privacy Framework, to which Google LLC adheres | Only if you click “Show available time slots” |
| Web3Forms | Backup sending relay, only if the website’s server is down | Not activated at present. Location and safeguards to be specified before any activation. | Never, as long as it is not activated |
Retention periods
- Agreement to be contacted again: 12 months from your request, unless withdrawn earlier.
- Enquiries with no follow-up: three years after the last contact, then deleted.
- Client: for the duration of the relationship, then until the end of the complaint period: up to 5 years after the end of the contract for insurance products, up to 10 years for real estate and banking products.
- IP address fingerprint: one hour at most.
- Hosting provider’s technical logs: period to be confirmed with the hosting provider.
Your rights
You can ask to access, correct, delete, restrict or port your data, and object to its processing when it is based on legitimate interest. Write to us at the email or postal address above: we will reply within one month.
Complaints
You can lodge a complaint with the CNIL (French data protection authority): 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, cnil.fr.
A question about your data? Write to us at contact at tolteka.fr.