Introduction
Hoctave places particular importance on protecting personal data and undertakes to process it in accordance with Regulation (EU) 2016/679 of April 27, 2016 (GDPR) and applicable French data protection law.
This policy describes the processing of personal data carried out when using the website https://hoctave.com (the Website).
It does not apply to processing carried out through the CRA Manager platform. Where Hoctave processes data on behalf of its customers through that platform, it acts as a processor under the GDPR. Such processing is governed by the contractual commitments agreed with each customer.
1. Who is the data controller?
Personal data collected through the Website is processed by:
Hoctave
Simplified joint-stock company with share capital of EUR 2,000
RCS Nanterre: 107 428 047
15 rue Jules Ferry
92100 Boulogne-Billancourt, France
Email: contact@hoctave.com
For questions about personal data protection or to exercise your rights, contact us at this address.
2. What data do we collect?
Hoctave aims to collect only the data strictly necessary for the purposes pursued.
Data that may be collected through the contact form includes:
Fields identified as mandatory are necessary to process your request. Without them, Hoctave may not be able to respond.
No sensitive data within the meaning of Article 9 of the GDPR is requested through the Website.
- last name and first name;
- professional email address;
- company;
- job title;
- telephone number, when you choose to provide it;
- message content;
- navigation and interaction data processed by measurement services, according to your consent choices.
3. Why do we collect your data and on what legal basis?
Electronic marketing to professionals is carried out in accordance with applicable regulations.
You may object to receiving these communications at any time by using the unsubscribe link in each message or by writing to contact@hoctave.com.
Hoctave does not use profiling or make decisions producing legal effects based solely on automated processing.
| Purpose | Legal basis |
| Respond to contact or information requests | Performance of pre-contractual measures (Article 6(1)(b) GDPR) |
| Organize a demonstration of the Hoctave platform | Performance of pre-contractual measures (Article 6(1)(b) GDPR) |
| Measure Website audiences, conversions and advertising campaign performance | Your consent (Article 6(1)(a) GDPR) |
| Communicate with you in a business or pre-contractual relationship and monitor exchanges | Hoctave's legitimate interest (Article 6(1)(f) GDPR) |
| Send information about products, services, events, publications, webinars, white papers or regulatory developments | Hoctave's legitimate interest (Article 6(1)(f) GDPR) or, where required, your consent (Article 6(1)(a) GDPR) |
4. Who can access your data?
Access to data is restricted to authorized Hoctave employees who need it to perform their duties.
Hoctave may also use technical service providers acting as processors, including for:
These providers access data only as necessary to perform their services and are contractually required to comply with GDPR requirements.
As of the last update of this policy, the main providers used are:
Hoctave does not sell, rent or transfer your personal data to third parties.
- Website hosting;
- professional email;
- customer relationship management tools;
- communication, information or event organization services.
- Yulpa, for Website hosting in France;
- Microsoft Ireland Operations Limited, for professional email based on Microsoft 365;
- Umami Cloud, for audience measurement;
- Google Ads, for conversion and advertising performance measurement.
5. How long do we keep your data?
These periods may be extended where required by a legal or regulatory obligation.
| Data category | Retention period |
| Contact requests | 12 months from the response when no business relationship is established |
| Prospect data | 3 years from the last contact initiated by the person concerned |
| Customer data | For the duration of the contractual relationship, then archived for applicable limitation periods |
| Data relating to the exercise of rights | For the time needed to process the request and, where applicable, for the period needed to retain evidence |
6. What are your rights?
Under the GDPR, you have the following rights:
You may exercise these rights by writing to contact@hoctave.com.
Hoctave will respond within the time limits required by applicable regulations.
Where necessary to protect your data, proof of identity may be requested.
If you believe your rights have not been respected, you may lodge a complaint with the French data protection authority (CNIL) at www.cnil.fr.
- right of access;
- right to rectification;
- right to erasure;
- right to restriction of processing;
- right to object, including to direct marketing;
- right to data portability, where applicable;
- right to withdraw consent where processing is based on consent;
- right to define instructions concerning your data after death.
7. How do we protect your data?
Hoctave implements appropriate technical and organizational measures to ensure the confidentiality, integrity, availability and security of the personal data it processes.
These measures include securing communications, protecting access to information systems, managing authorizations and selecting providers that offer appropriate security and data protection guarantees.
These measures are regularly reassessed to maintain a level of security appropriate to the risks and technological developments.
8. Is your data transferred outside the European Union?
The Website is hosted in France.
Hoctave uses Microsoft 365 for professional email. Data is hosted within the European Union. However, certain support or maintenance operations performed by Microsoft may, in limited cases, involve access to data from countries outside the European Economic Area.
The use of Umami Cloud and Google Ads may involve international processing or transfers of data under the terms applicable to those services.
Where such transfers may occur, Hoctave ensures they are governed in accordance with GDPR requirements, including through an adequacy decision from the European Commission or appropriate safeguards such as standard contractual clauses.
9. Does the Website use cookies?
The Website uses Umami Cloud to measure audiences and Google Ads to measure conversions and advertising campaign performance. Umami operates without setting cookies but remains subject to the Audience measurement choice on this Website.
Google Consent Mode starts with ad_storage, analytics_storage, ad_user_data and ad_personalization denied by default. Permissions matching the selected categories are granted only after the user has consented.
The choice is kept in the browser's local storage solely to remember consent preferences. Users can accept, reject or customize these categories and then change or withdraw their choice at any time through the “Cookie settings” link in the footer.
10. Changes to this policy
Hoctave may amend this policy to reflect regulatory or technical developments or changes to the services offered.
The current version is the one published on the Website. The last update date appears at the beginning of this document.
