Last updated: 12 September 2026
This English version is provided for convenience. The French version prevails in case of any discrepancy.
This policy covers browsing https://crafting-codes.com and handling your contact and support requests. It explains what personal data we process, why we process it, how long we keep it, and how you can exercise your rights.
Who is responsible for your data
The controller is Spectrum Technology Services, a simplified joint-stock company (société par actions simplifiée, SAS). It is registered with the French Trade and Companies Register (RCS) under number RCS Nanterre 948 971 296. Its registered office is at 4 rue Jules Guesde, 92300 Levallois-Perret, France. The website presents our services under the Crafting Codes brand.
For any question about your data, email us at contact@crafting-codes.com. We have not appointed a data protection officer.
What we collect, why, and on what legal basis
| Situation | Data | Purpose | Legal basis |
|---|---|---|---|
| Contact form | email address and message; optional: first name, last name, organization, job title, phone number, location and how you heard about us | to answer your request and, where relevant, follow up on the business relationship | the contract you are preparing or performing with us, where your request relates to it; otherwise, our legitimate interest in responding to the people who contact us, including on behalf of an organization |
| Contact form: technical data recorded with each submission | date and time, page address, IP address (the identifier of your Internet connection) and browser | to protect the form against abusive submissions and to trace where a submission came from | our legitimate interest in protecting the website |
| Email, phone or support request | the information you choose to give us | to answer your request | the same as for the contact form |
| Job application (contact form or email) | your curriculum vitae (CV), cover letter and any other information you choose to send | to review your application | steps taken at your request before a contract |
| Server logs | IP address, date and time, page requested, browser, referring page | to keep the website running and secure | our legitimate interest in protecting the website |
| Display of the cookie banner (CookieYes) | a session identifier, a banner identifier and the time of two events, its loading and its display; your IP address is technically transmitted with these requests | to establish what information was shown to you, and when, before any choice | our legitimate interest in demonstrating that visitors received information about cookies before making their choice (Article 6(1)(f) of the General Data Protection Regulation, GDPR). These requests are triggered by the CookieYes script; we are preparing a request to the provider to find out whether they can be limited |
| Recording your acceptance of cookies (CookieYes) | your choice by category, a consent identifier, the language and the website’s domain name; your IP address is technically transmitted with this request | when you consent, to record your choice so that we can demonstrate that consent | our legal obligation to be able to demonstrate your consent (Articles 6(1)(c) and 7(1) of the GDPR) |
| Recording your full or partial refusal of cookies (CookieYes) | the same data as for acceptance, with the status, accepted or refused, of each category | to be able to establish, in the event of a complaint, that your choice was recorded and what it contained, category by category | our legitimate interest in being able to demonstrate that we respect your preferences (Article 6(1)(f) of the GDPR); the cookie in your browser is enough to apply your choice, this request serves only as evidence |
| YouTube video (“Scrum Master as a Service” page) | browsing data collected by YouTube | to play the video | your consent: the video only loads after you agree |
Where we rely on our legitimate interest, we make sure it does not override your rights. You can object to the processing at any time.
We do not sell your data. The website has no analytics or advertising tool of its own. If you enable a YouTube video, Google may process data for its own purposes, including audience measurement and advertising. We make no automated decision that has legal effects on you. You can change your choices or withdraw your consent at any time using the cookie settings button at the bottom left of every page. Cookies and similar technologies are described in our cookie policy.
Mandatory and optional information
In the contact form, your email address and your message are required: the form cannot be sent without them. All other fields are optional. You can also write to us directly at contact@crafting-codes.com.
Who receives your data
Your data is only accessible to the people at Spectrum Technology Services who handle your request. Its other recipients are our technical providers, which process it on our behalf or, in Google’s case, for its own purposes:
- website hosting: Amazon Web Services EMEA SARL, French branch (succursale française, RCS Nanterre 831 001 334);
- Microsoft, our email provider (Microsoft 365), for the emails we exchange with you;
- CookieYes, for displaying the banner and managing cookie choices;
- YouTube (Google), if you agree to load the video.
If you accept the YouTube video, Google processes the related data under its own privacy policy, available at policies.google.com/privacy. Submissions from the contact form are stored in the website’s database, with our host.
Transfers outside the European Union
The website is hosted in France by a European company of the Amazon group. Google LLC (YouTube) and Amazon.com, Inc., the parent company of Amazon Web Services, are based in the United States, so data may be accessed from outside the European Union. On 11 September 2026, Amazon.com, Inc. and Google LLC appeared on the list of active participants in the EU-US Data Privacy Framework (list consulted at dataprivacyframework.gov). The European Commission’s adequacy decision of 10 July 2023 covers transfers within that framework to participating organizations. Google is involved here only if you agree to load the YouTube video.
Our email service is provided by Microsoft (Microsoft 365). On 11 September 2026, Microsoft Corporation also appeared on the list of active Data Privacy Framework participants; Microsoft’s data processing agreement also incorporates the European Commission’s standard contractual clauses. This concerns our email exchanges with you, including attachments. The region where our mailboxes are hosted remains to be verified; we will add it here. CookieYes is based in the United Kingdom, which is covered by an adequacy decision of the European Commission. To obtain a copy of the standard contractual clauses incorporated into Amazon Web Services’ or Microsoft’s data processing agreement, email contact@crafting-codes.com.
How long we keep your data
- Contact requests and correspondence: kept for as long as needed to handle your request, then for two years and six months after our last contact. They are deleted at the following six-monthly review, so no later than three years after that last contact. The technical data recorded with each form submission currently follows the same retention period as the request; it may therefore be kept for up to three years after the last contact. We are preparing to reduce that technical data and will update this line.
- Unsuccessful applications, whether received through the form or by email: deleted when their assessment ends. We do not keep them for future vacancies. You can ask us to delete them sooner.
- Server logs: the actual retention period of these logs has not yet been verified. We will state it here after checking the server’s retention and deletion settings.
- Your cookie choice: the cookie that remembers it expires after twelve months. Those twelve months apply only to the cookie in your browser. CookieYes’s retention periods for the data sent when the banner appears and for the records of your choices have not yet been confirmed; we will state them here as soon as CookieYes has confirmed them in writing. This provider’s data processing agreement requires it to delete the personal data it processes for us within sixty days of termination, unless applicable law or regulations require that data to be kept. Backup copies may remain for up to one year after that date.
A deletion review takes place every six months. For contact requests and correspondence, the stated maximum period includes the wait until that review.
Security
Traffic between your browser and the website is encrypted. Access to the website’s administration and to our mailboxes is restricted to authorized people.
Your rights
You have the right of access, rectification and erasure, as well as the right to restrict processing and, in some cases, the right to data portability. You can object to processing based on our legitimate interest. Where processing is based on your consent, you can withdraw your consent at any time; this does not affect the lawfulness of processing carried out before you withdrew it. These rights apply under the conditions set out in the GDPR. Under French law, you can also give instructions on how your data should be kept, erased or shared after your death.
To exercise your rights, send your request to contact@crafting-codes.com or write to Spectrum Technology Services, 4 rue Jules Guesde, 92300 Levallois-Perret, France. We respond within one month of receiving your request. If its complexity or the number of requests justifies a two-month extension, we tell you so, with the reasons, within that first month. If we have reasonable doubts about your identity, we may ask you to confirm it.
Complaints
If you believe that the processing of your data does not comply with data protection law, you can lodge a complaint with the French data protection authority, the Commission nationale de l’informatique et des libertés (CNIL). Its address: 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France (www.cnil.fr).
Changes to this policy
We may update this policy, for example when the website changes. The date of the last update is shown at the top of this page.