Privacy policy.

1. Data controller

The data controller is CREA NOVA OÜ (operating under the trade name “Inleven”), whose full contact details appear in the legal notice. For any question about your data: [email protected].

2. Data collected

Inleven applies the principle of minimization: only the necessary data is collected.

• Contact form: first name, last name, email, activity, message, and technical metadata (date, originating page).
• Contractual data (in the event of a subscription): name, contact details, billing address; payment data is processed directly by the payment provider (Stripe); Inleven does not keep the details.
• Browsing data: traffic statistics and, subject to your consent, audience-measurement and advertising data (see “Cookies and trackers”).

3. Purposes and legal bases

Each processing operation rests on a legal basis within the meaning of the GDPR:

• Responding to contact requests (legitimate interest).
• Performing and managing the service contract (performance of the contract).
• Issuing invoices and keeping accounts (legal obligation).
• Measuring site audience and serving targeted advertising (consent, via the cookies described below).

4. Retention period

Data is kept only for the strictly necessary period:

• Contact data: 3 years from the last exchange (CNIL recommendations).
• Contractual and accounting data: 10 years after the end of the contract (legal obligation).
• Audience-measurement and advertising cookies: 13 months maximum.

5. Recipients and processors

Your data may be processed by technical providers acting on Inleven's behalf, under data-processing agreements compliant with the GDPR:

• Cloudflare, website hosting.
• Stripe, payment processing.
• n8n, routing of contact-form messages.
• Meta (Facebook / Instagram), advertising measurement and delivery via the Meta Pixel, subject to your consent.
• An audience-measurement tool and a professional email service.

Some of these providers are located outside the European Union; transfers are then governed by appropriate safeguards (the European Commission's standard contractual clauses).

6. Cookies and trackers

Strictly necessary cookies. The site uses technical cookies essential to its operation (security, display preferences). They do not require your consent.

Audience-measurement and advertising cookies. The site may use audience-measurement tools and the Meta Pixel (Facebook / Instagram) to analyze traffic and serve relevant advertising. These cookies are set only after your consent, collected via a dedicated banner that lets you accept, refuse, or configure your choices. You can change your preferences at any time.

Until the consent banner is enabled, no audience-measurement or advertising cookie is set.

7. Your rights

In accordance with the GDPR, you have the rights of access, rectification, erasure, restriction, objection, portability, and the right to withdraw your consent at any time. To exercise them: [email protected] ; a reply is provided within one month.

You may also lodge a complaint with the competent supervisory authority: the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) for the data controller, or, if you reside in France, the CNIL.

8. Security

Inleven implements appropriate technical and organizational measures: encryption of communications (HTTPS), secure hosting, restricted access to data, and regular backups. In the event of a data breach likely to create a risk to your rights, the affected individuals and the competent authority are informed in accordance with the GDPR.

9. Changes

This policy may be updated to reflect changes in processing operations or in regulations. The date of the last update appears at the top of the page. In the event of a substantial change, you are informed by appropriate means.