Privacy policy of the plazia.fr website
Version 1 of 26 October 2026. This page explains what data the plazia.fr website collects, why, who receives it, how long it is kept and how to exercise your rights. It does not cover the mobile app, which has its own documents.
This English translation is provided for information. In case of discrepancy, the French version prevails.
1. Who is responsible for your data
The data controller is Paul Baldino, publisher of the website (see the legal notice). Contact for any question about your data: contact@plazia.fr.
2. What we collect, why and for how long
All the periods below are maximums. They run from the moment the data is recorded.
| Processing | Data | Why | Legal basis | Period |
|---|---|---|---|---|
| Waiting list | Email address, chosen profile (student, club or association, advertiser), campus or school (optional), website language, origin of the link followed, date and version of the text you accepted, confirmation status | Let you know when Plazia launches and decide which campuses to open first | Your consent (checkbox), confirmed by a link received by email | 60 days |
| Information emails | Email address, number and date of the last message sent | Send you at most three information emails about Plazia after your confirmation (about 3, 14 and 30 days later) | Your consent | 60 days |
| Advertiser form | Name, company, work email address, description of your project (optional), language, date and version of the accepted text. Internally, we add a status and a follow-up note. | Reply to you and follow up on your request | Your consent (checkbox) | 60 days |
Download link (plazia.fr/download) | Device type, browser, country, page of origin, campaign parameters, and an identifier calculated from your IP address and browser, which changes every day. Your IP address is not stored in our database. | Count downloads and know where they come from | Legitimate interest: measuring interest in Plazia | 60 days |
| Form security | IP address, technical signals from your browser | Block bots and mass submissions | Legitimate interest: protecting the website | Submission counter: one minute. Anti-bot check: period set by the provider. |
| Audience measurement | Page viewed, origin, approximate location, operating system, browser, device type, date | Know which pages are read | Legitimate interest: improving the website | Period set by the provider |
| Hosting provider logs | IP address, requests received | Website security and operation | Legitimate interest: securing the website | Period set by the hosting provider |
| Messages to contact@plazia.fr | Your email address and the content of your message | Reply to you | Legitimate interest: answering your request | As long as needed to reply, then deleted |
If Plazia has not launched within 60 days of your sign-up, your sign-up is deleted automatically. You can then sign up again.
For the waiting list, the email address and profile are mandatory; the campus is optional. For the advertiser form, the name, company and email address are mandatory; the project description is optional. Without the mandatory information, we cannot follow up.
3. Who receives your data
The publisher accesses it from a protected administration area and from their own follow-up tools. We use providers that process data on our behalf:
| Provider | Role |
|---|---|
| Vercel Inc. (United States) | Website hosting, audience measurement |
| Neon, Inc. | Database, hosted in Frankfurt (Germany) |
| Resend | Sending emails (European Union region) |
| Cloudflare, Inc. | Anti-bot check on forms (Turnstile) |
| Upstash, Inc. | Counter limiting the number of submissions per IP address |
| OVH SAS (France) | Domain name and contact@plazia.fr mailbox |
We do not sell your data and we do not pass it on to any advertiser.
4. Transfers outside the European Union
Some providers are US companies or process data in the United States. Vercel and Resend rely on the European Commission's standard contractual clauses, and Resend is also certified under the EU-US Data Privacy Framework. To find out the safeguards that apply to the other providers, write to us at contact@plazia.fr.
5. Your rights
You can request access to your data, its rectification or erasure, the restriction of its processing, object to its processing and, where provided by law, receive it in a reusable format. When processing is based on your consent, you can withdraw it at any time: this does not affect what happened before.
- Unsubscribe from the waiting list: click "Unsubscribe" in any email you received. Your sign-up is deleted.
- Any other right: write to contact@plazia.fr. We reply within one month.
- Complaint: you can contact the CNIL, the French data protection authority (cnil.fr/plaintes).
6. Cookies and trackers
The website sets no cookies and stores nothing in your browser. Its audience measurement works without cookies: the provider tells visits apart using an identifier calculated from the request, deleted after 24 hours. The anti-bot component is used only to protect the forms. For this reason, the website does not display a cookie banner. If we ever add a tool that requires your consent, we will ask for it before turning it on.
7. Security
Exchanges with the website are encrypted (HTTPS). Forms are protected against bots and limited in the number of submissions. The administration area is restricted to authorised addresses and is accessed through a single-use link sent by email.
8. Changes
When the data collected by the website changes, this page is updated before the change. The version number and date appear at the top of the page.