Privacy Policy

Last updated: March 2025

This Privacy Policy describes how VISICREA SASU, operating the website https://droogies-ai.com under the brand name Droogies AI, collects, uses, retains and protects the personal data of website users and clients. It complies with the General Data Protection Regulation (GDPR — EU Regulation 2016/679) and applicable French data protection legislation.

1. Data Controller

The data controller for personal data collected through https://droogies-ai.com is:

  • Company: VISICREA SASU
  • Legal representative: Florent Perez, President
  • Address: 180 Lotissement Du Stade, 42140 Grammond, France
  • SIRET: 902 306 133 00015
  • Email: [email protected]

2. Personal Data Collected

VISICREA SASU is committed to limiting the collection of personal data to what is strictly necessary (data minimization principle).

2.1 Via the Contact Form

When using the contact form available on the website, the following data may be collected:

  • First name and last name;
  • Professional email address;
  • Company name;
  • Message content.

2.2 Via Website Navigation

The website https://droogies-ai.com uses Plausible Analytics, a self-hosted audience analysis solution running on VISICREA's own infrastructure (analytics.visicrea.fr). Plausible Analytics is entirely cookieless and:

  • collects no personal data;
  • places no trackers on your device;
  • generates no individual digital fingerprint;
  • requires no prior consent from the user;
  • transmits no data to third parties.

The aggregated and anonymous data collected by Plausible Analytics (number of visitors, page views, aggregated geographic origin, browsers) does not allow identification of any individual and does not constitute personal data within the meaning of the GDPR.

2.3 Integrated Third-Party Services

The website may occasionally integrate third-party services, notably Calendly for online appointment scheduling. These services operate under their own privacy policies and may collect data according to their own terms. VISICREA encourages users to review the privacy policies of these services before using them.

3. Purposes of Processing

Personal data collected is used for the following purposes:

  • Responding to contact requests: processing and following up on messages sent via the contact form.
  • Managing the commercial relationship: preparing quotations, order tracking, invoicing and contract management.
  • Sending commercial communications: sending information about Droogies AI's services and news, subject to the user's prior consent.
  • Improving the website: anonymous traffic analysis via Plausible Analytics to improve the user experience (without processing personal data).

4. Legal Basis for Processing

Processing activities carried out by VISICREA are based on the following legal grounds:

  • Legitimate interest (Art. 6.1.f GDPR): responding to inbound contact requests, B2B commercial prospecting in compliance with data subjects' rights.
  • Consent (Art. 6.1.a GDPR): sending commercial communications (newsletters, promotional offers). Consent may be withdrawn at any time.
  • Performance of a contract (Art. 6.1.b GDPR): client relationship management, invoicing, performance of ordered services.
  • Legal obligation (Art. 6.1.c GDPR): retention of accounting and tax data in accordance with applicable legal obligations.

5. Data Retention Periods

Personal data is retained for the period strictly necessary for the purposes for which it was collected:

  • Contact data (prospects): 3 years from the last active contact, unless a right of opposition or erasure is exercised.
  • Client data: duration of the contract plus 5 years after its expiry or termination, in application of applicable legal accounting and tax retention obligations.
  • Billing data: 10 years in accordance with applicable French commercial law.
  • Consent records: for the duration of the consent or until it is withdrawn.

Upon expiry of these periods, data is deleted or irreversibly anonymized.

6. Data Recipients

Personal data collected by VISICREA is handled in strict confidence:

  • It is accessible only to authorized members of VISICREA's internal team who need it in the course of their duties.
  • It is not sold, rented or otherwise transferred to third parties.
  • It is not transferred outside the European Union.
  • Where technical sub-processors are engaged (hosting provider, IT service providers), appropriate contractual safeguards (confidentiality clauses, data processing agreements) are put in place in accordance with the GDPR.

7. Cookies and Trackers

The website https://droogies-ai.com adopts a zero-cookie-by-default policy.

7.1 Plausible Analytics (Self-Hosted)

The audience analysis solution in use — Plausible Analytics, hosted at analytics.visicrea.fr — is entirely cookieless and GDPR-compliant without requiring a consent banner. It places no cookies in your browser and collects no personal data.

7.2 Third-Party Cookies (Calendly)

When the Calendly appointment scheduling widget is embedded on a page, this service may set its own functional cookies upon loading. These cookies are governed by Calendly's privacy policy, available on that provider's website. VISICREA has no control over these cookies and recommends that users review that service's terms of use.

7.3 No Advertising Cookies

No advertising cookies, tracking pixels or third-party profiling trackers are placed on your device through the website https://droogies-ai.com.

8. Your Rights as a Data Subject

In accordance with the GDPR, you have the following rights with respect to your personal data:

  • Right of access (Art. 15 GDPR): obtain confirmation that your data is being processed and receive a copy of it.
  • Right to rectification (Art. 16 GDPR): have inaccurate or incomplete data corrected.
  • Right to erasure (Art. 17 GDPR): request deletion of your data under the conditions provided for by the GDPR.
  • Right to data portability (Art. 20 GDPR): receive your data in a structured, machine-readable format.
  • Right to object (Art. 21 GDPR): object to the processing of your data, particularly for direct marketing purposes.
  • Right to restriction of processing (Art. 18 GDPR): request the temporary suspension of processing of your data.
  • Right to withdraw consent: at any time, where processing is based on your consent, without affecting the lawfulness of processing carried out before withdrawal.

8.1 How to Exercise Your Rights

To exercise any of these rights, please send a written request to:

VISICREA undertakes to respond to any request within one (1) month of receipt. This period may be extended by two (2) additional months where requests are complex or numerous, in which case VISICREA will notify you accordingly.

8.2 Right to Lodge a Complaint

If you believe, after contacting VISICREA, that your rights have not been respected, you have the right to lodge a complaint with the competent supervisory authority. In France, this is the Commission Nationale de l'Informatique et des Libertés (CNIL):

  • Website: www.cnil.fr
  • Address: 3 Place de Fontenoy — TSA 80715 — 75334 Paris Cedex 07, France

Users in other EU member states may also lodge a complaint with their local data protection authority.

9. Data Security

VISICREA implements appropriate technical and organizational measures to ensure the security, integrity and confidentiality of your personal data, and in particular to protect against unauthorized or unlawful processing and against accidental loss, destruction or damage. These measures include:

  • Use of the HTTPS protocol for communications between your browser and the website;
  • Access controls for systems containing personal data;
  • Hosting on a secure dedicated server;
  • Regular encrypted backups.

However, no electronic transmission or storage system is completely secure. VISICREA cannot guarantee the absolute security of data and encourages users to take all reasonable precautions to protect their own information.

10. Changes to this Privacy Policy

VISICREA reserves the right to amend this Privacy Policy at any time, particularly to comply with regulatory changes or modifications to the website. The version in force is the one accessible on the website at the time of your visit. In the event of a material change, registered users will be notified by email where possible.

We encourage you to review this page regularly to stay informed of any updates.

Last updated: March 2025