Last updated: September 2026

1. Who is responsible for your data

The data controller for this website is VODIS SASU, a company established in France.

If you have a question about privacy, or if you wish to exercise your data-protection rights, you can reach us through the Contact page or by email at contact@vod-is.com.

Full corporate and legal information about the website publisher is set out in the Legal Notice.

2. Scope of this website

VODIS operates a corporate and professional-services website. It presents our consulting, technology, transformation, cybersecurity and governance work, and it offers a way to get in touch with us.

The site is deliberately simple. It does not provide:

  • public comments or forums
  • public user accounts or profiles
  • public file or image uploads
  • online shopping or payments
  • public chat
  • automated decision-making or visitor profiling

The only place where you can deliberately give us personal information is the contact form.

3. Personal data we may process

Contact form

When you write to us through the contact form, we receive:

  • your name
  • your email address
  • your message, and anything else you choose to put in it

Name and email address are required, because we cannot answer you without them. The message field is optional.

Your enquiry is not stored in this website’s database. It is delivered to our mailbox as an email, and it lives there like any other business correspondence.

Technical and security information

Like any website, this one runs on servers that keep operational records. Our hosting provider processes limited technical information on our behalf, which may include:

  • your IP address
  • the date and time of the request
  • the page or file requested
  • basic information about your browser, device and request
  • error and security log entries

We do not use this information to build a profile of you, and we do not combine it with anything else.

Language preference

This site is published in nine languages. On your first visit, the site looks at the language your browser says it prefers and opens the matching version. Your choice is then remembered in a small cookie so that you stay in that language as you move around the site. The cookie holds a two-letter language code and nothing else. It is described in section 5.

4. Why we process it, and on what legal basis

Answering your enquiry

We use what you send through the contact form to reply to you, to continue the conversation, and to discuss possible services or cooperation.

The legal basis is the taking of steps at your request before entering into a contract, where your enquiry is of that kind, and otherwise our legitimate interest in handling professional and business correspondence addressed to us.

Running and protecting the website

Technical records are processed so that the site can operate, be maintained and be repaired, and so that we can detect and prevent abuse, spam and attacks.

The legal basis is our legitimate interest in keeping the site available, correct and secure.

Showing the site in your language

The language cookie exists so that the site works the way you asked it to. The legal basis is our legitimate interest in providing a usable multilingual site, and the cookie is strictly necessary for that function.

Legal obligations

Where the law requires us to keep or to disclose information, we do so on the basis of that legal obligation.

5. Cookies and similar technologies

This website uses one cookie and one item of browser storage. Both are strictly functional. There is no analytics cookie, no advertising cookie and no third-party cookie of any kind.

pll_language is a first-party cookie that records which of the nine site languages you are reading, so that your choice survives navigation and return visits; it holds a two-letter language code and nothing else, and it lasts a year. wpEmojiSettingsSupports is browser session storage written by WordPress, which caches a one-off check of whether your browser can display emoji so that the check is not repeated on every page; it disappears when you close the tab.

Because both are necessary for the site to work as you asked, and neither is used to recognise you elsewhere, they do not require your consent, and this site therefore shows no cookie banner.

To be precise about what is absent: this website runs no analytics platform, no tag manager, no advertising or remarketing pixel, no session recording, no A/B testing tool, no social-network tracker and no fingerprinting. We do not know, and cannot find out, which other sites you visit.

You can delete or block cookies in your browser settings at any time. If you delete the language cookie, the site will simply choose a language again on your next visit.

6. Who receives your data

Access is limited to the people and providers who genuinely need it:

  • Authorised people within VODIS, who read and answer enquiries.
  • Our hosting provider, OVH SAS, which operates the servers, the content-delivery layer in front of them and the mail transport that carries your enquiry to us. Its identification is given in the Legal Notice.
  • GitHub, Inc., which delivers one icon font used by the site’s design. Your browser fetches that font file directly, which means GitHub receives your IP address, your browser identification and the page you came from. It receives nothing else, and it sets no cookie. We are working to serve this font from our own servers, after which this disclosure will end.
  • Professional advisers, such as lawyers or accountants, where that is genuinely necessary.
  • Public authorities, where the law requires it.

VODIS does not sell, rent or trade personal data. We share nothing with advertisers, data brokers or marketing networks.

7. Transfers outside the European Economic Area

Our hosting provider is a French company operating from Europe, and the site and its mail are served from its European infrastructure.

The one exception is the icon font described in section 6, which your browser retrieves from GitHub, a provider established in the United States. That request may therefore involve a transfer outside the EEA. Where a transfer outside the EEA occurs, it takes place on the basis of the safeguards recognised by European data-protection law, such as an adequacy decision or standard contractual clauses.

We do not use any other service that transfers your data outside the EEA.

8. How long we keep it

  • Ordinary enquiries. We keep contact-form correspondence for up to 24 months after our last meaningful exchange with you, and then delete it.
  • Enquiries that lead somewhere. If a business or contractual relationship begins, the correspondence is kept for as long as that relationship needs, and afterwards for the periods required by accounting, tax and legal rules.
  • Legal claims. Where information is needed to establish, exercise or defend a legal claim, it is kept until that is resolved.
  • Technical logs. These are kept only as long as is reasonably necessary for operation and security, according to our hosting and security configuration.
  • The language cookie. Until it expires, is replaced, or is deleted by you.

9. Your rights

Subject to the conditions set by applicable law, you have the right to:

  • ask what personal data we hold about you, and obtain a copy
  • have inaccurate data corrected
  • have data erased
  • ask us to restrict how we use it
  • object to processing based on our legitimate interests
  • receive data you provided in a portable form, where that right applies
  • withdraw your consent at any time, where consent is the basis we rely on

Write to contact@vod-is.com or use the Contact page. We may need to check who you are before we act, so that we do not disclose someone else’s information to you.

VODIS has not appointed a Data Protection Officer, because it is not required to. Requests are handled directly by the company.

10. Complaints

If you believe we have handled your data improperly, we would like to hear from you first, so that we can put it right.

You also have the right to lodge a complaint with the French supervisory authority, the Commission Nationale de l’Informatique et des Libertés (CNIL), 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France. If you live in another country of the European Economic Area, you may instead complain to your own national supervisory authority.

11. What sending the contact form does and does not do

Sending the form starts a conversation, nothing more. We use what you write to deal with your enquiry.

It does not subscribe you to a newsletter or to any marketing list. This website operates no newsletter and no marketing automation. We will not add you to one, and we will not pass your address to anyone who runs one.

12. Links to other websites

Some pages link to websites that VODIS does not operate. Following such a link takes you into someone else’s hands: their privacy practices are their own, and this policy no longer applies. We suggest reading the privacy policy of any site you visit that way.

13. Security

We take reasonable technical and organisational measures to protect personal data against loss, misuse and unauthorised access. The site is served over an encrypted connection, access to its administration is restricted, and the software it runs on is kept up to date.

No website and no transmission over the internet can be guaranteed to be completely secure, and we do not claim otherwise. Please avoid sending sensitive personal information through a web form.

14. Automated decision-making

This website does not use the information it collects to make decisions about you by automated means alone, and it does not profile visitors. Nothing here produces legal effects concerning you or similarly significant effects.

15. Changes to this policy

We may update this policy when the site changes, when we change a service provider, when the way we handle information changes, or when the law changes. The date at the top shows when it was last revised. Material changes will be reflected here, so it is worth looking at this page again if the subject matters to you.