Privacy notice

1. Data controller

Qoosmo, operating under the Algorizk Labs name, is responsible for deciding how personal information submitted through this website is processed.

The controller's complete corporate name, registration information, and registered-office details will be added to this notice when the public legal presentation of Algorizk Labs is finalized.

Privacy requests can be submitted through the project inquiry form. Select “Other” as the project type and begin the summary with “Privacy request.”

2. Information collected

The website may collect the following information:

• Full name and professional email address
• Company or organization
• Project type, expected timeline, and indicative budget
• The non-confidential project summary submitted through the form
• The acknowledgment associated with the security and privacy notice
• Limited technical data used for security, such as IP address, request time, and request metadata

Do not submit private keys, credentials, undisclosed vulnerabilities, proprietary source code, information covered by a nondisclosure agreement, or other confidential or security-sensitive material.

3. Purposes and legal bases

Personal information is processed to:

• Assess, screen, and respond to project inquiries.
• Take steps requested before a possible contract or research engagement.
• Protect the website, email service, and contact endpoint from spam, fraud, and abuse.
• Maintain necessary business, security, and legal records.

Depending on the context, processing is based on steps taken at your request before entering a contract, the legitimate interests of evaluating genuine business inquiries and securing the service, or compliance with a legal obligation.

Contact-form information is not used to subscribe visitors to marketing communications.

4. Required information

Fields marked as required are necessary to screen and evaluate an inquiry. If the requested information is not provided, Algorizk Labs may be unable to assess or respond to the request.

5. Recipients and service providers

Information may be accessed only when necessary by Qoosmo, authorized persons supporting Algorizk Labs, and service providers involved in operating the inquiry channel.

Information may also be disclosed when required by law or when necessary to establish, exercise, or defend legal claims.

6. International processing

Some service providers may process information outside France or the European Economic Area. Where required, these transfers are governed by recognized safeguards, including adequacy decisions, data-processing agreements, or standard contractual clauses.

7. Retention

An inquiry that does not lead to an ongoing discussion or engagement is generally retained for no longer than 12 months after the last meaningful contact.

Information relevant to an active commercial discussion may be retained for up to three years after the last meaningful contact. If an engagement begins, relevant records may be retained longer when required for contractual, accounting, security, or legal purposes.

Technical security logs are retained only for the period reasonably necessary to detect abuse, investigate incidents, and maintain service security, subject to provider settings and legal requirements.

8. Your rights

Depending on the applicable law and circumstances, you may:

• Access the personal information held about you
• Request correction of inaccurate or incomplete information
• Request deletion when there is no overriding reason to retain it
• Request restriction of certain processing
• Object to processing based on legitimate interests
• Request portability where the legal conditions apply
• Submit a complaint to the French data-protection authority, the CNIL

A request may require reasonable identity verification. Applicable requests will be handled without undue delay and, where the GDPR applies, normally within one month.

You may also contact the Commission Nationale de l’Informatique et des Libertés (CNIL).

9. Automated decisions

Contact inquiries are not subject to decisions based solely on automated processing that produce legal or similarly significant effects. Technical anti-spam controls may automatically reject abusive or suspicious requests.

10. Security

Reasonable technical and organizational measures are used to protect submitted information. These include encrypted transport, server-side email delivery, restricted environment variables, input validation, a honeypot, completion-time checks, and IP-based rate limiting.

No internet transmission or storage system can be guaranteed to be completely secure. Sensitive technical material should be exchanged only through an agreed secure channel after the initial inquiry has been reviewed.

11. Cookies and analytics

Algorizk Labs does not use advertising cookies. With your consent, the public website uses Google Analytics 4 to understand website visits, traffic sources, and interactions with public pages. Google Analytics is not loaded before analytics consent is granted. If accepted, Google Analytics may store analytics cookies such as _ga. You can reject analytics or withdraw your consent at any time through the Analytics settings control available in the website footer. The site stores your analytics preference locally so that it does not ask again on every page. Hosting and security providers may process essential technical request information to operate and protect the service.

12. Changes to this notice

This notice may be updated when the website, service providers, legal identity, or processing practices change. The latest version and revision date will remain available on this page.