CFBikes
FR EN
Privacy

Privacy policy

How this site processes personal data, in accordance with the EU General Data Protection Regulation (GDPR) and the French Data Protection Act.

Last updated: 18/06/2026

1. Data controller

The entity responsible for processing your personal data (the data controller) is:

Company name
KERN & LIGA
Registered office
23 rue de la Voirie, 60120 Hardivillers
Contact
Show e-mail address

No Data Protection Officer (DPO) is required given the nature and small scale of the processing. For any question, use the contact address above.

2. Data we process

This site has no user account and no database. We deliberately keep data collection to a minimum:

  • Connection logs generated by the host (IP address, date and time, pages viewed, browser type), for security and to keep the service running.
  • A single technical cookie that stores the session and the anti-CSRF token, strictly necessary for forms to work.
  • With your consent: anonymised audience statistics collected by Google Analytics (cookies _ga, _ga_*) — pages visited, approximate geographic location, browser and device type in aggregate form. No personal identifier is transmitted.
  • The values you enter in the calculator (model, weights) are processed to display a result and are not stored on our side.
  • If you contact us by e-mail, your e-mail address and the content of your message.

We do not collect any special category of data, and the site is not intended for children.

3. Purposes and legal bases

  • Providing, securing and improving the website — legitimate interest (Article 6(1)(f) GDPR).
  • Measuring the size and behaviour of our audience in anonymised aggregate form — consent (Article 6(1)(a) GDPR). You can withdraw your consent at any time.
  • Answering requests sent by e-mail — legitimate interest in replying to you.
  • Meeting our legal and accounting obligations — compliance with a legal obligation (Article 6(1)(c) GDPR).

We do not carry out any commercial prospecting and do not use your data for advertising.

4. Cookies and tracking

Two categories of cookies are used on this site:

  • Strictly necessary — session cookie and anti-CSRF protection token, required for forms to work. These do not require your consent under the GDPR and ePrivacy rules.
  • Audience measurement — Google Analytics — deposited only after your explicit consent. The cookies _ga and _ga_* send anonymised statistics to Google: pages visited, approximate country, browser and device type. No advertising profile is built and no cross-site tracking is performed. You can withdraw or change your consent at any time via the Manage cookies link at the foot of any page.

Affiliate links, where present, lead to third-party shops that set their own cookies under their own policies.

5. Recipients and hosting

Your data is never sold or rented. It is accessible only to the publisher and, depending on your consent choices, to:

  • Hetzner Online GmbH — hosting provider acting as data processor, located within the EU (Germany).
  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland — Google Analytics data processor, only with your consent. Anonymised data may be transferred to Google LLC (United States) under the EU–US Data Privacy Framework.

6. Data retention

  • Connection logs: up to 12 months, then deleted or anonymised.
  • Google Analytics cookies (_ga, _ga_*): up to 13 months, then automatically deleted by the Google service.
  • E-mail correspondence: for the time needed to handle your request, then archived or deleted.
  • Calculator inputs: not retained beyond your session.

7. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your data, the right to data portability, the right to withdraw your consent at any time, and the right to set directives on the fate of your data after your death.

To exercise these rights, contact us at the address above. We reply within one month. You may be asked to prove your identity.

8. Complaint to the supervisory authority

If you believe your rights are not respected, you can lodge a complaint with the French data protection authority (CNIL), 3 Place de Fontenoy, 75007 Paris, or online: www.cnil.fr

9. Security

Connections are encrypted (HTTPS/TLS) and the site is hosted in certified European data centres. We apply data minimisation, restricted access and current best practices to protect your data, while no system can be guaranteed to be infallible.

10. Automated decisions

This site performs no automated individual decision-making and no profiling within the meaning of Article 22 GDPR.

11. Changes to this policy

This policy may change to reflect legal or technical developments. The current version is dated at the top of this page.