Last updated: 12 September 2026
Data controller
BIG WAVE, French simplified joint-stock company with a single shareholder (SASU), 60 rue François Ier, 75008 Paris, France, registered under number 880 968 375 (RCS Paris). For any question about your data: contact@big-wave.net.
Data collected
We only collect the data we need:
- Contact form: last name, first name, company, work email address, topic and content of your message.
- Email exchanges: the information you choose to send us.
- Technical data: connection logs kept by our hosting provider (IP address, date, page requested), for security purposes.
- Anti-bot check: the form uses ALTCHA, a small calculation run in your browser. It sets no cookies, collects no personal data and calls no third-party service.
We collect no sensitive data, and we do not ask you for any information about third parties.
Purposes and legal bases
- Responding to your request and preparing a possible proposal: pre-contractual measures taken at your request (Article 6(1)(b) GDPR).
- Keeping the site secure: BigWave's legitimate interest (Article 6(1)(f)).
- Contacting you again about our services, as a follow-up to your request: legitimate interest, with the option to object at any time.
Your data is never sold, nor used to train an artificial intelligence model.
Retention period
- Contact requests not followed up: 3 years from our last exchange.
- Data relating to an engagement: the duration of the contractual relationship, then the statutory archiving periods.
- Connection logs: 12 months at most.
Recipients and processors
Only the BigWave team has access to your data. It may be processed, on our behalf and according to our instructions, by our technical service providers:
- Site hosting: Vercel Inc., United States. Pages are delivered through its global network; the contact form is processed in Europe (Paris region).
- Email service: Google Workspace (Google Ireland Limited, Ireland).
- Sending of contact form messages: Resend, United States.
- Archiving of contact form messages: Upstash, a database hosted in the European Union. Each message is deleted automatically 3 years after it is received.
Our hosting provider (Vercel), our email delivery service (Resend), our archive database (Upstash) and our email service (Google Workspace) may process data outside the European Union, including in the United States. These transfers are governed by the EU–US Data Privacy Framework for providers that participate in it, and otherwise by the European Commission's standard contractual clauses.
Security
We apply appropriate measures to protect your data: encrypted connections, restricted and protected access, named user accounts, and deletion of data at the end of its retention period.
Your rights
You have the right to access, rectify and erase your data, to restrict and object to its processing, and to data portability, as well as the right to set instructions on what happens to your data after your death.
To exercise these rights, write to contact@big-wave.net. We respond within one month. If your request raises doubts about your identity, we may ask you for proof of identity.
If you believe your rights have not been respected, you may lodge a complaint with the CNIL (www.cnil.fr) or the data protection authority of your country of residence.
Cookies and trackers
This site sets no advertising cookies and contains no social media buttons that would track you from one site to another.
- Strictly necessary cookies: where applicable, those required for the site to function technically. They are exempt from consent.
- Audience measurement: none. If a tool is added, it will be configured to be exempt from consent in line with CNIL recommendations, or made subject to your prior consent through a banner.
- Fonts: they are hosted on our own servers, with no call to a third-party service.
You can set your browser to refuse or delete cookies at any time.
Changes
This policy may change. The date of the last update appears at the top of this page.