Privacy Policy

1. Who we are

Gotchaaa SAS (we, our) is responsible for processing data collected via this website. This policy explains what data we collect, why, how we store it, with whom we share it, and your rights.

2. Forms and data collected

We use forms provided by YouForm (app.youform.com) to collect the following data. Forms are embedded or hosted via app.youform.com; YouForm acts as a processor and you can request a DPA (Data Processing Agreement).

'Contact Us' Form

• Name (of the contacting person)
• Person / organization represented (if applicable)
• Email address
• Message

Waitlists (3 forms)

We collect the fields listed below according to the selected waitlist:

• Companies: name, company name, email address, company type
• Providers: first and last name, email address, profession, city of residence
• Volunteers: first and last name, email address, age, situation

3. Purpose and legal basis

• Respond to inquiries sent via the 'Contact Us' form (fulfillment of a request).
• Manage waitlists and contact you regarding relevant opportunities or information (legitimate interest or consent depending on context).
• Measure site audience via Umami (audience measurement, legitimate interest) — see Analytics section.

4. Analytics

We use Umami for traffic statistics. Umami is configured in a privacy-respecting mode: it does not use cookies by default and does not record personally identifiable information (IP, name, email) in its metrics.

5. Sharing and processors

The main parties that may access the data are:

• YouForm (app.youform.com) — hosts and stores form responses as a service provider. YouForm provides a DPA and indicates secure storage in Europe.
• Umami — analytics tool configured not to collect personal data.

We do not sell your data to third parties.

6. Security

We implement reasonable technical and organizational measures to protect your information. Providers (e.g., YouForm) encrypt data in transit (HTTPS) and at rest according to their documented practices.

7. Data retention

The retention period depends on the purpose of processing. In accordance with GDPR, we determine and document proportionate durations limited to the purposes. If you want to know the exact period for a specific form, contact us at the address in section 10.

8. Your rights

In accordance with GDPR and French law, you have the following rights:

• Right of access
• Right to rectification
• Right to erasure (right to be forgotten) under the law
• Right to portability
• Right to object
• Right to set directives for your data after death

To exercise your rights, contact us at: hello [at] gotchaaaa.com. You can also lodge a complaint with CNIL if you believe your rights are not respected.

9. Policy changes

We may update this policy. The 'Last updated' date at the top of the page will be updated accordingly. Substantial changes will be brought to your attention.

10. Contact

For any questions regarding this policy or your personal data: Email: hello [at] gotchaaaa.com Address: 78 Avenue des Champs Elysées 75008 Paris