Privacy policy

Last updated: 2026-10

1. Data controller

The controller of your personal data is:

ShiftElec SAS 9 rue Charles Fourier 91000 EVRY Email: contact@shiftelec.com

2. Data collected

Through our contact and estimation forms, we collect the following data:

  • First and last name
  • Work email address
  • Phone number (optional)
  • Company name and size
  • Position within the company
  • Business sector
  • Electricity consumption data (as part of the estimation form)
  • Free-text message

When you download a resource offered on the site, such as an awareness poster, we only collect your email address.

No sensitive data within the meaning of Article 9 of the GDPR is collected.

3. Purposes and legal bases

| Purpose | Legal basis | | --- | --- | | Responding to your contact requests | Legitimate interest (Art. 6.1.f GDPR) | | Providing a personalized estimate | Performance of pre-contractual measures (Art. 6.1.b GDPR) | | Sending the newsletter | Consent (Art. 6.1.a GDPR) | | Sending you a downloaded resource and contacting you again about our services | Consent (Art. 6.1.a GDPR) |

4. Data recipients

Your data is shared with the following recipients:

  • The ShiftElec sales team — to handle your request.
  • Formspree Inc. (processor, United States) — form management service. Formspree is bound by the European Commission's Standard Contractual Clauses guaranteeing an adequate level of protection. See their privacy policy at formspree.io.
  • Brevo (processor, France) — sending of emails related to resource downloads. See their privacy policy at brevo.com.
  • Cloudflare, Inc. (processor, United States) — hosting of the service that handles download requests. Cloudflare participates in the EU-U.S. Data Privacy Framework. See their privacy policy at cloudflare.com.

Your data is never sold, rented or transferred to third parties for commercial purposes.

5. Retention periods

  • Contact data: 3 years from the last contact.
  • Data related to a contractual relationship: 5 years after the end of the contract.
  • Newsletter data: until you unsubscribe.
  • Email address provided when downloading a resource: 3 years from the last contact, or until you withdraw your consent.
  • IP address used to prevent abuse of the download service: 15 minutes.

6. Cookies and trackers

This site uses Matomo Analytics in anonymized mode to measure audience. No personally identifiable data is transmitted to third parties for advertising purposes.

Technical cookies may be set by Formspree when a form is submitted, as required for the proper operation of the service. These cookies are not used for advertising tracking.

7. Your rights

In accordance with the GDPR and the French Data Protection Act, you have the following rights:

  • Right of access — obtain a copy of your data.
  • Right to rectification — correct inaccurate data.
  • Right to erasure — request the deletion of your data.
  • Right to object — object to a processing based on legitimate interest.
  • Right to restriction — temporarily restrict a processing.
  • Right to portability — receive your data in a structured format.
  • Right to withdraw consent — at any time for the newsletter and for being contacted again after downloading a resource.

To exercise these rights, contact us at contact@shiftelec.com. We commit to responding within one month.

You may also lodge a complaint with the CNIL (the French data protection authority) — www.cnil.fr.

8. Security

ShiftElec implements appropriate technical and organizational measures to protect your data against unauthorized access, loss or disclosure. Data transmissions are encrypted via HTTPS.

9. Updates

This policy may be updated to reflect legal changes or changes in our practices. The date of the last update is shown at the top of this page. We encourage you to review it regularly.