Privacy policy
How SACAM SERVICES processes personal data, in accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act (loi Informatique et Libertés).
1. Data controller
- SACAM SERVICES — SIREN 102639903
- Legal representative: DENISSE Brandon Patrick Claude Dylan, President / founder
- Contact: contact@sacam-services.com
2. Data collected and purposes
- Contact / project brief form: name, company, email, phone, project type, description. Purpose: to respond to your request and prepare a commercial proposal.
- Application form: name, email, phone, target role, message, professional link. Purpose: to process your application.
- Audience measurement cookies: only if you consent (see our cookie policy).
Legal basis: consent for cookies, the performance of pre-contractual measures or legitimate interest for handling incoming requests and applications.
3. Roles under the GDPR
In the context of our services (development, integration, TMA, hosting, consulting):
- When our clients determine the purposes and means of their processing, they act as data controllers, and SACAM SERVICES acts as a processor, or even a sub-processor for certain components (cloud hosting, tools).
- SACAM SERVICES processes client data only on the documented instructions of the data controller, under a data processing agreement compliant with Article 28 of the GDPR.
4. Retention periods
- Contact requests and project briefs: for as long as necessary to handle the request, then up to 3 years in commercial archive.
- Applications: 2 years after the last contact, unless the person agrees otherwise.
- Data processed on behalf of clients: according to the instructions and durations set contractually.
5. Recipients
Data is accessible only to authorized internal teams (sales, pre-sales engineering, HR) and, where applicable, to our technical providers (hosting, messaging tools) bound by contract. No data is sold or rented to third parties.
6. Security
We implement appropriate technical and organizational measures: encryption of exchanges, access control, logging, backups, and a security approach aligned with an ISO 27001 roadmap (see our compliance page).
7. Transfers outside the EU
Wherever possible, data is hosted within the European Union. Any transfer outside the EU would be subject to appropriate safeguards (standard contractual clauses or an adequacy decision).
8. Your rights
You have the rights of access, rectification, erasure, restriction, portability and objection, as well as the right to define directives regarding the fate of your data after your death. You may exercise them at:
You also have the right to lodge a complaint with the CNIL (www.cnil.fr).
Last updated: November 2026.