Privacy policy & legal notice
Last updated: 27 September 2026
1. Who we are
This website is published by 40 Folds SAS, a simplified joint-stock company registered with the Paris Trade and Companies Register under number 943 828 558, with its registered office at 60 rue François Ier, 75008 Paris, France. 40 Folds SAS is the data controller for the personal data described below.
Publication director: Bianca-Letitia Rusu, President. Contact: contact@40folds.com.
Hosting: the website and its database are hosted on Cloudflare and Supabase cloud infrastructure within secure, access-controlled environments.
2. Data we collect and why
- Account and sign-in (Google, Microsoft, Apple or email): name, email address and provider identifier — to authenticate you. Legal basis: performance of a contract / pre-contractual steps.
- Meeting bookings: name, email, chosen time slot and any note — to schedule and hold the meeting in our calendar. Legal basis: pre-contractual steps at your request.
- Contact messages: your email and message — to reply to you. Legal basis: our legitimate interest in answering enquiries.
- Job applications: name, email, CV, links and motivation — to assess your application. Legal basis: pre-contractual steps at your request.
- Technical data: IP address, browser and security logs — to operate and secure the site and to choose the site language. Legal basis: legitimate interest.
We do not sell your personal data and do not use it for automated decision-making.
3. Retention
- Prospect and contact data: 3 years from our last exchange.
- Job applications: 2 years after our last contact, unless you ask us to delete them sooner.
- Accounts: for as long as your account is active, then deleted within 12 months of inactivity.
- Cookie consent choice: 6 months.
4. Recipients and transfers
Your data is accessible only to the 40folds team and to our technical providers acting on our instructions (hosting, database, authentication, Google Workspace for calendar and email). Some providers may process data outside the European Union; in that case transfers are covered by the European Commission’s Standard Contractual Clauses or an adequacy decision (including the EU–US Data Privacy Framework).
5. Cookies
We use strictly necessary cookies and similar storage for sign-in, security, booking and your language preference (ff_lang). These do not require consent. Any analytics or marketing cookies are only set after you accept them in our consent banner. You can change your choice at any time: .
6. Your rights
Under the GDPR and the French Data Protection Act, you have the right to access, rectify and erase your data, to restrict or object to its processing, to data portability, and to set instructions for its fate after your death. Where processing is based on consent, you may withdraw it at any time. To exercise your rights, write to contact@40folds.com or to our registered office. You may also lodge a complaint with the CNIL (www.cnil.fr).
7. Security
We apply appropriate technical and organisational measures: encrypted connections (HTTPS), access restricted by role, private storage for CVs and row-level access controls on our database.
8. Intellectual property
All content on this site (texts, charts, logos) is the property of 40 Folds SAS unless stated otherwise, and may not be reproduced without prior written permission.