1. Data controller
The data controller is Cédric Leblond, sole proprietor (SIREN 943 404 400), 4 rue Éric Tabarly, 35240 Retiers, France, publisher of the site https://dynamidoxa.com.
Any request relating to your personal data can be sent via the contact form: https://dynamidoxa.com/contact.
2. General principles
The processing of personal data on this site respects the following principles:
- Minimization: only data strictly necessary for the service provided is collected.
- Purpose: data is collected for explicit and legitimate purposes.
- Transparency: each user is informed of the collection and of their rights.
- Security: data is stored securely and is not resold.
3. Data collected and purposes
Personal data is collected only in the following contexts:
3.1. Contact form
- Data collected: name, email address, project type, message.
- Purpose: respond to your request and set up a quote or commercial exchange.
- Legal basis: explicit consent (form submission) and legitimate interest in responding to prospects.
- Retention period: 3 years from the last contact, unless early deletion is requested.
3.2. Purchase via Whop
- Data collected (transmitted by Whop): first name, last name, email address, country, NinjaTrader Machine ID.
- Purpose: license key delivery, support management, invoicing and compliance with accounting obligations.
- Legal basis: performance of the sales contract, and legal obligations (invoicing, accounting).
- Retention period: 10 years for invoices (French accounting obligation); the license lifetime for the Machine ID.
Payments are processed exclusively by Whop Inc. DynamiDoxa never has access to Customers' banking data. Whop's privacy policy is available at https://whop.com/privacy.
3.3. Hosting technical logs
- Data collected automatically by the host OVHcloud: IP address, user-agent, timestamp, requested URL.
- Purpose: service security, abuse detection, technical diagnostics.
- Legal basis: legitimate interest (site security), and legal obligations applicable to the host.
- Retention period: limited periods set by OVHcloud, in accordance with its own contractual commitments.
3.4. Analytics (deployment in progress)
An audience analysis tool is currently being deployed to measure site traffic and improve the user experience. The solution will be configured to respect visitors' privacy: no personal identifying data will be transmitted for advertising purposes, and no cross-site tracking cookie will be installed.
This policy will be updated as soon as the tool is actually deployed, with precise details of the data collected, the retention period and the selected provider. As of today, no analytics data is collected.
4. Cookies
The site does not use advertising tracking cookies. Only cookies strictly necessary for the operation of the site may be placed (for example, the language preference). These cookies do not require prior consent, in accordance with CNIL recommendations.
During the subsequent deployment of an analytics tool, an information banner will be put in place if the selected solution requires the placement of non-essential cookies.
5. Data recipients
Personal data is only shared with third parties strictly necessary for the performance of the service:
- Whop Inc.: payment and license distribution platform.
- OVH SAS (OVHcloud): technical hosting of the site, with datacenters located in France.
- Professional email provider: receiving and sending emails related to contact requests and support.
No personal data is resold or transferred to third parties for commercial or advertising purposes.
6. Transfers outside the European Union
The site is hosted by OVH SAS, a French company whose datacenters are located within the European Union; no transfer outside the EU occurs in connection with hosting. However, as the payment service provider Whop Inc. is established in the United States, certain transaction-related data may be transferred outside the European Union. These transfers are carried out within the framework of the guarantees provided by the GDPR (standard contractual clauses of the European Commission or equivalent mechanisms).
7. Your rights
In accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act, you have the following rights:
- Right of access: obtain confirmation of whether your data is being processed and receive a copy.
- Right of rectification: correct inaccurate or incomplete data.
- Right to erasure: request the deletion of your data, subject to legal retention obligations.
- Right to object: object to the processing of your data on legitimate grounds.
- Right to restriction: request temporary suspension of processing.
- Right to portability: receive your data in a structured and reusable format.
- Right to withdraw consent at any time, where processing is based on consent.
These rights can be exercised by contacting the publisher via the contact form. A response will be provided within a maximum of one month.
In case of a response deemed unsatisfactory, you may lodge a complaint with the French data protection authority (CNIL): https://www.cnil.fr.
8. Security
The publisher implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss or disclosure. The site is delivered exclusively over HTTPS, and emails are exchanged via professional providers using encrypted protocols.
9. Minors
The products and services marketed are intended for adult traders. The publisher does not knowingly collect data concerning minors. If a parent or legal guardian finds that a minor has provided us with data, they may request its deletion via the contact form.
10. Policy modification
This policy may be modified at any time to reflect regulatory or technical developments on the site (in particular when deploying the analytics tool). The date of the last update appears at the top of the document. Customers with an active license will be informed of any substantial modification.