Privacy and personal data
Last updated: 30 May 2026
Who processes your data
For data linked to your account and use of the site app.roddier.pro, the data controller is Julien Roddier (rodap), whose contact details appear in the legal notices.
For the data you manage in the application (your learners, your staff), you are the data controller and rodap acts as processor within the meaning of Article 28 of the GDPR: rodap processes this data only on your instructions and to provide you with the service.
Data collected and purposes
- Account (name, email, organisation) — creation and management of access, legal basis: performance of the contract;
- Fees and billing data (amounts, history) — billing, legal bases: contract and legal accounting obligation. No online payment is currently offered: rodap does not collect or store bank details. If a payment provider is introduced in future, it will be named in the register of processors and this page will be updated;
- Technical usage data (connection logs, security) — proper operation and security of the service, legal basis: legitimate interests;
- Business data entered in the application — processed as a processor, under your responsibility.
Recipients and processors
Your data is never sold. It is accessible to authorised staff of rodap and its strictly necessary technical processors:
- Hosting : OVH SAS (data centres located in France) ;
- SMS sending : delivery provider located in the European Union, for notifications and reminders (if you enable them).
The detailed and up-to-date list of our processors is available on request at the contact address in the legal notices.
Location and transfers
Your data is hosted and processed in the European Union (mainly in France). No transfer of your personal data is made outside the European Union.
Security
rodap applies appropriate technical and organisational measures: protection of exchanges, securing the most sensitive data, strict segregation between customer organisations, audit log of sensitive actions, and access control.
Retention periods
Account data is kept for the duration of the contractual relationship. Accounting records (invoices) are kept for 10 years in accordance with the Commercial Code. Business data follows the retention periods defined with you; at the end, it is anonymised or deleted.
Your rights
In accordance with the GDPR, you have the rights of access, rectification, erasure, restriction, objection and portability. You can exercise them:
- from your account, page My data (view, export, account deletion);
- or by writing to the contact address in the legal notices.
You may also lodge a complaint with the CNIL (cnil.fr).
Cookies
rodap uses only cookies strictly necessary for operation (login session, light/dark display preference). No advertising or third-party tracking cookies are set; no prior consent is therefore required.