Privacy Policy

Updated: September 26, 2026

1. DATA CONTROLLER

For the purposes of the General Data Protection Regulation (GDPR), the data controller is: RIFT, SAS registered at 4B rue de l'Abreuvoir, 91540 Mennecy, France RCS Évry — SIREN 983 796 830 Contact: contact@rift.aero

No Data Protection Officer (DPO) has been appointed.

2. DATA COLLECTED

2.1 DATA YOU PROVIDE DIRECTLY

If you contact us through the form available on the Site, we process the data you voluntarily provide: full name, email address, phone number, subject, type of enquiry, and the content of your message. Submission requires your explicit consent, given by ticking the dedicated checkbox.

Submissions are transmitted directly by email to our internal mailboxes. They are not stored in any database, customer relationship management platform, or third-party form service.

2.2 DATA COLLECTED AUTOMATICALLY

Browsing the Site generates technical data recorded by our hosting infrastructure: IP address, browser type and version, operating system, device type, referring page, date and time of request. These server-side logs are kept for the purposes of operating, securing and maintaining the Site.

We do not use web analytics, advertising, or remarketing technologies on the Site. We do not build visitor profiles.

We do not knowingly collect data from minors. The Site is intended for a professional audience and is not directed at children. If we become aware that personal data has been submitted by a minor, we will delete it without undue delay.

We do not collect special categories of personal data within the meaning of Article 9 GDPR.

3. PURPOSES AND LEGAL BASIS

  • Responding to enquiries submitted through the Site (Legal basis: Consent)
  • Operating, securing and maintaining the Site (Legal basis: Legitimate interest)
  • Preventing abuse, intrusion attempts and automated attacks (Legal basis: Legitimate interest)
  • Complying with legal and regulatory obligations (Legal basis: Legal obligation)

4. RETENTION PERIODS

  • Data submitted through the contact form: up to 3 years from the last interaction, unless a longer period is required by law.
  • Technical and security log data: up to 13 months, in line with CNIL guidance.
  • Data retained under a legal obligation: for the period imposed by the applicable regulation.

5. RECIPIENTS OF THE DATA

  • Personal data may be disclosed to:
    • Authorized personnel within RIFT, on a need-to-know basis.
    • Technical service providers acting as processors on our instructions:
      • Hosting of the Site: Vercel Inc. (United States)
      • Email hosting and delivery of form submissions: our business email provider
    • Competent authorities, where required by law or legal process.
  • We do not sell, rent or trade personal data.

6. FONTS AND THIRD-PARTY RESOURCES

All typefaces used on the Site are served from our own infrastructure. Font files are retrieved at build time and delivered as static assets, so your browser never contacts an external font provider and no data is transmitted to a third party for that purpose.

All other content, including images, videos and 3D models, is served directly from the Site. The Site loads no third-party script, tracking pixel, embedded player, map, captcha or external widget. Links to our social media profiles are ordinary hyperlinks: no data is transmitted to those platforms unless you actively click on them.

7. INTERNATIONAL TRANSFERS

Our hosting provider is established outside the European Economic Area, in the United States. Transfers are governed by the European Commission's Standard Contractual Clauses or by another transfer mechanism recognized under Chapter V of the GDPR, together with appropriate technical and organizational safeguards.

8. YOUR RIGHTS

In accordance with the GDPR and the French Data Protection Act (Loi Informatique et Libertés), you have the right to:

  • Access your personal data.
  • Obtain rectification of inaccurate or incomplete data.
  • Request erasure of your data.
  • Request restriction of, or object to, processing.
  • Receive your data in a portable format.
  • Withdraw your consent at any time, where processing is based on consent.

9. SECURITY

We implement appropriate technical and organizational measures to protect personal data, including encryption of communications in transit (SSL/TLS), access restricted to authorized personnel, infrastructure-level protection against automated attacks, and the use of providers offering recognized security guarantees.

No method of transmission or storage over the internet is entirely secure, and we cannot guarantee absolute security.

10. CHANGES TO THIS POLICY

This Privacy Policy may be updated to reflect changes in our practices or in applicable law. The "Last updated" date at the top of this page indicates the date of the most recent version. We encourage you to consult this page periodically.

11. COOKIE POLICY

11.1 WHAT ARE COOKIES?

Cookies are small text files stored on your device when you visit a website. They allow a site to operate correctly, to maintain security, and in some cases to measure how it is used.

11.2 COOKIES USED ON THIS SITE

The Site uses no cookies other than those strictly necessary to its operation and to its security, such as session handling, load balancing and protection against automated abuse applied by our hosting provider.

No analytics, advertising, remarketing or social media tracking cookie is used on the Site, and no browsing profile is built.

Because the Site sets no cookie requiring consent, no consent banner is displayed. Strictly necessary cookies are exempt from the prior consent requirement under Article 82 of the French Data Protection Act and CNIL guidance.

The Site makes no use of local storage or session storage for tracking purposes.

11.3 THIRD-PARTY SERVICES

Our hosting provider, Vercel Inc., may set strictly necessary cookies for hosting and security purposes. No other third party sets cookies through the Site.

11.4 RETENTION

Where such cookies are set, they are limited to the duration of the browsing session or to the retention period defined by the provider for security purposes, which does not exceed 13 months.

11.5 MANAGING COOKIES

You can manage or disable cookies through your browser settings. Disabling strictly necessary cookies may affect the proper functioning of the Site.

11.6 FUTURE CHANGES

Should analytics or any other non-essential technology be introduced on the Site, this policy will be updated beforehand and, where legally required, a consent mechanism will be implemented before any such technology is activated.

12. GOVERNING LAW AND JURISDICTION

This Privacy Policy is governed by French law.

In the event of a dispute, the parties shall first attempt to reach an amicable resolution. Failing agreement, and subject to any mandatory rules of jurisdiction applicable to consumers, the competent courts shall be those within the jurisdiction of the Court of Appeal of Paris.

See also our Terms of Use.