Updated: March 9, 2026
Privacy Policy
This policy explains which personal data is processed through the website, for what purposes and how you can exercise your rights.
Data controller
Collected data
- -Identification and contact data entered in the form: name, company, email, phone number, sector, city, need and message.
- -Technical data strictly necessary for form security and attribution: source IP address, HTTP metadata, form-start timestamp, anti-spam honeypot field, landing page, conversion page, referrer and UTM parameters.
- -If you allow audience measurement, navigation and performance data sent to Cloudflare Web Analytics and Vercel Analytics, such as the visited page, referrer and certain browser performance indicators.
Purposes and legal bases
- -Answer your requests and organize a commercial discussion, demo or quotation. Legal basis: pre-contractual steps taken at your request and legitimate interest in handling a B2B request.
- -Secure the form, prevent spam and limit abuse. Legal basis: the publisher's legitimate interest in protecting the site and its infrastructure.
- -Keep a minimal record of received requests for commercial follow-up, proof of exchanges and acquisition-channel analysis. Legal basis: legitimate interest.
- -Measure audience and site performance if you have consented to this category. Legal basis: your consent.
Recipients and hosting
Data is accessible only to authorized persons at Pentagone and, within the scope of their technical duties, to the hosting provider, the database provider configured by Pentagone and, if audience measurement is enabled, to Cloudflare and Vercel for performance and traffic data. It is neither sold nor disclosed to third parties for advertising purposes.
Vercel Inc.
440 N Barranca Avenue #4133
Covina, CA 91723
United States
The technical hosting of the site is provided by Vercel. The application database is hosted by Supabase. Audience measurement, if you allow it, is provided by Cloudflare Web Analytics and Vercel Analytics. Depending on the technical configuration and the visitor's location, some operations may involve flows outside the European Economic Area. Where that happens, they rely on the contractual safeguards made available by the providers.
Retention periods
- -Contact requests: Up to 3 years from receipt of the request if no contractual relationship is entered into.
- -Anti-abuse and rate-limiting data: Up to 15 minutes in memory for rate limiting and abuse detection.
- -If a contractual relationship is entered into afterwards, the statutory retention periods applicable to commercial and accounting documents take over in the relevant contractual documents.
Your rights
You may request access, rectification, erasure, restriction of processing, objection on legitimate grounds and, where applicable, portability of your data. You may also define instructions regarding the handling of your data after your death.
To exercise your rights, write to support@pentagone.org. If an issue remains unresolved, you may also lodge a complaint with the CNIL.
Security measures
The site applies input-format checks, anti-spam protection, origin verification and rate limiting on the contact form. Database writes are performed server-side with an admin key that is never exposed to the browser.
Cookies
The site uses one technical cookie to remember your privacy preferences. No advertising cookie is active. If you allow it, Cloudflare Web Analytics and Vercel Analytics load their audience-measurement scripts. The dedicated policy details the planned categories and the way you can manage your choices.
View the cookie policy