Privacy Policy

INEYA Studio is committed to protecting your personal data. This policy explains what data we process on Tendveo (https://tendveo.com), why, on what legal basis, with whom it is shared, how long it is kept and what your rights are.

1. Data controller

The data controller is INEYA Studio, a simplified joint-stock company with a sole shareholder (SASU) and share capital of €500, registered office at 36 rue de Wattignies, 75012 Paris, France, registered with the Paris Trade and Companies Register under number 107 137 994. For any data-related request: contact@ineya.studio (or by post to the registered office).

2. Data we process

Depending on your use of the site, we may process:

• Account and identification data: e-mail address and, where applicable, a password stored in hashed form;
• Trade profile and watch preferences: description of your activity, sectors, CPV codes, areas and départements watched, favourites and "relevant / not for me" feedback;
• Contact data: information you submit through the forms (message, posting of a private tender, enquiry);
• Technical data: IP address, browser type, pages viewed, timestamps and security logs;
• Cookies and trackers: see section 7.

Tendveo stores no card data; should a paid subscription be offered, payments would be handled by a dedicated payment provider, without your card numbers passing through our servers. We do not collect special-category data (Article 9 GDPR) unless you voluntarily include it in your content.

3. Purposes and legal bases

4. Recipients and processors

Your data is accessible to authorised INEYA Studio staff and to our processors, selected for their security guarantees and bound by contract under Article 28 GDPR:

• OVH SAS (France, European Union): infrastructure hosting;
• Proprietary, cookieless, self-hosted audience measurement (France): usage statistics, with no advertising cookie and respecting the "Do Not Track" signal;
• Sentry (Functional Software, Inc., United States): technical monitoring and error tracking, governed by Standard Contractual Clauses.

We never sell or rent your personal data. It may be disclosed to an authority where required by law.

5. Transfers outside the EU

Our servers and hosting are located in the European Union. Where a processor involves a transfer outside the EU (notably Sentry error tracking), it is governed by appropriate safeguards (European Commission Standard Contractual Clauses and/or the EU-US Data Privacy Framework), a copy of which is available on request.

6. Retention periods

• Account and service data: for the duration of the relationship, then intermediate archiving as required by law (notably 10 years for accounting records);
• Contact messages and private tenders: up to 3 years from the last contact;
• Technical data and logs: up to 12 months;
• Trackers: 13 months maximum for audience-measurement trackers.

Beyond these periods, your data is deleted or anonymised. Deleting a radar erases the associated watch profile.

7. Cookies and trackers

The site uses strictly necessary cookies (session, security, preferences) that do not require consent. Tendveo's audience measurement is cookieless and respects the "Do Not Track" signal. Any non-essential tracker would be set only after your consent has been obtained, which you may accept, refuse or withdraw at any time via your browser. Refusing non-essential trackers does not prevent access to the site.

8. Security

INEYA Studio implements appropriate technical and organisational measures to protect your data against loss, unauthorised access, disclosure or alteration: password hashing, encrypted communications (HTTPS/TLS), access control, per-account data isolation, logging and backups.

9. Your rights

Under the GDPR and the French Data Protection Act, you have the rights of access, rectification, erasure, objection, restriction and portability, the right to withdraw your consent at any time, and to set directives regarding your data after your death. To exercise them, e-mail contact@ineya.studio; we may request proof of identity in case of reasonable doubt. You may also lodge a complaint with the CNIL (French data protection authority, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr).

10. Source of the data displayed

The public-contract notices displayed on Tendveo come from open public data (BOAMP and DILA for France, TED for Europe), reused under Open Licence 2.0 (Etalab), with source and date cited. These notices remain the property of their issuers and are not personal data relating to you.

11. Minors and changes

The site is not intended for children under 15 and we do not knowingly collect their data. This policy may be updated to reflect changes to the service or regulations; the version in force is the one published on this page. Last updated: 2026.