This English translation is provided for information only. Only the French version is legally binding.
Last updated: 15/10/2026.
This policy explains which personal data we process when you use erp-diagnostic.fr, why, for how long, and what your rights are under the General Data Protection Regulation (GDPR).
Data controller
Nova Onada SLU, a company under Andorran law, Pack Guillemo, AD500 Andorra la Vella (Principality of Andorra) — contact: contact@erp-diagnostic.fr.
Nova Onada SLU is established in Andorra, a country recognised by the European Commission as providing an adequate level of data protection. The GDPR applies to processing related to offering our services to people in the European Union.
Data processed
- Order and invoicing: last name, first name, billing address, email, phone number.
- Report: address or cadastral reference of the property, answers to the questionnaire (type of transaction, name of the seller or landlord, name of the buyer or tenant, place of signing, statements on losses).
- Customer account: login details, history of reports and credits.
- Payment: handled by PayPal; we neither receive nor store your bank card numbers.
- Browsing: technical data and, with your consent, audience measurement.
Purposes and legal bases
- Preparing and sending you your ERP and ENSA report, managing your account and your order: performance of the contract.
- Invoicing and accounting: legal obligation.
- Payment security and fraud prevention (anti-robot check at payment): legitimate interest.
- Audience measurement and advertising: your consent, which you can withdraw at any time.
Recipients and processors
- LWS (website hosting, France).
- Google (Google Apps Script and Google Drive): generation and temporary storage of the PDF documents; Google Analytics and Google advertising services only if you accept them.
- PayPal: payment.
- Public services consulted to prepare the report: Base Adresse Nationale, IGN (land registry and aerial photographs) and public natural and technological risk databases. Only the address or cadastral reference of the property is sent to them.
Some of these providers may process data outside the European Union; these transfers are covered by the safeguards they offer (adequacy decisions or the European Commission’s standard contractual clauses).
Retention periods
- Reports and PDF documents: 7 months after their generation, then automatic deletion.
- Orders and invoices: 10 years (accounting obligation).
- Customer account: until you ask for it to be deleted.
- Cookie choices: 6 months.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, and the right to withdraw your consent at any time. Write to contact@erp-diagnostic.fr. You can also lodge a complaint with the CNIL (www.cnil.fr) or the Andorran Data Protection Agency (APDA).
Cookies
Cookies that are strictly necessary for the site to work are set without consent. Others are only set after your consent, obtained through the banner shown on your first visit. Refusing is as easy as accepting, and you can change your mind at any time via the “Manage cookies” link at the bottom of the page.
| Cookie / service | Purpose | Duration | Consent |
|---|---|---|---|
| WordPress, WooCommerce (session, basket, login) | Operation of the site, the basket and the account | Session to 2 days (basket), depending on your login | Not required (necessary) |
| reconsent | Remembering your cookie choices | 6 months | Not required (necessary) |
| PayPal, Google reCAPTCHA anti-robot check | Secure payment and fraud prevention, on the payment page | Depending on these services | Not required (necessary for payment) |
| Google Analytics (_ga, _ga_*) | Audience measurement | Up to 2 years (Google’s default setting) | Yes |
| Google (advertising) | Advertising and ad measurement | Depending on Google | Yes |