Last updated: 5 June 2026
PPWR Connect is a service operated by VEORIA, a French SAS with share capital of €3,000, registered office at 45 Grande Rue, 72450 Montfort-le-Gesnois, France, registered with the Le Mans Trade and Companies Register under no. 922 240 510 (ColorLoop is a product/brand operated by VEORIA).
Publication director: François-Xavier DAVID.
Privacy contact: privacy@veoria.fr
VEORIA develops and operates PPWR Connect and remains the sole data controller of the data processed through it. It belongs to a group held by the same shareholder (Rutherford and Studio de la Roche); their limited intra-group access is described in § 5.
When you create an account or use the application:
When you purchase a subscription:
When you visit the site (without an account):
vera-anon) to prevent abuse.| Purpose | Legal basis (GDPR) |
|---|---|
| Create and manage your account, provide the service | Performance of contract (Art. 6.1.b) |
| Billing and subscriptions | Performance of contract / legal obligation |
| Security, abuse prevention, audit log | Legitimate interest (Art. 6.1.f) |
| Audience measurement (analytics) and session recordings | Consent (Art. 6.1.a) |
| AI assistant (Vera) | Performance of contract / legitimate interest |
| Service emails (confirmation, security) | Performance of contract |
| Marketing communications (newsletter) | Consent |
We use providers acting as processors, under contract (DPA):
| Provider | Role | Location |
|---|---|---|
| Supabase | Database, authentication, storage | EU/UK (London) |
| Vercel | Site hosting / CDN | European Union |
| Stripe | Payments and subscriptions | USA (covered by Standard Contractual Clauses / DPF) |
| PostHog | Audience measurement | European Union |
| Groq | AI assistant (processing of chat questions) | USA (covered by Standard Contractual Clauses) |
VEORIA develops and operates PPWR Connect and is the sole data controller. It belongs to a group held by the same shareholder whose other entities may access your personal data for defined purposes: Rutherford (SAS, SIREN 938 980 877) for commercial and sales activities, and Studio de la Roche (SASU, SIREN 919 095 364) for marketing. Both are established at 45 Grande Rue, 72450 Montfort-le-Gesnois, France. Marketing communications are sent only with your consent; commercial use relies on our legitimate interest in managing the customer relationship (see the legal bases in § 3). Access is granted under confidentiality commitments, and all group entities are located in the European Union, so this involves no transfer outside the EU.
We never sell your data.
Some providers (Stripe, Groq) are located in the United States. These transfers are covered by the European Commission's Standard Contractual Clauses and/or membership of the Data Privacy Framework.
Important: do not enter personal or confidential data into the Vera assistant, as your messages are transmitted to our AI provider.
Under the GDPR, you have the rights of access, rectification, erasure, restriction, objection and portability.
My account → Security → Delete account.My account → Security → Export my data.You can withdraw your consent to analytics at any time in Settings → Privacy.
You have the right to lodge a complaint with the French supervisory authority, the CNIL (www.cnil.fr).
See our Cookie Policy for details of the cookies used and how to manage your consent.
We implement technical and organisational measures: encryption in transit, access partitioning via database row-level security (RLS), available two-factor authentication, access logging.
We may update this policy. The last-updated date appears at the top of the page.