Privacy & Cookie Policy.

Privacy Policy

Last update: April 2026

1. Subject

This privacy policy (hereinafter the “Privacy Policy”) illustrates the commitment by IYTRO, a Simplified Joint-Stock Company (SAS) with a share capital of €1,000, registered with the Paris Trade and Companies Register under number 844 839 316, with its registered office located at 20 Boulevard Montmartre, 75009 Paris (hereinafter the “Company”), to respect the privacy and protection of personal data of the website: https://www.iytro.io (hereinafter the “Website”).

The Website allows you:

• to obtain information about services provided by the Company and its activity;
• to make an appointment with a CMO of the Company;
• to have access to the blogs and articles provided by the Company;
• to contact the Company.

2. Processing of your personal data

2.1. Description of the processing of your personal data

In accordance with applicable laws and regulations, the Company, acting as data controller, collects personal data from you when you visit the Website.

In order to respond to your contact requests, the Company collects the following personal data:

• your first name;
• your last name;
• your e-mail address;
• your company name;
• any additional information you would like to share with the Company in the message.

In order to respond to your request for an appointment with a CMO, the Company collects the following personal data:

• your first name;
• your last name;
• your e-mail address.

When you connect to the Website, the Company also collects the following personal data:

• connection logs;
• connection data;
• IP address.

The Company uses your personal data for the following purposes:

• Receive and manage contact requests. Legal basis: the processing is based on your consent. Retention period: personal data are retained for a period of three years from the reception of the contact request.
• Appointment with a CMO. Legal basis: the processing is based on your consent. Retention period: personal data are retained for a period of three years from the last contact with you or until you withdraw your consent.
• Management of requests for rights of access, portability, erasure, restriction of processing, rectification and opposition. Legal basis: the processing is necessary to respond to your requests to exercise your rights and is based on your consent. Retention period: personal data shall be retained for one year from the date of your request to exercise your right(s).
• Management of requests for the right to object to commercial prospecting. Legal basis: the processing is necessary to respond to the request to exercise the right to object. Retention period: personal data shall be retained for three years from the time you exercise your right to object.

2.2. Recipients / transfers of your personal data

Access to your personal data is restricted to only those persons who need to process your personal data in order to fulfil the specific purpose of the processing.

Your personal data may also be disclosed by the Company to third parties:

• if the law or a legal procedure requires the Company to share your personal data;
• in response to a request from a public or judicial authority (in particular in the event of a judicial requisition);
• when the Company considers that the transmission of your personal data is necessary or appropriate to ensure the safety of individuals or to protect the public.

Some of your personal data may be transmitted to our hosting partner Webflow, which hosts the Website in the USA.

The Company also uses the Cal.com, Inc. solution to manage appointments with CMOs.

Your personal data may therefore be subject to cross-border transfers outside the European Economic Area.

The Company must ensure the same level of protection of your personal data as provided by the GDPR. The Company has therefore concluded, with companies located outside the European Economic Area, the Standard Contractual Clauses, amended in June 2021 by the European Commission, and implemented the additional security guarantees as set out in the judgment of the Court of Justice of the European Union (CJEU) of July 16, 2020 (known as “Schrems II”).

You can access social media pages by clicking on the sharing buttons provided for this purpose. The collection of information by social media sharing buttons is subject to the privacy policies of these third parties. We invite you to read the policies of these social media platforms to understand how your personal data may be used.

2.3. Security of personal data

The Company ensures the security of your personal data by implementing appropriate technical and organizational measures to guarantee a level of security appropriate to the risk:

• the pseudonymization and encryption of your personal data;
• any means to ensure the constant confidentiality, integrity, availability and resilience of processing systems and services;
• any means to restore the availability of and access to personal data;
• a procedure to regularly test, analyze and evaluate the effectiveness of the technical and organizational measures in place.

2.4. Retention of your personal data

Your personal data should be retained only for the period required to fulfil the purpose for which the Company stores such data, to meet your needs, to fulfil its legal or regulatory obligations, to enable it to exercise its rights and/or for statistical or historical purposes.

At the end of the above-mentioned periods, your personal data will be deleted, or the Company will anonymize it.

2.5. Your rights regarding your personal data

You have the following rights regarding your personal data:

• Right of access and rectification. You may request access to your personal data. You may also request that inaccurate personal data be modified or that incomplete data be completed. Furthermore, you have the right to know the origin of your personal data.
• Right to erasure. You may request the erasure of your personal data if: (1) the data is no longer necessary for the purposes for which it was collected and processed; (2) you have chosen to withdraw your consent (where consent has been collected as the legal basis for processing), this withdrawal not impacting the lawfulness of the processing before its implementation; (3) you have objected to the processing of your personal data; (4) the data have been processed unlawfully; (5) the data should be deleted to comply with a legal obligation; or (6) such erasure is required to ensure compliance with current legislation, in particular with regard to the retention periods applicable to the collected personal data.
• Right to object. You may object to the processing of your personal data in accordance with the legal obligations imposed on the Company.
• Right to restriction of processing. You may also request a restriction of the processing of your personal data if: (1) you contest the accuracy of such data; (2) the Company no longer needs this data for processing purposes; and (3) you have objected to the processing of your personal data.
• Right not to be subject to a decision based exclusively on automated data processing. You shall not be the subject of a decision based exclusively on automated processing that produces legal effects concerning you or significantly affects you, particularly based on profiling.
• Right to portability. You may request that the Company provides you with your personal data in a structured, commonly used, machine-readable format, or request that this data be transmitted directly to another data controller, as long as: (1) the processing is based on your consent; and (2) it is carried out by automated means.
• Right to give directives on the processing of your personal data after your death. Pursuant to Article 85 of the French Data Protection Act of 6 January 1978 as amended, you can give directives on the exercise of your rights under this section after your death (in particular on the duration of the retention of your personal data, its deletion and/or its communication), as well as designate a person responsible for the exercise of these rights. In the absence of such directives, the Company will grant the requests of your heirs, as set out in Article 85(II) of the French Data Protection Act.
• Right to withdraw your consent. You can withdraw your consent to the processing of your personal data at any time. The withdrawal of your consent only applies to future processing and does not affect the lawfulness of any processing carried out by the Company based on your consent before your withdrawal, or the lawfulness of any processing based on another legal basis, such as the execution of a contract between you and the Company.
• Right to make a complaint to a supervisory authority. If you have any concerns or appeals regarding the protection of your personal data, you have the right to make a complaint to the Commission Nationale de l’Informatique et des Libertés (CNIL) via the following link: Plaintes en ligne | CNIL. The CNIL can also be contacted at the following address: 3 Place de Fontenoy, 75007 Paris – phone: 01 53 73 22 22. You are invited to inform the Company in advance so that the Company can process the request and attempt to find an amicable solution.

You may exercise your above-mentioned rights and/or ask any questions concerning the processing of your personal data by the Company using the following e-mail address: dpo@2c.group, or by post at the following address: IYTRO, 20 Boulevard Montmartre, 75009 Paris.

In order to process the request as quickly as possible, you may indicate in your request the purpose and the context in which your personal data was collected by the Company.

The Company may ask you to provide a copy of both sides of a valid identity document if there is a reasonable doubt about your identity. This copy will be deleted by the Company once your request has been granted. The Company may retain a copy of your identification for the sole purpose of establishing proof in the event of a dispute with you.

2.6. Links to third-party sites

In order to improve the quality of the Website, the Company may include on the Website links to third-party websites. These websites have a privacy policy that is different from and independent of that of the Company. You are invited to consult the privacy policy of the third-party websites you visit.

2.7. Language

This Privacy Policy is written in English for informational purposes.

2.8. Cookies

The provisions relating to the deposit of cookies on the Website are contained in the Cookie Policy below.

2.9. Modification of the Privacy Policy

The Company may make changes to this Privacy Policy at any time. The Company recommends that you check this page regularly, referring to the date of the last modification. In the event of a major change to the present Privacy Policy, the Company will notify you of such changes.

Cookie Policy

Last update: April 2026

This Cookie Policy is provided by IYTRO, a Simplified Joint-Stock Company (SAS) with a share capital of €1,000, registered with the Paris Trade and Companies Register under number 844 839 316, with its registered office located at 20 Boulevard Montmartre, 75009 Paris (hereinafter the “Company”). The cookie policy (hereinafter the “Cookie Policy”) describes the conditions under which the Company uses cookies on the website.

The Cookie Policy informs you about your rights and choices regarding the placement of cookies during the use of the website: https://www.iytro.io/ (hereinafter the “Website”), provided by the Company.

1. Object

In accordance with Article 82 of the French Data Protection Act of 6 January 1978 as amended, taking into consideration the provisions of Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector, your consent as a user must be obtained prior to any action aimed at storing information or accessing information on your device.

In accordance with the provisions of Articles 4(11) and 7 of the GDPR relating to the conditions applicable to consent, the CNIL adopted Deliberation No. 2020-091 of 17 September 2020 adopting guidelines relating to the application of Article 82 of the Act of 6 January 1978 as amended to read and write operations on a user’s device (in particular “cookies and other tracers”), as well as Deliberation No. 2020-092 of 17 September 2020 adopting a recommendation proposing practical methods of compliance in the event of recourse to “cookies and other tracers”, presenting in particular examples and good practices of certain methods of collecting consent and implementing tracers not subject to it.

2. What is a cookie?

Cookies are small files containing various textual information, usually consisting of letters and numbers. They are sent to your device (computer, tablet, smartphone, etc.) via the browser, by the website you use.

This operation makes it possible to recognize your devices as soon as the connection is established between the Website’s server and your browser. The main purpose of a cookie is simply to allow the Website’s server to adapt the content of Internet pages to your personal preferences, in order to customize your visit to the Website.

There are the following types of cookies:

• Session cookies: these cookies are temporary and stored in the cookie file of your browser when you navigate through a website. These cookies are essential and help the Website to function properly, as well as to recognize users and information.
• Permanent cookies: the Website may use permanent cookies to enhance your experience (e.g. by providing enhanced navigation). These cookies remain in the cookie file of your browser for a longer period. The retention period depends on the configuration of the Internet browser. Permanent cookies allow the transmission of information to a web server each time you visit the Website, and can be used, for example, to remember your choices and preferences for a website, or to target advertising. Permanent cookies are also known as tracking cookies.
• First-party cookies: these cookies are sent to your device by the Website at the time of your visit, in order to improve your experience.
• Third-party cookies: these cookies are sent to your device by third parties, who may be the Company’s partners. A third-party cookie is a file embedded in a browser by a website other than the one you are visiting, in order to store information locally and track your journey across multiple websites. These cookies are therefore not hosted on the Website.

These cookies are classified according to several types: essential cookies used for technical purposes, audience measurement cookies, advertising cookies, social network sharing cookies, etc.

3. What are cookies used for?

Cookies are used for different purposes:

• Essential cookies: these cookies are required for the normal operation of the Website and allow access to secure areas of the Website such as shopping carts, the user’s personal space, etc.
• Analytical or performance cookies: these cookies allow the Company to monitor the use and performance of the Website and to improve its operation. They allow monitoring, for example, of the most visited pages of the Website.
• Functional cookies: these cookies make it possible to remember the choices you have made in order to improve your experience on the Website. They are used, for example, to recognize you when you return to the Website, to remember your choices, the items you put in the shopping cart, etc., and to provide enhanced and customized details on preferences and consumption habits.
• Targeting and advertising cookies: these cookies collect information on relevant topics that may interest you and present advertisements based on your interests. These cookies store information about your visit to the Website, the pages visited and the links followed, as well as the user’s navigation outside the Website. They are also used to limit the number of times you are shown the same advertisement and to measure the effectiveness of advertising campaigns. They are generally placed on the Website by third parties with the Company’s permission.

4. What cookies are present on the Website?

The cookies placed by the Company on the Website are the following:

• __cf_bm – permanent cookie, essential, deposited by IYTRO, lifetime: 30 minutes. This cookie is used to read and filter requests from computer bots (robots).
• __cfruid – session cookie, essential, deposited by IYTRO, expires at the end of the browsing session. This cookie is used to identify that traffic on the Website is secure and safe.
• fs-cc – permanent cookie, essential, deposited by IYTRO, lifetime: 6 months. This cookie is used to store the user’s consent regarding cookies.

The third-party cookies placed on the Website are the following:

• __hssc – permanent cookie, analytical, deposited by HubSpot, lifetime: 30 minutes. This cookie is used to store anonymous statistics about the Website.
• __hssrc – session cookie, analytical, deposited by HubSpot, expires at the end of the browsing session. This cookie is used to generate statistical data on the Website and stores a unique identifier for each User on the Website.
• hubspotutk – permanent cookie, functional, deposited by HubSpot, lifetime: 6 months. This cookie is used to store the identity and track the User’s visit through the Website.
• __cfruid – session cookie, essential, deposited by Cloudflare, expires at the end of the browsing session. This cookie is used to identify that traffic on the Website is secure and safe.
• __hstc – permanent cookie, analytical, deposited by HubSpot, lifetime: 13 months. This cookie is used to remember the time of the User’s visit to the Website.
• _ga – permanent cookie, analytical, deposited by Google, lifetime: 13 months. This cookie allows recording the number of views on the pages of the Website and thus determining the most visited pages of the Website.
• _ga_id* – permanent cookie, analytical, deposited by Google, lifetime: 13 months. This cookie allows storing a unique user identifier (to recognize the users of the Website).
• _gcl_au – permanent cookie, advertising, deposited by Google, lifetime: 3 months. This cookie is used to track the effectiveness of advertisements.

The Company cannot guarantee the completeness of the list of cookies mentioned above. The Company should update the list on a regular basis and will inform you in the event of major changes concerning the deposit of cookies on the Website.

5. What personal data do cookies collect?

The cookies used on the Website collect the following personal data:

• IP address;
• web browser;
• date and time of the visit;
• operating system.

6. How long is the personal data collected by cookies retained?

Personal data collected through cookies on the Website shall be retained for a maximum period of thirteen (13) months. Cookies are retained for a maximum of thirteen (13) months. The choice to accept or to reject the deposit of cookies will be retained for a period of six (6) months.

7. What are your options?

7.1. Cookie banner

During the first connection to the Website, an alert message (banner) informs you about the use of cookies on the Website and invites you to accept or to refuse the use of these cookies.

Acceptance or refusal of the use of tracers has no effect on your navigation on the Website, with the exception of the cookies and tracers that are essential for the operation of the Website or for an online communication service which you have requested.

The Website also uses cookies to ensure access to and important features of the Website (essential cookies). These cookies do not require your consent. You are informed that acceptance of these cookies is a necessary condition to access and use the Website and, in the event of refusal, you are exposed to potentially negative effects (i.e. normal navigation on the Website not guaranteed).

The alert message shall at least include:

• the identity of the data controller(s);
• the precise purpose of the data trackers;
• the possibility to withdraw your consent at any time.

In accordance with CNIL Deliberation No. 2020-092 of 17 September 2020 adopting a recommendation proposing practical compliance procedures in the event of recourse to cookies, you must be able to accept or refuse the use of cookies with the same degree of simplicity. For this purpose, you have the option of setting your browser to accept or decline cookies. For this purpose, you can click on a Refuse button to refuse the deposit of cookies on your browser, which has the same format and is placed at the same level as the Accept button to accept such a deposit.

In order to obtain free, informed and clear consent, the banner will not disappear until you accept or refuse the cookies. No cookies will be deposited on your browser until you accept or decline cookies.

Unless you have provided prior consent, cookies will not be deposited if:

• you connect to the Website (home page or directly to another page of the Website) and do not continue browsing: a simple absence of action cannot be interpreted as a manifestation of will;
• you click on the link integrated into the banner allowing you to set the parameters of the cookies and, if necessary, to refuse the deposit of cookies.

7.2. Setup via your web browser

You may accept the use of cookies or choose to disable them at any time. The settings are usually made from the browser. The latter can be set to indicate which cookies are placed on the device and to ask whether to accept them or not. The configuration of each browser is different. It is described in the browser’s help/information menu, which will help you to find out how to modify your wishes with regard to cookies.

Firefox:Cookies – Information that websites store on your computer

• Click the menu button and select “Settings”.
• Select the Privacy & Security panel.
• In the History section, set “Firefox will” to “Use custom settings for history”.
• Uncheck the “Accept cookies” box.
• All changes made will be automatically saved.

Microsoft Edge:Delete and manage cookies

• In Internet Explorer, select the “Tools” button, and then select Internet options.
• Select the Privacy tab and, under Settings, move the slider up to block all cookies or down to allow all cookies, then press OK.

Google Chrome:Clear, enable and manage cookies in Chrome

• Select the Chrome menu icon.
• Select “Settings”.
• At the bottom of the page, select “Show advanced settings”.
• Under “Privacy and security”, click Website settings.
• To turn off cookies, turn off “Allow sites to save and read cookie data”.
• Press OK.

Safari:Legal – Use of Cookies

• Click on “Settings” > “Safari” > “Privacy” > “Cookies and website data”.
• Clear the history and cookies from Safari on your iPhone, iPad or iPod touch and Manage cookies and website data in Safari on Mac.

Opera:Opera Web preferences – Opera Help

8. Modifications to the Cookie Policy

The Company may modify this policy at any time. The Company therefore advises you to regularly consult this page of the Website. In the event of a major change to this Cookie Policy, the Company will notify you of such changes.

9. More information on cookies

For more information on the use of cookies, you may consult the CNIL website: https://www.cnil.fr/fr/cookies-et-autres-traceurs/comment-se-proteger/maitriser-votre-navigateur

10. Contact information

For any questions relating to this Cookie Policy, you may contact the Company at the following e-mail address: dpo@2c.group, or by post at the following address: IYTRO, 20 Boulevard Montmartre, 75009 Paris.