Privacy Policy

This document describes how personal data is processed on strannik.online, in accordance with the EU General Data Protection Regulation (GDPR, EU 2016/679). The data controller is identified in section 1.

1. Data controller

Data controller: Un Œil Nouveau, société par actions simplifiée à associé unique (SASU), a French simplified joint-stock company with a sole shareholder, share capital 500,00 €, registered under 888 791 084 R.C.S. Marseille.
Contact: contact@strannik.online.
Data Protection Officer: none has been appointed to date, as appointment is not mandatory under Article 37 GDPR. Any request concerning personal data may be sent to the contact above.

2. Data we process

  • identity: last name, first name;
  • contact details: email address, phone number;
  • account and personal-space data;
  • date of birth and sex, where provided;
  • link to a practitioner when registering by invitation;
  • test history and results, and the recommendations derived from them;
  • consents (shared results, email messages);
  • technical data: IP address, date and time of visit, browser and device information, activity logs.

3. Purposes and legal bases

  • providing the service and managing your space (performance of a contract, art. 6.1.b);
  • running tests and keeping their history (performance of a contract);
  • enabling support by a practitioner (consent, art. 6.1.a);
  • sending email messages and reminders (consent);
  • ensuring the security and proper operation of the service (legitimate interest, art. 6.1.f);
  • complying with our legal obligations, in particular accounting (legal obligation, art. 6.1.c).

4. Test results

The results produced by the service are informational. They do not constitute a medical diagnosis, a prescription, or a substitute for a consultation with a healthcare professional.

5. Practitioner access

If you register at the invitation of a practitioner, your account is linked to them. The practitioner can then view the information needed for your support: identity, contact details, progress, test history and results, and recommendations. This access takes place only within the scope of the support and with your consent, which you may withdraw at any time.

6. Recipients and processors

We do not sell your data. It may be processed by processors acting on our instructions:

  • hosting: OVH, in a data centre located in Gravelines (France, European Union);
  • payment provider: no online payment is offered to date. When it is, the provider will be named here, and we will never store full bank-card details;
  • no web-analytics service (such as Google Analytics) is used.

7. Transfers outside the European Union

Data is hosted within the European Union (France). No transfer outside the EU is planned; should such a transfer become necessary, it would be governed by the safeguards provided for by the GDPR (standard contractual clauses or an adequacy decision). In practice: hosting and the database are located in France. Test signal processing is carried out by a technical partner whose infrastructure may be located outside the European Union; that transfer is governed accordingly, and the partner is named on request.

8. Retention periods

  • account data: for as long as the account is active;
  • test history and results: for as long as the account is active, or until deleted at your request, unless retention is required by law;
  • payment data: for the periods required by accounting and tax obligations;
  • technical logs and connection data: 12 months;

9. Cookies

The site uses technical cookies necessary for authentication, the operation of the personal space, session maintenance, and security. You can limit cookies in your browser settings, at the cost of partial functionality of the service.

10. Your rights

In accordance with the GDPR, you have the rights of access, rectification, erasure, restriction, portability, and objection, as well as the right to withdraw your consent at any time. To exercise them, write to contact@strannik.online.

You may also lodge a complaint with a supervisory authority, for example the CNIL in France (www.cnil.fr), or the competent authority in your country of residence.

11. Data security

We implement appropriate organisational and technical measures to protect your data against unauthorised access, alteration, disclosure, or destruction.

12. Changes

We may update this policy. The version in force is the one published on the site.

Last updated: 30/07/2026.