How Weetra processes personal data under the GDPR and the French Data Protection Act.
Last updated: 14 September 2026
Weetra is an independent regulatory documentary review organisation, not a regulatory authority. This Privacy Policy explains our commitment to data protection and how we process personal data in compliance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.
Weetra (Entrepreneur Individuel), 59 rue de Ponthieu — B 326, 75008 Paris, France (SIRET 901 675 520 00026), acts as controller for website, prospect, client-relationship and administrative processing for which Weetra determines the purposes and means. Where a client engagement places Weetra in the role of processor for personal data contained in an evidence file, that role is governed by the applicable engagement terms and data-processing provisions.
We process personal data to deliver documentary review services, manage client relationships, fulfil legal obligations and, where the visitor has consented, measure use of the public website through Google Analytics 4.
Depending on the activity, processing is based on performance of a contract or steps taken at the data subject’s request, compliance with legal obligations, legitimate interests such as service security and B2B relationship management, and consent where consent is specifically required, including optional website analytics.
Weetra may process business contact details, billing and contractual information, correspondence, technical website data where analytics consent is given, and information contained in evidence files supplied for a review. Industrial evidence may include personal data incidentally, for example names, professional contact details or signatures. Client evidence and form content are not sent to Google Analytics.
Personal data is retained only for as long as necessary for the relevant purpose, engagement, legal obligation or establishment/defence of rights. Engagement evidence follows the retention and return/deletion arrangements applicable to the mandate. Website analytics data follows the retention settings configured for the Weetra Google Analytics 4 property.
Subject to the GDPR and applicable limitations, data subjects may request access, rectification, erasure, restriction and portability and may object to relevant processing. Requests can be sent to privacy@weetra.org.
Data is shared only with service providers used for defined operational purposes and subject to appropriate contractual safeguards. Where analytics consent is granted, Google Analytics may receive technical website-usage data under Google’s applicable service terms. Weetra does not sell personal data.
We use strictly necessary storage for site operation and for remembering your analytics preference. Google Analytics 4 (Measurement ID G-39SKM0FD8Z) is optional and is loaded only after you accept analytics measurement. We do not use Google Ads or advertising cookies on this site. You can refuse analytics without losing access to the public site and can change your choice at any time through “Cookie preferences” in the footer.
Weetra applies technical and organisational measures appropriate to the nature of the processing, including controlled access, secure transmission, confidentiality obligations and measures intended to protect evidence data against unauthorised access, loss or alteration. Specific security controls may vary by service architecture and are not represented as an independent certification unless expressly stated.
Core Weetra client and evidence data is hosted within the EU/EEA according to the applicable service architecture. Where optional analytics is accepted, analytics-related technical data may be processed by Google group entities outside the EEA subject to the safeguards and service terms applicable to Google Analytics.
Privacy enquiries and data-subject requests can be sent to privacy@weetra.org. Weetra does not describe this contact as a formally appointed Data Protection Officer unless such appointment is applicable and has been made. Data subjects may also lodge a complaint with the CNIL in France.
