Legal
Privacy policy
This policy explains how PRELAB processes personal data when you visit VoLCA, create an account, contact us, or use a hosted service.
Data controller
PRELAB, 229 route de Châtillon-Coligny, 45220 Château-Renard, France, is the data controller. Privacy enquiries and requests to exercise your rights can be sent to contact@prelab.fr or made by post to the registered office. PRELAB has not appointed a data protection officer.
Data we process
- Account data: email address, name and organisation when supplied, password hash, account status, plan, email preferences, and confirmation or recovery records.
- Service and security data: session identifiers, access-token records, IP address, request and error logs, instance state, and information needed to operate and secure the service.
- Communications: messages, form answers, support requests, commercial enquiries, and related correspondence.
- Billing and contractual data: order, invoice, payment-status, and business-contact information for paid services. Payment-card data is not collected through the current VoLCA account interface.
- Technical data: browser, device and network information provided as part of normal HTTP requests. VoLCA does not currently use audience-measurement or advertising trackers on its own pages.
Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Create and administer accounts; provide hosted, desktop and support services | Performance of a contract or steps requested before entering into a contract |
| Authenticate users, prevent abuse, maintain security, and diagnose failures | PRELAB’s legitimate interests in providing a safe and reliable service |
| Answer contact, workflow, database and commercial enquiries | Steps requested before a contract and PRELAB’s legitimate interests in responding to enquiries |
| Send essential account, security and service messages | Performance of the service contract and legitimate interests |
| Send optional release announcements | Your consent, which can be withdrawn at any time in Email preferences |
| Manage orders, invoices, tax and accounting records | Performance of a contract and compliance with legal obligations |
Required and optional information
An email address and the authentication information requested by the interface are necessary to create and use an account. Without them, PRELAB cannot provide account access. Fields identified as optional may be left blank. Optional release announcements can be disabled without affecting service access.
Recipients and processors
Access is limited to authorised PRELAB personnel and service providers that need the information for the purposes above. Depending on the feature used, these include Scaleway for hosting, infrastructure and transactional email; Google when you choose to load or submit a Google Form; GitHub when a release or download is fetched from GitHub; and professional advisers or public authorities where legally required. PRELAB does not sell personal data.
International transfers
Core hosted application infrastructure is operated in France. Google and GitHub may process information outside the European Economic Area. Where applicable, such transfers rely on an adequacy decision, the EU Standard Contractual Clauses, or another mechanism permitted by the GDPR. Their own privacy notices describe their processing in more detail.
Retention
- Account data is kept while the account is active and normally deleted or anonymised within three years after closure or the last meaningful interaction, unless a longer period is required for a dispute or legal obligation.
- Prospect and contact correspondence is normally kept for three years after the last contact.
- Security and operational logs are normally kept for no more than twelve months.
- Accounting, invoice and contractual evidence is kept for the periods required by French law, generally up to ten years.
- Unconfirmed signup and recovery records are deleted or rendered unusable when they expire, subject to short security and backup cycles.
Backups may retain deleted information for a limited additional period before automatic rotation.
Your rights
Subject to the conditions of the GDPR, you may request access, rectification, erasure, restriction, or portability of your data, and object to processing based on legitimate interests. You may withdraw consent at any time without affecting earlier lawful processing. You may also give instructions concerning your data after death where French law permits.
Send requests to contact@prelab.fr. PRELAB may request reasonable proof of identity where necessary. You may lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL).
Automated decisions and children
PRELAB does not use the personal data described here to make decisions based solely on automated processing that produce legal or similarly significant effects. VoLCA is intended for professional and organisational use and is not directed at children.
Cookies and changes
See the cookie information for details about local and third-party storage. Material changes to this policy will be dated on this page and, where appropriate, communicated to account holders.
Last updated: 16 July 2026.