GDPR and your rights
What the GDPR says, what we hold (nothing) and how to exercise your rights.
1. Who is the data controller?
Adnene Hamdouni (Isquare), publisher of Aeris (27 allée des Commerces, 77200 Torcy, France), contact: contact@aerisclean.app. Data Protection Officer (DPO): not appointed (a DPO is not mandatory for this activity).
2. What data do we process?
- Via the app: none. Analysis is local; no personal data is collected or sent. The free quota is stored locally.
- Via this site: no cookies, no trackers. Only the host's technical logs (Hostinger International Ltd) may exist.
- If you write to us: your e-mail address and the content of your message, to reply to you.
- Purchases: handled by Apple or Google, which are responsible for that data.
3. Legal basis and purposes
| Processing | Purpose | Legal basis | Retention |
|---|---|---|---|
| Local analysis on your device | Provide the cleanup feature you request | No processing by the publisher: the data is not accessible to it | Not applicable (nothing is collected) |
| E-mail correspondence with support | Reply to your request | Legitimate interest in answering requests received (Art. 6(1)(f) GDPR); where relevant, pre-contractual measures or performance of a contract (Art. 6(1)(b)) | 12 months after the request is closed |
| Handling of rights requests | Reply to your GDPR requests | Legal obligation (Art. 6(1)(c)) | 5 years (general limitation period) |
4. Your rights
- Access (Art. 15): learn whether we hold data about you and obtain a copy.
- Rectification (Art. 16): have inaccurate data corrected.
- Erasure (Art. 17): ask for your data to be deleted.
- Restriction (Art. 18): ask for processing to be paused in certain cases.
- Portability (Art. 20): receive your data in a structured format, where processing is based on a contract or consent and is automated.
- Objection (Art. 21): object to processing based on legitimate interest.
- Withdrawal of consent at any time, where processing relies on it (no Aeris processing depends on it today).
- Post-mortem directives: define what happens to your data after your death (French Data Protection Act).
5. How to exercise them
Write to contact@aerisclean.app. To identify you we only need the e-mail address you wrote from; we do not ask for ID unless there is reasonable doubt. We reply within one month, extendable by two months for complex requests, with prior notice (Art. 12 GDPR). Exercising your rights is free of charge.
If your request concerns the app alone, we will confirm that we hold no data. Data tied to your Apple or Google account (purchases, subscription) is managed with Apple or Google.
Generate a request template
Template to copy
Subject: Request to exercise my rights (GDPR)
Dear Sir or Madam,
Under Regulation (EU) 2016/679, I am exercising my right [of access / of rectification / to erasure / to restriction / to portability / to object] regarding any personal data about me that you may hold.
E-mail address concerned: [your address]
Details: [to complete]
Please reply within the one-month period set by Article 12 of the GDPR.
Kind regards,
[Name]
6. Complaint to the CNIL
If, after contacting us, you believe your rights are not being respected, you can lodge a complaint with the French data protection authority (CNIL): www.cnil.fr/fr/plaintes (in French); 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France. If you live in another EU member state, you may contact the data protection authority of your country.