Privacy Policy

1. Who we are

LSN Holdings is a French holding group operating lsnholdings.org and the LSN Hub workspace platform. We act as the data controller for personal data processed through these services. You can reach us at contact@lsnholdings.org.

2. What we collect

The public landing at lsnholdings.org does not collect personal data. We run privacy-friendly, cookieless web analytics (self-hosted Umami) to measure aggregate traffic — visits, pageviews, referrers and approximate country. It sets no cookies, stores no IP addresses, builds no cross-site or behavioural profiles, and serves no third-party advertising.

The LSN Hub workspace (accessed only by invitation) collects the following from employees, contractors and authorised clients:

• Identity: name, email, username, optional phone and avatar
• Employment: contract type, weekly hours, hire date, working days
• Activity: work sessions clocked, leave requests, tickets created
• Operational: a security audit log of authenticated actions (login, password change, sensitive resource access) used to investigate incidents
• Technical: IP address and user-agent string, recorded only on security-relevant events (login, failed login, password reset, suspicious refresh)

3. Why we process it

The legal bases under GDPR Article 6 are:

• Contract execution for identity + employment data (Article 6.1.b)
• Legitimate interest for activity tracking and the security audit log (Article 6.1.f) — operating an internal workspace requires knowing who did what
• Legal obligation for certain payroll and tax records (Article 6.1.c)

4. How long we keep it

• Identity + active employment data: while the user is active + 5 years
• Audit log (security): 1 year minimum, configurable
• Application logs: 90 days
• Security event logs: 180 days
• Work sessions: 5 years
• Anonymised users: identifying fields are scrubbed; transaction history is retained for accounting integrity but no longer tied to a natural person

5. Your rights

Under GDPR you can at any time:

• Accessyour data — use “Download my data” in Settings → Data & Privacy
• Rectify your profile — edit your name, email, phone, avatar from Settings
• Eraseyour account — use “Delete my account” in Settings → Data & Privacy (anonymises identifying fields immediately)
• Portability — the data export is in JSON, suitable for import into another workspace platform
• Restrict or object to processing — email contact@lsnholdings.org
• Lodge a complaint with the CNIL (cnil.fr) if you believe your rights are not respected

6. Third parties

We share data with the following processors, each bound by a data-processing agreement:

• Resend (transactional email) — email address + content
• Coolify on our infrastructure — application logs
• Sentry (error monitoring) — exception stack traces, no PII forwarded
• Hosting provider — server logs, encrypted at rest with provider-managed keys

7. Cookies

The landing uses no tracking cookies — our analytics is cookieless. The LSN Hub workspace sets one functional cookie (__Host-session) to keep you signed in — strictly necessary, no consent required under ePrivacy.

8. Changes

We will post material changes to this policy on this page with the updated date above. For workspace users, we will also send an in-app notification before a substantive change takes effect.