Privacy Policy

1. Data Controller

KDPO
42 cours Pierre Vasseur, 91120 Palaiseau, France
SIRET: 839 314 978 00025
Email: contact@kdpo.fr

2. Data Protection Officer

KDPO has designated a Data Protection Officer. For any question relating to the protection of your personal data, contact us at: contact@kdpo.fr

3. Data collected

As part of the use of the contact form on the kdpo.fr website, the following data is collected:

• First and last name
• Professional email address
• Organisation name
• Role within the organisation
• Sector of activity
• Message content

4. Purpose and lawful basis of processing

The data collected is processed for the following purposes:

• Handling of the contact request — Lawful basis: depending on the nature of the request, either the performance of pre-contractual measures taken at the request of the data subject (Art. 6.1.b RGPD), or KDPO's legitimate interest in responding to professional enquiries addressed to it (Art. 6.1.f RGPD). The checkbox ticked when submitting the form confirms that this policy has been read; it does not constitute the lawful basis for the processing.

5. Retention period

Data is retained for the time necessary to process the request, then, where the request relates to a prospecting relationship, for 3 years from the last contact initiated by the data subject.

6. Data recipients

Data is intended exclusively for members of the KDPO team authorised to process contact requests. It is not transmitted to third parties.

Technical subprocessors (hosting provider OVHcloud) may access the data strictly within the scope of their missions and are bound by contractual confidentiality obligations.

7. Transfers outside the European Union

No personal data transfer outside the European Union takes place as part of the processing described above. The OVHcloud hosting provider operates datacentres located in Europe.

8. Rights of data subjects

In accordance with the RGPD and the French Data Protection Act, every data subject has the following rights:

• Right of access (Art. 15 RGPD)
• Right to rectification (Art. 16 RGPD)
• Right to erasure (Art. 17 RGPD)
• Right to restriction of processing (Art. 18 RGPD)
• Right to data portability (Art. 20 RGPD), where the conditions for the application of this article are met
• Right to object (Art. 21 RGPD)
• Right to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal

To exercise these rights, send your request to: contact@kdpo.fr

You also have the right to lodge a complaint with the CNIL (French data protection authority): www.cnil.fr

9. Security

KDPO implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration or destruction.

10. Changes to this policy

KDPO reserves the right to modify this privacy policy. The applicable version is the one published on this site at the date of consultation.