Privacy Policy
1. Preamble
KP Consulting (hereinafter “we”, “us” or “the Firm”) attaches fundamental importance to the protection of your personal data and respect for your privacy. This policy aims to inform you, in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 on the protection of personal data (GDPR), of how we collect, use and protect your data when you browse our website https://kp-consulting.tech.
2. Identity of the Data Controller
| Data Controller | Contact details |
|---|---|
| Company name | KP Consulting |
| Address | 235B Pairis – 68370 Orbey, France |
| contact@kp-consulting.tech | |
| Website | https://kp-consulting.tech |
To exercise your rights or ask any question relating to the protection of your data, you may contact our Data Protection Officer.
| Data Protection Officer | Contact details |
|---|---|
| dpo@kp-consulting.tech | |
| Address | 235B Pairis – 68370 Orbey, France |
3. Contact form data
We collect the following data to respond to your message:
- First and last name
- Professional email address
- Telephone number (optional)
- Subject and content of your message (free-text field)
We process this data on the basis of our legitimate interest in responding to inquiries and requests submitted through our contact form. We retain this data for one month and then securely delete it. Another retention period is needed If you exercise your data protection rights (see §8 – Retention of rights requests)
Note: the message field is a free-text field. Please do not enter sensitive data (health data, political opinions, banking data, etc.) within the meaning of Article 9 of the GDPR.
4. Cookies
When you browse our website, only cookies that are strictly necessary for the operation of the website are placed on your device:
- Consent cookies record your cookie choices (acceptance or refusal). No response is deemed to constitute refusal.
- Language preference cookies remember the selected language.
- Audience measurement cookies, subject to your consent, allow us to analyse traffic, for example. Refusing consent will block these analytics cookies.
For more details about cookies, please consult our Cookie Policy, which is available on the website.
5. Data recipients
Your data may be disclosed to the following recipients:
| Recipient | Role | Location | Safeguards |
|---|---|---|---|
| KP Consulting (internal) | Data controller / team responsible for the website and customer relationship | France and Slovenia (EU) | Processing carried out under the authority of the data controller |
| OVH SAS | Processor / website hosting | Roubaix, France (EU) | DPA pursuant to Article 28 GDPR |
| Brevo | Processor / contact form management and email delivery services | European Union | DPA pursuant to Article 28 GDPR |
| Microsoft Ireland Operations Ltd. (Microsoft 365) | Processor / email, storage and management of contact requests | European Union | DPA pursuant to Article 28 GDPR |
No transfer of personal data outside the European Economic Area is carried out to date. If this were to change, the appropriate safeguards provided for under Articles 45 and 46 of the GDPR would be implemented and this policy would be updated accordingly
6. Your rights
In accordance with Articles 15 to 21 of the GDPR, you have the following rights regarding your personal data:
| Right | Description and how to exercise it |
|---|---|
| Right of access (Art. 15) | Obtain confirmation that data concerning you is being processed and receive a copy of it. |
| Right to rectification (Art. 16) | Have any inaccurate or incomplete data concerning you corrected. |
| Right to erasure (Art. 17) | Request the deletion of your data, subject to legal retention obligations. |
| Right to restriction (Art. 18) | Request the temporary suspension of the processing of your data. |
| Right to object (Art. 21) | Object at any time to processing based on our legitimate interest. In the event of a valid objection, we will stop the processing unless there are compelling legitimate grounds. |
| Right to data portability (Art. 20) | Receive your data in a structured, machine-readable format, or have it transferred to another data controller. |
| Right to withdraw consent | Withdraw your consent to non-strictly necessary cookies at any time via the website’s cookie management banner. |
7. How to exercise your rights?
You may exercise your rights by one of the following means:
- Email: dpo@kp-consulting.tech
- Postal mail: KP Consulting – DPO, 235B Pairis, 68370 Orbey, France
We will acknowledge receipt of your request and respond within one month from receipt. This period may be extended to two months for complex requests.
If you consider that your rights are not respected, you may lodge a complaint with the CNIL: www.cnil.fr – 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.
8. Retention of rights requests
If you exercise your data protection rights, we retain information relating to your request, our correspondence, and the actions taken in response to your request for 3 years after the request has been closed. This retention period enables us to demonstrate compliance with our legal obligations and to handle any related disputes or inquiries. The information is securely deleted once this period expires.
9. Data security
KP Consulting implements appropriate technical and organisational measures to protect your data against loss, destruction, alteration, disclosure or unauthorised access, in accordance with Article 32 of the GDPR. These measures include:
- Exclusive hosting on servers located in the European Union
- Access restricted to authorized persons only
- Data processing agreements (DPAs) concluded with all service providers processing data on our behalf
- Personal data breach management procedure (CNIL notification deadline: 72 hours)
10. Policy updates
This policy may be updated at any time, in particular in the event of regulatory changes, changes to our processing activities or any substantial change affecting the protection of your data. The applicable version is the one available on our website together with its update date.
