Legal information - Privacy policy
What data the website processes, for which purposes and legal bases, how long it is kept, and how to exercise your GDPR rights.
Last updated:
Data controller
The controller for the processing described in this policy is DKL DIGITAL KICKOFF LABS, a SASU registered under SIREN 100 140 425, with its registered office at 100 avenue de l’Adour, 64600 Anglet, France.
For any question about the protection of your data: contact@dkl.dev.
Given the nature and scale of our processing activities, no Data Protection Officer (DPO) has been appointed, as such an appointment is not mandatory in our situation.
Scope
This policy applies to the https://dkl.dev website. Products and applications published by DKL DIGITAL KICKOFF LABS have their own privacy policies, available from the relevant services.
Data we process
- Contact data
- First and last name, email address, phone number, company and the content of your message, when you write to contact@dkl.dev or fill in the contact form. This data is provided voluntarily by you.
- Technical connection data
- IP address, date and time of the request, page visited, browser type and operating system. This data is automatically recorded in our hosting provider’s logs for operational and security purposes.
- Language preference
- The display language you selected, stored in a cookie that is strictly necessary for the website to work.
We do not collect any special category data within the meaning of Article 9 GDPR, we do not carry out profiling and we make no automated decisions producing legal effects concerning you. The website is not directed at children and we do not knowingly collect data about them.
Purposes and legal bases
- Responding to your enquiries
- Handling requests for information, quotes or collaboration that you send us, and following up on our exchanges. Legal basis: our legitimate interest in responding to enquiries addressed to us (Art. 6(1)(f) GDPR), or steps taken at your request prior to entering into a contract (Art. 6(1)(b)).
- Operating and securing the website
- Keeping the website available, diagnosing technical incidents and preventing abusive use. Legal basis: our legitimate interest in maintaining a reliable and secure service (Art. 6(1)(f)).
- Remembering your language preference
- Displaying the website again in the language you chose. Legal basis: our legitimate interest in delivering the service you requested (Art. 6(1)(f)); this cookie is strictly necessary and exempt from consent.
- Complying with our legal obligations
- Keeping the records required by law, in particular accounting and tax records, where our exchanges lead to a contractual relationship. Legal basis: compliance with a legal obligation (Art. 6(1)(c)).
Retention periods
- Enquiries with no commercial follow-up
- Three years from our last contact with you.
- Exchanges leading to a contractual relationship
- For the duration of the relationship, then for the applicable statutory retention periods, in particular ten years for accounting records.
- Hosting provider technical logs
- Twelve months at most.
- Language preference cookie
- Twelve months at most from the date it is set or last updated.
Recipients and processors
Your data is accessible only to authorised staff within DKL DIGITAL KICKOFF LABS. It is never sold, rented or exchanged for commercial purposes.
We rely on technical service providers acting as processors, bound by confidentiality and security commitments:
- Hetzner Online GmbH (Germany), for website hosting and the retention of technical logs;
- our email service provider, for delivering and storing the emails you send us.
Your data may also be disclosed to administrative or judicial authorities where we are legally required to do so.
Transfers outside the European Union
The website is hosted by Hetzner Online GmbH, a company established in the European Union. Should any transfer of data outside the European Union occur, for instance through an email service, it would be governed by the appropriate safeguards provided for by the GDPR: an adequacy decision of the European Commission or standard contractual clauses.
Security
We implement appropriate technical and organisational measures to protect your data: encrypted traffic over HTTPS, access restricted to authorised staff, regular updates of software components, and hosting with a professional provider.
As no system is infallible, we cannot guarantee absolute security; we do however undertake to react without delay in the event of an incident and to comply with our notification obligations.
Your rights
Under the General Data Protection Regulation and the French Data Protection Act, you have the following rights:
- the right to access your data and obtain a copy of it;
- the right to have inaccurate or incomplete data corrected;
- the right to erasure of your data, within the limits set by the regulation;
- the right to restriction of processing;
- the right to object to processing based on our legitimate interest, on grounds relating to your particular situation;
- the right to portability of the data you provided to us;
- the right to set instructions regarding the fate of your data after your death.
You can exercise these rights by writing to contact@dkl.dev or by post to DKL DIGITAL KICKOFF LABS, 100 avenue de l’Adour, 64600 Anglet, France. Proof of identity may be requested where there is reasonable doubt as to your identity. We respond within one month of receiving your request, a period that may be extended by two months for complex requests.
If, after contacting us, you believe your rights are not being respected, you may lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or online at www.cnil.fr.
Changes to this policy
This policy may be amended to reflect changes to the website, to our tools or to applicable regulations. The version that applies is the one published on this page; the date of the last update is shown at the top of the document.