Privacy policy

1. Preamble

The personal data you entrust to us when visiting our website is processed in accordance with the amended French Data Protection Act of 6 January 1978 and the General Data Protection Regulation ("GDPR"). This page is intended to inform you of the conditions under which we collect and process your personal data when you visit our site.

2. Identity and contact details of the data controller and DPO

The controller of your data is Dattak S.A.S, with a share capital of €31,452.50, registered with the Paris Trade and Companies Register under number 907 857 817, whose registered office is located at 65 boulevard Lannes, Paris 75016 (hereinafter referred to as "Dattak").

To guarantee the protection of your personal data, we have appointed a Data Protection Officer ("DPO"). For any question regarding the handling of your personal data or the exercise of your rights, you can reach our Data Protection Officer at the following email address: dpo@dattak.io

3. Purposes and legal bases of processing

Dattak carries out various processing operations based on several legal grounds, such
as: your consent, a legal or regulatory obligation to which we are subject, our legitimate interest, or contractual performance.

Processing carried out on the basis of your consent:

• Handling contact requests
• Sending of newsletters and commercial offers
• Management of cookies subject to your consent

Certain processing is necessary for the legitimate interests pursued by Dattak:

• Site administration, operation, and security
• Managing your access to and use of certain site services

To meet our legal and regulatory obligations:

• Combating money laundering and the financing of terrorism
• Handling rights exercised over your personal data

4. Categories of data processed

Connecting to our site automatically involves the collection of technical and identification data about you. When collecting your personal data, we inform you whether certain fields are mandatory or optional.

IP address, timestamps (date and time of connection), technical data about the device and browser used, and browsing data on websites are collected. All other cookies and data collected require your prior consent.

5. Recipients of personal data

• Strictly authorized personnel within Dattak's internal departments
• Dattak's subcontractors and service providers that process data on its behalf

6. Data retention period

Dattak undertakes to keep your personal data for a period that does not exceed the time necessary to pursue and achieve the purposes for which the data was collected.

• Handling contact requests: 3 years from the last incoming contact
• Handling quote requests: 3 years from the last incoming contact
• Sending of newsletters: 3 years from the last incoming contact
• Handling complaints: duration of the contractual relationship
• Handling payment transactions: the time required for the transaction, then 13 months in archive (15 months for deferred-debit cards)
• Handling the exercise of GDPR rights: 1 year (right of access/rectification), 3 years (right to object)
• Site administration: 12 months
• Strictly necessary cookies: the time required for the session
• Cookies subject to consent: 13 months from the time they are recorded

7. Data transfers outside the European Union

Dattak does not transfer any data outside the European Union.

8. Security

In accordance with applicable laws and regulations, Dattak and any of its subcontractors undertake to preserve the confidentiality, availability, and integrity of your personal data. To this end, Dattak undertakes to implement all necessary technical and organizational measures.

9. Rights of access to your data

In accordance with applicable laws and regulations, you have the following rights:

• The right to access your data at any time (GDPR article 15)
• The right to rectify, update, or supplement your data (GDPR article 16)
• The right to request erasure of your data (GDPR article 17)
• The right to withdraw your consent at any time (GDPR article 13-2(c))
• The right to restrict the processing of your data (GDPR article 18)
• The right to object to the processing of your data (GDPR article 21)
• The right to data portability (GDPR article 20)

To exercise these rights, you can contact our Data Protection Officer (DPO): dpo@dattak.io

If you encounter any difficulties related to the handling of your data or the exercise of your rights, you have the right to lodge a complaint with the CNIL.