This is a courtesy translation. In the event of any discrepancy between this text and the French version, the French version prevails.
Kréha Consulting attaches particular importance to the protection of your personal data. This policy describes the data collected, how it is used and what your rights are, in accordance with the General Data Protection Regulation (GDPR, EU 2016/679) and the French Data Protection Act.
1. Data controller
Kréha Consulting · 61 rue de Lyon, 75012 Paris, France · SIRET 909 904 948 00025.
Data protection contact: Wennie FELIMARD · contact@kreha-consulting.com.
2. Data collected & purposes
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Surname, first name, e-mail (enquiry or call booking) | Answering your requests, arranging a meeting, preparing a quote | Legitimate interest / pre-contractual measures | 3 years after last contact |
| Answers to the “Carnet de Mesures” form: project situation, main obstacle, expertise sought, state of the team, size of the organisation, timeframe, budget range, free-text project description | Preparing the conversation and shaping the proposed engagement | Pre-contractual measures | 3 years after last contact |
| Browsing data (IP address, pages visited, time spent, traffic source) | Audience measurement via Google Analytics 4 | Consent (cookie) | 13 months (on Google's side) |
| Cookie consent preference | Remembering your choice | Legal obligation | 6 months |
| Language preference (FR / EN) | Displaying the site in your chosen language | Strictly necessary for the site to work (exempt) | 6 months |
No field of the “Carnet de Mesures” form is mandatory apart from your name and e-mail address. The qualification questions may be left unanswered.
3. Cookies & audience measurement
Essential cookies and storage items (consent memory, language preference) are necessary for the site to work and do not require consent. Google Analytics 4 analytics cookies are set only after your explicit consent, collected through the banner displayed on your first visit. GA4 is configured with IP address anonymisation. You can change your mind at any time through the “Manage cookies” link in the site footer. Details in our Cookie policy.
4. Transfers outside the European Union
Some data may be transferred to the United States under the EU–US Data Privacy Framework:
- Google LLC · browsing data (Google Analytics 4);
- Netlify, Inc. · website hosting;
- Web3Forms · delivery of requests sent from the “Carnet de Mesures” form.
5. Recipients & processors
Kréha Consulting does not sell your personal data and does not use it for any advertising purpose. It may be shared with the following providers, strictly for the purposes described above:
- Web3Forms · forwarding to our mailbox the requests sent from the “Carnet de Mesures” form. This provider does not retain the data beyond delivery of the message;
- Google LLC · audience measurement (Google Analytics 4);
- Google (Calendar) and Calendly · scheduling the appointments you book;
- Netlify, Inc. · website hosting.
6. Your rights
Under the GDPR, you have the rights of access, rectification, erasure, objection, restriction and portability, as well as the right to withdraw your consent at any time. To exercise them: contact@kreha-consulting.com. You will receive a reply within one month. You may also lodge a complaint with the CNIL, the French data protection authority: www.cnil.fr.
7. Security
Kréha Consulting implements appropriate technical and organisational measures (HTTPS, restricted access, data minimisation) to protect your data against loss, unauthorised access or disclosure.
8. Changes
This policy may be updated at any time; the date of the last update appears at the top of the page. We invite you to consult it regularly.
Document drafted with the assistance of an AI tool, in compliance with the GDPR. (Art. 50 EU AI Act)