|
home
français 
deutsch 
|
Privacy policy
Controller
OIKOS CONSULTING & TRAINING, a SARL with a share capital of €2,000, registered with the Colmar Trade and Companies Register (RCS) under number 488 743 436, 16 rue Charles Grad, 67600 Sélestat, France, represented by its managing director Mr Arnaud Grob. For any question or request concerning your data, please write to contact@oikos-consulting.com.
Data collected, purposes, legal bases and retention periods
| Processing | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Contact form | Name, e-mail address, message | Responding to your enquiry and, where applicable, preparing a proposal | Steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR) | 3 years from the last contact |
| Server logs | IP address, date, pages viewed | Security of the website | Legitimate interests in protecting the website against malicious use (Article 6(1)(f) GDPR) | 6 months |
The required fields of the form are marked with an asterisk: without them, your enquiry cannot be processed. The other fields are optional and leaving them blank has no consequence. Please do not include special categories of personal data within the meaning of Article 9 GDPR in the “message” field.
If your enquiry leads to an engagement, the contact details submitted through this form continue to be used for the performance of the contract and for invoicing, on the basis of Article 6(1)(b) GDPR and thereafter of our accounting obligations (Article 6(1)(c)). The corresponding accounting records are retained for 10 years in accordance with Article L. 123-22 of the French Commercial Code.
Recipients
Your data is processed by the managing director of Oïkos Consulting & Training. It is not sold, rented or transferred to third parties for commercial purposes. The website host, SCALEWAY (8 rue de la Ville-l'Évêque, 75008 Paris), acting as a processor within the meaning of Article 28 GDPR, may be a recipient in so far as necessary for the performance of its tasks.
Transfers outside the European Union
None. The data is hosted and processed within the European Union.
Cookies and trackers
This website does not place any advertising cookies, audience measurement tools or social media trackers, and does not store any information on your device beyond what is strictly necessary for the website to function. These operations are exempt from consent under Article 82 of French Act No. 78-17 of 6 January 1978 as amended.
Automated decision-making
No automated decision-making or profiling is carried out.
Security
The measures implemented pursuant to Article 32 GDPR are as follows: access restricted to the single authorised person, password-protected accounts, regular updates and backups, and encryption of traffic to and from the website using the HTTPS protocol.
Your rights
Depending on the processing in question, you have the following rights under Articles 15 to 21 GDPR:
| Right | What it allows you to do | Possible limitations |
|---|---|---|
| Access (Art. 15) | Find out whether data concerning you is being processed and obtain a copy of it | — |
| Rectification (Art. 16) | Have inaccurate or incomplete data corrected | — |
| Erasure (Art. 17) | Obtain the deletion of your data | Does not apply to accounting records before the statutory retention period has expired |
| Restriction of processing (Art. 18) | Suspend the use of your data while a verification is carried out | — |
| Data portability (Art. 20) | Receive the data you have provided to us in a structured format | Processing based on a contract or on consent only |
| Objection (Art. 21) | Object to processing on grounds relating to your particular situation | Processing based on legitimate interests only |
| Instructions concerning your data after death (Art. 85 of French Act No. 78-17) | Determine what happens to your data after your death and appoint a third party to carry out those instructions | — |
These rights may be exercised by writing to contact@oikos-consulting.com or by post to our registered office. We will respond within one month, which may be extended by two further months for complex requests (Article 12 GDPR). You may at any time lodge a complaint with the CNIL, the French data protection authority, at 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France – www.cnil.fr.