Privacy Policy

Data Controller

ARKAD CONSULTING SAS
60 rue François Ier, 75008 Paris, France
SIREN: 990 303 703
Email: contact@arkad-consulting.com

Arkad Consulting has not appointed a Data Protection Officer (DPO), as it is not required to do so. For any questions regarding your personal data, please contact us at the address above.

Data Collected

We collect the following data:

Contact form: name, email address, message — to respond to your inquiry.
Newsletter (Arkad Intelligence): email address, preferred language — to send our communications.
Chatbot: messages sent, IP address — to improve response quality and prevent abuse.
Browsing: anonymous traffic data via Matomo Analytics (self-hosted cookieless solution, no personal data).

Legal Basis for Processing

Newsletter: consent — by submitting your email address in the subscription form, you consent to the processing of your data for newsletter delivery (Article 6.1.a GDPR).
Contact form: legitimate interest — processing your request (Article 6.1.f GDPR).
Chatbot: legitimate interest — service improvement and abuse prevention (Article 6.1.f GDPR).

Data Recipients

Your data is processed by Arkad Consulting and its technical sub-processors:

Supabase (EU hosting) — database
Brevo (EU, GDPR compliant) — newsletter delivery
Cloudflare (USA, Standard Contractual Clauses) — website hosting
Matomo (self-hosted) — anonymous analytics, no cookies
Microsoft Clarity (USA, Standard Contractual Clauses) — anonymous heatmaps and session recordings

No data is sold or shared with third parties for commercial purposes.

Data Retention

Newsletter data: retained until you unsubscribe, then 3 years for legal compliance.
Contact data: retained for the duration necessary to process your request, then 3 years.
Chatbot data: retained for a maximum of 12 months.

Your Rights

Under the GDPR, you have the following rights:

Right of access to your personal data
Right to rectification of inaccurate data
Right to erasure (right to be forgotten)
Right to restriction of processing
Right to data portability
Right to object to processing
Right to withdraw consent at any time (without affecting the lawfulness of prior processing)

To exercise these rights: contact@arkad-consulting.com

You also have the right to lodge a complaint with the CNIL (French Data Protection Authority — www.cnil.fr).

Cookies

This site only uses:

Language cookie (lang) — a strictly necessary cookie that stores your language preference. Duration: 1 year. No consent required.

This site does not use tracking, advertising, or profiling cookies. The analytics tools (Matomo, Microsoft Clarity) are configured in cookieless mode.

No cookie consent banner is necessary as only strictly necessary cookies are used.

Transfers Outside the EU

Some data may transit through Cloudflare servers (USA). These transfers are governed by Standard Contractual Clauses approved by the European Commission, in accordance with Article 46.2 of the GDPR.

Security

We implement appropriate technical and organizational measures to protect your data: encryption in transit (HTTPS/TLS), restricted access, secure hosting.

Changes to This Policy

This policy may be updated. The date of the last modification is indicated below. We encourage you to review it regularly.

Last updated: April 22, 2026

← Back to home