Privacy policy

This page is an English translation provided for convenience. The French version is the authoritative reference.

This policy describes how PKM PLUS (SIREN 103453213) processes personal data in the context of its website and its services, in accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act (loi Informatique et Libertés).

Data controller

The data controller is PKM PLUS, represented by its President, RIBA Mael Devi Sébastien. Contact: contact@pkm-plus.com.

Data collected

• Via the contact / audit form: first name, last name, email address, phone, company, headcount, number of sites, current provider and message.
• Browsing data: only if you accept audience-measurement cookies (see cookie policy).

Purposes and legal bases

The form data is used to respond to your request (pre-contractual performance, Art. 6.1.b GDPR) and, where applicable, to manage the business relationship. It is never sold or transferred for third-party prospecting purposes.

Processor role (GDPR)

In the context of our managed IT, security, backup and cloud management services, PKM PLUS acts as a processor within the meaning of Article 28 of the GDPR on behalf of its clients (data controllers).

Each service contract includes a data processing agreement (DPA) specifying: the subject matter and duration of the processing, its nature and purpose, the categories of data and data subjects, the technical and organisational measures, and the obligations of PKM PLUS.

• Processing of data only on the client's documented instructions;
• Confidentiality of persons authorised to process the data;
• Security measures in accordance with Article 32 of the GDPR;
• Notification of data breaches within the required timeframes;
• Strict supervision of any sub-processor;
• Assistance to the client in responding to data subjects' requests.

Retention period

Contact request data is kept for the time necessary to process the request, then for a maximum of 3 years from the last contact. Data processed on behalf of a client is kept in accordance with the contract and the client's instructions, then deleted or returned at the end of the service.

Recipients

Data is accessible only to authorised PKM PLUS staff and, where applicable, to our technical providers (hosting, email), bound by equivalent confidentiality and protection obligations.

Transfers outside the EU

PKM PLUS favours hosting within the European Union. In the event of a transfer outside the EU, it would be governed by appropriate safeguards (standard contractual clauses, adequacy decisions).

Your rights

In accordance with Articles 15 to 22 of the GDPR, you have the rights of access, rectification, erasure, restriction, objection and portability of your data, as well as the right to define post-mortem directives.

To exercise these rights: contact@pkm-plus.com. You may also lodge a complaint with the competent supervisory authority, the CNIL (www.cnil.fr).

Security

We implement appropriate technical and organisational measures (encryption, access control, logging, backup) to protect your data. Our approach is based on the ISO 27001 framework (see compliance page).