Legal Notice and GDPR
Legal Notice and GDPR for Kyanopi
Kyanopi is responsible for processing the data collected on its website.
The site uses Matomo for audience analysis with cookies configured in privacy-friendly mode, exempt from consent according to the CNIL.
Personal data collected via the contact form is retained for 3 years, and Matomo data for a maximum of 13 months.
Users have extensive rights over their data: access, rectification, erasure, portability, objection, and the right to withdraw consent.
The site is hosted by a provider compliant with European data protection standards, with enhanced security measures.
Introduction
In a context where personal data protection is a legal requirement and a strong user expectation, drafting a clear, concise, and compliant “Legal Notice and GDPR” page, in accordance with French and European legislation, is essential for the Kyanopi website, which specializes in digital infrastructure consulting. This page aims to inform visitors about the identity of the data controller, the data collected, its purposes, user rights, and the security measures implemented. Compliance with the General Data Protection Regulation (GDPR) and French legal obligations governs this approach.
Identification of the Publisher and Data Controller
Kyanopi is the publisher of the website https://kyanopi.com. As the data controller, Kyanopi is committed to protecting the personal data collected via its site.
Kyanopi is the data controller for the data collected on this site, ensuring compliance with the GDPR and French legislation on personal data protection.
Website Hosting
Kyanopi’s website is hosted by [Host name, e.g., OVH, Netlify, etc.], located at [adresse du siège de l’hébergeur]. This host complies with European standards for personal data protection, ensuring a secure environment for data storage and processing.
Personal Data Collected
Via the Contact Form
The contact form collects the following data: last name, first name, email address, message, and optionally the client’s phone number or company name. This data is necessary to respond to inquiries, prepare quotes, and ensure commercial follow-up.
Via Matomo (analytics)
Matomo collects anonymized browsing data: masked IP addresses (the last two octets are removed), pages visited, session duration, etc. Matomo cookies are configured in “privacy-friendly” mode, without data cross-referencing, without sharing with third parties, and with a retention period limited to 13 months.
Important: No sensitive data (ethnic origin, political opinions, health data, etc.) is collected.
Purposes and Legal Basis for Processing
Contact Form: Processing is necessary for the performance of a contract (quote, pre-contractual exchange) or in response to an inquiry (legitimate interest).
Matomo: Data is processed for improving user experience and audience analysis, based on legitimate interest or implicit consent via GDPR-compliant configuration.
The collected data is not sold or transferred to third parties, except where legally required.
Data Retention Period
Contact form data: Retained for 3 years from the last contact, unless a longer legal or contractual retention period is required.
Matomo data: Retained for a maximum of 13 months, in accordance with CNIL recommendations.
Users can request the deletion of their data at any time via email to [dedicated address, e.g., rgpd@kyanopi.com].
User Rights (GDPR)
Users have the following rights:
Right of access: Access collected personal data.
Right to rectification: Correct inaccurate or incomplete data.
Right to erasure: Request data deletion.
Right to restriction of processing: Limit data processing.
Right to data portability: Retrieve data in a readable format.
Right to object: Object to data processing.
Right to withdraw consent: Withdraw consent at any time.
Right to lodge a complaint: File a complaint with the CNIL (link to cnil.fr).
Kyanopi commits to responding to requests within 1 month.
Cookies and Trackers
The site uses Matomo solely for audience analysis, without Google Analytics or third-party advertising trackers. Matomo cookies are exempt from consent because they comply with the strict conditions imposed by the CNIL:
Clear and complete user information.
Simple and accessible objection mechanism.
Collected data not cross-referenced with other processing.
Retention limited to 13 months.
Masked IP address (anonymization).
Cookies can be disabled via:
Browser settings.
A link to the privacy policy or a cookie management button (e.g., “CookieYes” or “Axeptio” module).
A consent banner is displayed upon first access, with the options: “Accept”, “Refuse”, “Customize”.
Data Security
Kyanopi implements technical and organizational measures to protect data against loss, alteration, or unauthorized access:
Data encryption (HTTPS).
Secure backups.
Contracts with GDPR-compliant subcontractors.
Restriction of data access to authorized personnel.
Strict password policy for administrators.
Changes to the Legal Notice
This legal notice may be modified at any time. The date of the last update will be indicated at the bottom of the page.
Applicable Law and Competent Jurisdiction
The applicable law is French law. In case of dispute, French courts have jurisdiction, particularly those in Paris.
