IKOULA attaches great importance to the protection of your personal data and ensures that its processing complies with applicable laws and regulations, in particular, Regulation 2016/679 of 27 April 2016.
If you have any questions, please do not hesitate to consult our DPO, Jean-Maxime Peyrat, whose contact details are given in point 8 of this policy.
1. Purpose of Ikoula customer and prospect data processing
As part of its services and on its website, IKOULA invites prospects and customers who wish to do so to fill in forms in order to send/receive information and/or commercial offers and/or to contract with IKOULA.
On the Ikoula website, the following forms are available:Names of the forms through which IKOULA collects data
- “Contact Us” Form
- Newsletter subscription form
- “Registration” form
- Order form
The purpose of processing your data is to manage your orders, manage the contractual relationship with the customer, personalise our services, manage the sending of information from IKOULA, send a request/question to IKOULA, send commercial offers, set up satisfaction surveys.
This processing allows IKOULA to:
- Carry out the operations necessary for the management of your order and the development of our commercial relations, and to execute our contractual relationship
- Answer requests/questions sent by the user via the contact form
- Address commercial offers to the internet user when the latter expressly accepts it by subscribing to the newsletter, it being understood that the internet user may unsubscribe at any time from the newsletter by clicking on the "unsubscribe" link in each offer email
- Develop customer satisfaction surveys
- Combat fraud
- Organise games or contests if necessary
- Use your data in the context of a legitimate interest, which may be the evaluation and improvement of our products and services and any action that allows us to provide you with the best service.
1.2 Legal basis
Article 6(1) a, b, c and f, where applicable, of the General Data Protection Regulation - GDPR
The data are collected because the data subject has consented to the processing of his/her personal data for one or more specific purposes, which are the request and receipt of information and/or the wish to receive commercial communications from IKOULA and/or address a request/question and/or conduct satisfaction surveys to IKOULA and/or the processing is necessary for the performance of a contract to which the data subject is party and/or is necessary for compliance with a legal obligation to which IKOULA is subject and/or is necessary for the legitimate interests pursued by the data controller.
2. Data processedTechnical data
Examples of data processed for the "Contact us" form
- First name
Examples of data processed for the Newsletter registration form
- First name
- The newsletter you wish to receive (it is possible to choose one or more newsletters)
Examples of data processed for the customer account creation form/form to be completed when placing an order on the Ikoula website
- Account type (personal account/company account)
- VAT N°
- First name
- Email address
- Address 1
- Address 2
- Landline telephone number
- Mobile telephone number
This collected data allows Ikoula to identify you, to ensure invoicing, to ensure the execution of the contracts it enters into with you and, generally, to ensure the follow-up of the contractual relationship.
We draw your attention to the fact that within the framework of online payment, you can use third-party technology to pay (e.g. Paypal, Paybox, etc.): these companies process your data directly and are therefore the processors to whom you should turn.
2.1 Data source
The data are collected directly from the data subjects through the various collection forms on IKOULA's website (https://www.ikoula.com) or via exchanges with Ikoula's sales teams.
2.2 Mandatory nature of data collection
The data collection fields on the forms which are marked with an asterisk are mandatory: without these data, we cannot answer you and/or we cannot execute our contracts with you.
2.3 Automated Decision Making
Automated decisions will be made based on the data collected in cases of suspected fraud. The logic behind these automated decisions is as follows: to allow us to fight against fraud effectively, to secure your orders and thus ensure you an optimal service.
These measures will have the effect of suspending the execution of the order, or even, if the automated decision does not guarantee the security of the order, cancelling it, generating the following message: "Our automated system has detected fraud; we cannot proceed with your order”.
To learn more about your rights regarding automated decision making, see point 8 of this Charter.
3. Persons concerned
Data processing only concerns persons who wish to receive information and/or subscribe to the newsletter and/or become an IKOULA customer by subscribing to one of the offers proposed on the IKOULA website or an offer concluded with a sales representative of Ikoula.
4. Recipients of the data
4.1 Recipient categories
The recipients of the data are:Within IKOULA:
- The marketing department
- The sales department
- The commercial department
- The accounts department
- The administrative and financial department
- The management
The IKOULA partners concerned and who may be:
- Companies conducting satisfaction surveys
- Companies assisting IKOULA in the fight against fraud
- Data qualification and commercial retargeting companies
- Billing and payment companies
4.2 Data transfers/Data transfer outside the EU
Within the framework of the execution of the contracts that you enter into with IKOULA via the IKOULA website, the subscription to a newsletter and within the framework of an information request made to IKOULA, no data is transferred outside the European Union.
However, we may sometimes transfer data to third-party partners for the purpose of carrying out specific assignments on our behalf and, for example, in the context of satisfaction surveys and mailing campaigns.
When a partner has recourse to other partners in a country that has not been recognised as providing an adequate level of protection, IKOULA requires them to comply with its requirements for the security and confidentiality of your personal data and to process your data only for the purposes it has specified. These partners will have previously signed the European Commission's standard contractual clauses.
5. Data retention period
IKOULA keeps the data collected in accordance with the legal and regulatory periods and in accordance with the retention periods recommended by the CNIL.
In the case of contracts, the data are kept for the duration of the contract and for the statutory limitation period (which is, except in exceptional cases, five years).
IKOULA keeps the data collected via the newsletter form as long as the person does not unsubscribe (via the unsubscribe link incorporated in each newsletter).
IKOULA keeps customer account data in accordance with the rules applicable to statutory limitation periods and the legal and regulatory provisions applicable in the matter.
Data concerning automated decisions are only kept if they have given rise to a dispute with Ikoula or if there are serious grounds for believing that future disputes may arise.
IKOULA implements the necessary measures to ensure the security and confidentiality of your data, in particular:
- Secure data access by authorised personnel
- Logging connections
- Data encryption
Information relating to cookies can be accessed via the following address : https://www.ikoula.com/en/cookies
8. Your rights to your data
You can access and obtain copies of the data concerning you, object to the processing of these data, have them corrected or have them deleted. You also have a right to limit the processing of your data. You also have a right to limit the processing of your data.
In addition to the rights set out above where data processing is carried out, in the specific case of automated decision-making, any person who has been the subject of such a decision may request that a human person intervene, in particular, to obtain a review of his or her situation, to express his or her own views, to obtain an explanation of the decision or to contest it.
Understanding your rights
You also have the right to formulate specific and general guidelines regarding the retention, erasure and disclosure of your data after your death.
The communication of specific post-mortem instructions and the exercise of these rights are made by sending a letter by post to the DPO whose contact details are specified below. Requests concerning the fate of post-mortem data must be accompanied by a copy of an identity document before they can be processed.
8.1 Exercising your rights
The Data Protection Officer (DPO) of IKOULA is your contact for any request to exercise your rights regarding this processing.
Contact the DPO electronically: firstname.lastname@example.org
Contact the DPO by post:
26 rue Saussier Leroy,
Telephone: +33 (0)186 950858
8.2 Complaining to the CNIL
If you feel, after contacting us, that your rights regarding your data are not respected, you can send a complaint to the CNIL.