Privacy policy
Last updated: 11/2026
This English translation is provided for information purposes only. In the event of any discrepancy, the French version prevails.
KUMAIKO does everything in its power to protect your Personal Data in accordance with the EU General Data Protection Regulation (GDPR) and the amended French Data Protection Act no. 78-17 (“loi Informatique et Libertés”).
This policy applies to the processing of your Personal Data when you provide Data through the kumaiko.com website and its subdomains (hereinafter the “Site”), and describes how your Personal Data is processed by KUMAIKO.
1.Definitions
“Personal Data” or “Data” means any information that directly or indirectly identifies a natural person (e.g. last name, first name, phone number, date of birth, address…).
“Controller” means the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing.
“Data subject” means any natural person whose Personal Data is collected and processed through the Site.
The terms defined above have the same meaning whether used in the singular or plural.
2.Controller contact details
In this privacy policy, the terms “we”, “our”, “us” or “KUMAIKO” refer to:
KUMAIKO, a French EURL with a share capital of €1,000, registered with the Villefranche-Tarare Trade and Companies Register under number 942 216 763, with its registered office at 399 route du Michel, 69620 Val d’Oingt, France.
KUMAIKO acts as Controller for the processing of your Data.
3.Purposes and legal bases of processing
Your Data is processed for the following purposes:
| Purposes | Data processed | Legal basis |
|---|---|---|
| Handling contact requests and meeting bookings | Last name, first name, email, company, message content, selected time slot | Depending on the situation, the legal basis is your consent or the performance of a contract or of pre-contractual measures. |
| Business development, newsletters and events | Contact details | The legal basis is our legitimate interest or your consent. |
| Processing job applications | Identity, information contained in the résumé, letters and emails sent by candidates, follow-up given to the application | The legal basis is the performance of pre-contractual measures. |
| Handling requests to exercise individual rights | Last name, first name, email, type of request and, where applicable, a copy of identity documents | The legal basis is compliance with our legal obligations. |
| Website audience measurement | Anonymized browsing data (pages viewed, referrer, browser and device type, country). No cookies are set and no IP address is stored. | The legal basis is our legitimate interest in measuring and improving traffic to the Site. |
Whether the Data requested is mandatory or optional, and the consequences of not providing it, are specified at the time of collection, in particular by the presence or absence of an asterisk.
Cookies. The Site does not set any advertising or tracking cookies. Audience measurement is carried out with Umami, configured without cookies and without storing IP addresses: no prior consent is therefore required.
4.Recipients of your Data
Your Personal Data may be shared with third parties by KUMAIKO in the following situations:
- Transfers to our partners and service providers, for example for hosting the Site (OVH, data hosted in France), online meeting booking (Microsoft Bookings, a Microsoft 365 service provided by Microsoft Ireland Operations Limited, data hosted in France) and audience measurement (Umami, data hosted in the European Union);
- To regulatory and supervisory authorities, law enforcement or fraud prevention authorities, and to our advisers (including lawyers or auditors), where required by law or necessary to defend our rights.
5.Retention period
Your Data is kept for the following periods:
| Purposes | Retention period |
|---|---|
| Handling contact requests and meeting bookings | Data relating to a request is kept for 5 years from the handling of that request. |
| Processing job applications | 2 years after the last contact with the candidate. |
| Handling requests to exercise individual rights | Data is kept for the calendar year of the request plus five years. Any identity documents provided in support of the request are deleted no later than 1 year after receipt of the request. |
| Business development, newsletters and events | 3 years from the last contact, or until the person withdraws their consent where the legal basis is consent. |
| Website audience measurement | Statistics are anonymous and aggregated. They are kept for a maximum of 25 months. |
At the end of the retention periods above, your Data will be deleted or anonymized.
6.Your rights
In accordance with the amended French Data Protection Act of 6 January 1978 and the GDPR, you have the following rights:
| Get a copy of your Data - “right of access” | You have the right to obtain confirmation of the Data actually processed, a copy of that Data and information on how we process it. |
|---|---|
| Correct your Data - “right to rectification” | You have the right to ask us to correct your Data if it is inaccurate or incomplete. |
| Delete your Data - “right to erasure” | You have the right to ask us to delete your Data where: it is no longer necessary for the purposes for which it was collected; you have withdrawn your consent; you have objected to the processing; it has been processed unlawfully; or its erasure is required by a legal obligation. |
| Freeze the use of your Data - “right to restriction of processing” | You may ask us to restrict the processing of your Data if: you believe the Data is inaccurate; the processing is unlawful and you prefer restriction to erasure; the Data is no longer needed for our processing but you need it for legal claims; or you have exercised your right to object (see below) and wish to verify whether our legitimate grounds override yours. |
| Stop the processing of your Data - “right to object” | You may object to the processing of your Data based on our legitimate interests, unless we can demonstrate that our legitimate interests override your rights or that your Data is needed for legal claims. |
| Change your mind - “right to withdraw consent” | If you consented to the processing of your Data, you have the right to withdraw your consent at any time. |
| Take your Data with you - “right to data portability” | Under certain conditions, you have the right to receive a copy of your Data in order to transmit it to another controller. |
| Give post-mortem instructions - “right to set instructions regarding your Data after death” | You have the right to register instructions with us on what should happen to your Data after your death. |
| Request human intervention - “right not to be subject to automated decisions” | If an automated decision that has legal effects on you or significantly affects you is made, you have the right to request human intervention to review the decision or, in some cases, to object to being subject to a fully automated decision. |
You can exercise these rights by emailing dpo@kumaiko.com or by writing to: KUMAIKO, 399 route du Michel, 69620 Val d’Oingt, France.
We will respond to any request within one month of receipt. If your request is not sufficiently precise or does not contain all the information needed to respond, KUMAIKO may ask you for additional information.
If you have a complaint about the way KUMAIKO processes your Data, you also have the right to lodge a complaint with the French data protection authority (CNIL), 3 Place de Fontenoy, TSA 80715, 75334 PARIS CEDEX 07, France, or with the supervisory authority of your country of residence.
7.Data security
We have implemented security measures in line with industry standards for the processing of Personal Data, in order to prevent any security breach and to prevent your Data from being accessed, altered, disclosed or destroyed unlawfully.
All information you send us is stored on our secure servers, or those of our service providers, within the European Economic Area (“EEA”), subject to the transfers mentioned in section 4.
8.Changes to this privacy policy
We reserve the right to amend this privacy policy.
In the event of a significant change affecting your rights, we will take the necessary steps to inform you and will publish the updated privacy policy on the Site.
9.Contact us / disputes
For any question about this privacy policy, please contact us:
- by email: dpo@kumaiko.com;
- by post: KUMAIKO, 399 route du Michel, 69620 Val d’Oingt, France.