The simplified joint stock company iDAKTO (hereinafter iDAKTO and as defined in Article 1) operating under the brand iDAKTO, offers software services to facilitate the authentication of its users and potential future customers (hereinafter “You” or “Users”) and informs them about its services via its website www.idakto.com

In order to offer for sale, sell and deliver its solution, iDAKTO collects personal data from users and customers of its website.

The purpose of this privacy policy is to inform users of the idakto.com website of the means used to collect, consult, process and store users’ personal data. The version of the policy in effect is the one that appears on the idakto.com website at the time the user contacts us for more information or to request access to a demonstration of iDAKTO services.

iDAKTO, as the data controller, is committed to comply with the provisions of Regulation (EU) No. 2016/679 of 27 April 2016 on the protection of personal data, which enforced on 25 May 2018. The Regulation ensures that personal data is processed with respect for fundamental rights and freedoms, as well as with respect for the dignity of the data subject, including confidentiality, personal identity and the right to protection of personal data.

This Privacy Policy (“Policy”) may be modified at any time by iDAKTO in accordance with the terms of Article 9 of this Policy, in particular in order to comply with any regulatory, jurisprudential, editorial or technical developments. The user must refer to the latest version of the Policy before any navigation.

1- Data Controller

The data controller, who collects the personal data and implements the data processing is:

iDAKTO – a simplified joint stock company with a capital of 120,000 Euros, registered in the Versailles Trade and Companies Register in France under the number 851352823, which registered office is located at 43 Boulevard Vauban, 78280 Guyancourt, represented by Mr. Hassan Maad, as CEO.

2- Personal Data Collection

The use of the website www.idakto.com implies the collection and processing of different types of personal data for different purposes and using different methods.

The personal data likely to be collected is the following:

• User data: i.e. data that the user provides when requesting a demonstration of iDAKTO services via a contact form (first name, last name, email address, cell phone number).
• Browsing data: refers to data that the publisher collects during the User’s browsing of the website, such as the date and time of the connection and/or browsing, the type of browser, the language of the browser, the User’s IP address, location data and geolocation.

Third-party providers of applications, tools, gadgets and plug-ins on our website and its mobile version, as well as networks on which iDAKTO publishes editorial and promotional content (such as Facebook and Twitter, LinkedIn) may also use automated means, related to the centers of interest and context, to collect data from users (interactions with functions and profiling of online activity). This data is collected directly by these providers and/or third parties and is subject to their policies.

To the extent permitted by applicable law, iDAKTO is not responsible for the practices of these providers and third parties.

Some services may be impaired or inaccessible without consent to the collection of the data described in this Policy.

3- Purposes of Personal Data Collection

The data collected in the context of the use of the site is processed to meet the purposes described below.

The regulations in force protect the privacy of Users and require any data controller to be able to justify a legitimate basis for such processing. The regulation thus provides among the legal bases for processing (Article 6 GDPR).

Regarding the request for information to iDAKTO via the contact form set up, this use is permitted after obtaining your consent.

In order to answer your request as precisely as possible, you will be provided with an insert allowing you to specify your request. If, in order to explain your situation, you need to give iDAKTO personal information, we ask you to transmit what is strictly necessary.

The provision of this personal data is mandatory in order for iDAKTO to respond to your request. This data is kept until your request is processed or your consent is withdrawn.

If you withdraw your consent to the processing of your personal data for the purpose of responding to your request, your name, first name and e-mail address will no longer be used and will be deleted.

iDAKTO is the sole recipient of your personal data.

Any submission of a contact form via the idakto.com site is subject to your prior acceptance of the Policy by checking the box “I have read and accept the Privacy Policy”. By checking this box, you acknowledge that you have read, understood and fully accept this policy.

With respect to requests for demonstrations of iDAKTO services, such use is permitted only with your consent. The communication of this personal data, except for the telephone number, is mandatory in order for iDAKTO to agree with you on the modalities of the demonstration.

This data is kept until your request is processed or your consent is withdrawn.

If you withdraw your consent to the processing of your personal data for the purpose of fulfilling your request for a demonstration, your name, first name, e-mail address and telephone number will no longer be used and will be deleted.

iDAKTO is the sole recipient of your personal data.

Concerning the administration of the website and the fight against fraud, personal data (cookies) to update and enrich the website www.idakto.com and to fight against fraud on the Internet may be used.

iDAKTO does not share any personal data for commercial purposes with third parties.

The User has the right to modify his/her personal data and to withdraw his/her consent at any time by contacting iDAKTO.

4- User Rights

In accordance with Articles 14 to 22 of Regulation 2016/679 of 27 April 2016, any natural person using the website www.idakto.com has the right to exercise the following rights:

• A right of access, rectification and deletion of the data collected
• A right to object to the processing of their data or a right to withdraw your consent
• A right to the limitation of the treatment
• A right to the portability of collected data
• Can formulate directives concerning the conservation, deletion, and communication of his or her personal data after his or her death in accordance with Article 40-1 of Law 78-17 of January 6, 1978.

Finally, if iDAKTO detects a breach of personal data likely to generate a high risk for the rights and freedoms of its users, it undertakes to inform the users concerned as soon as possible.

You can exercise all these rights by contacting privacy@idakto.com or by mail to iDAKTO – 43 boulevard Vauban, 78280 Guyancourt, France.

The User must attach proof of identity to his request.

The User may refer to the supervisory authority in his country of residence to lodge a complaint, for France, the CNIL: https://www.cnil.fr/

5- Data Retention

Your data will not be kept beyond the time strictly necessary for the purposes stated above and in accordance with the applicable laws and regulations. The user’s data is deleted when the retention periods expire. Nevertheless, the data may be archived beyond the periods provided for the needs of research, the establishment, and the prosecution of criminal offenses for the sole purpose of allowing, as necessary, the provision of this data to the judicial authority.

6- Security Measures for Collected Personal Data

As Data Controller, iDAKTO undertakes to take all necessary precautions to preserve the security and confidentiality of the data and in particular to prevent it from being altered, distorted or accessed by unauthorized third parties.

All data is hosted in Europe. No transfer of personal data will be made outside the European Economic Area.

7- Cookies

When browsing the website, information relating to the navigation of the user’s terminal (computer, tablet, smartphone, etc.), may be recorded through files called “Cookies”.

The cookie may allow in some cases, not applicable to the iDAKTO website, to monitor the navigation or analysis of user behavior, and in particular:

• To measure the number of visitors to the website,
• To personalize the display of the content available to the user

The User can modify his/her preferences regarding cookies through the browser software used.

iDAKTO pays particular attention to the latest decisions and positions taken by the national and European control authorities regarding cookies. Thus, iDAKTO undertakes to respect in particular the guidelines established by the CNIL via Deliberation No. 2020-091 of September 17, 2020, adopting guidelines on the application of Article 82 of the Act of January 6, 1978, as amended, to read and write operations in a user’s terminal (including “cookies and other tracers”) and repealing Deliberation No. 2019-093 of July 4, 2019

Finally, iDAKTO has taken note of the decision rendered by the CNIL on February 10, 2022 concerning Google Analytics. We have currently implemented an alternative solution (Matomo: https://fr.matomo.org/) allowing us to fulfill our regulatory and legislative obligations regarding the protection of personal data.

8- Links to Third Party Websites

The website may provide links to sites, applications, and services other than those of iDAKTO that may be operated by third party companies.

iDAKTO is not responsible for the processing of personal data by these third-party sites. The User should consult the personal data protection policies.

9- Changes to the Privacy Policy

Any changes to this Policy will be posted on this page. iDAKTO reserves the right to adapt and/or modify it at any time and without prior notice. The User will be informed – to the extent that it is technically and legally possible – by a notification through your contact information available by iDAKTO, namely by email. It is strongly recommended to check this page frequently, referring to the date of the last modification indicated at the bottom. If the changes affect the processing activities carried out on the basis of the User’s consent, iDAKTO must collect your consent again.

10- Contact

If you have any questions and/or complaints or comments regarding the processing of your personal data or this Policy, please contact us at the following address: privacy@idakto.com

Version June 2023