Privacy policy

PRIVACY POLICY

1. Introduction

This Privacy Policy is issued by Alicja Korek-Courbon, acting as Data Controller (hereinafter “the Controller”), and sets out the manner in which personal data is collected, processed, and protected in the context of the use of this website (the “Site”) and related professional activities.

The Controller is committed to ensuring that all processing of personal data complies with Regulation (EU) 2016/679 of 27 April 2016 (General Data Protection Regulation – GDPR) and applicable French data protection laws.

This Policy informs data subjects of:
• The categories of personal data collected;
• The purposes and legal bases of processing;
• The recipients of the data;
• The retention periods applicable;
• The security measures implemented;
• The rights available to data subjects.

2. Definition of Personal Data

Personal data refers to any information relating to an identified or identifiable natural person, directly or indirectly.

Within the framework of the Site and associated services, such data may be collected either directly from the data subject or indirectly through the use of the Site.

3. Categories of Personal Data Collected

The Controller may collect and process the following categories of personal data:

3.1 Identification Data
• First name
• Last name
• Postal address
• Email address
• Telephone number

3.2 Technical Data
• IP address
• Browser type and version
• Device information
• Log and connection data

3.3 Professional and Service-Related Data
• Information necessary for the execution of consulting services
• Data provided within the framework of professional engagements
• Where strictly necessary, sensitive data as defined under Article 9 GDPR

3.4 Usage Data
• Navigation data
• Interaction with the Site
• Technical performance data

4. Purposes and Legal Bases of Processing

Personal data is collected for explicit, legitimate, and determined purposes and is processed on the following legal bases:

4.1 Performance of Contractual Obligations
• Execution of consulting and advisory services
• Contract management and administration
• Billing and invoicing
• Client relationship management

4.2 Legitimate Interests Pursued by the Controller
• Business development and communication regarding DEI-related activities and services
• Ensuring security and proper functioning of the Site
• Fraud prevention and technical monitoring

4.3 Legal Obligations
• Compliance with accounting, tax, and regulatory obligations
• Response to lawful requests from public authorities

4.4 Consent
• Processing of contact requests submitted via forms or email
• Where required, commercial communication not based on legitimate interest

Where the provision of data is mandatory, such requirement is clearly indicated. Failure to provide mandatory data may result in the inability to process the request.

5. Data Controller

The Data Controller is:

Alicja Korek-Courbon
Telephone: +33 6 83 80 62 89
Email: hello@alicjakorekconsulting.com

6. Recipients of Personal Data

Personal data may be disclosed strictly on a need-to-know basis to the following categories of recipients:

6.1 Internal recipients
• Authorised personnel
• Assistants and collaborators
• Interns
• Departments involved in service delivery

6.2 External recipients
• Administrative, accounting, and legal service providers
• IT service providers (hosting, maintenance, infrastructure)
• Communication and operational service providers

6.3 Public authorities

Personal data may be disclosed to administrative or judicial authorities where required by law or legal proceedings.

All third-party recipients are bound by contractual obligations ensuring confidentiality, security, and compliance with applicable data protection regulations.

7. Data Retention Periods

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected.
• Client and contractual data: retained for the duration of the contractual relationship, then archived in accordance with applicable legal limitation periods.
• Prospect and commercial communication data: retained for a maximum period of three (3) years from the end of the business relationship or last contact.
• Archiving: certain data may be retained beyond these periods where necessary for legal compliance, dispute management, or evidentiary purposes. Such data is stored in secure, restricted-access environments.

8. Security of Processing

The Controller implements appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

Where processors are engaged, the Controller ensures that they provide sufficient guarantees of compliance with GDPR requirements and implement adequate security measures.

9. Data Hosting

Personal data is hosted and stored on secure servers located within the European Union, including infrastructure provided by o2switch.fr and other secure hosting or cloud service providers.

Where applicable, IP addresses may be processed for security purposes and to derive approximate geographic location.

10. Rights of Data Subjects

In accordance with applicable regulations, data subjects have the following rights:
• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object
• Right to withdraw consent at any time
• Right to define post-mortem directives
• Right to lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL)

Requests relating to the exercise of rights may be addressed to:
📧 hello@alicjakorekconsulting.com

The Controller may request proof of identity where necessary to verify the identity of the requesting individual.

11. Amendments to this Policy

This Privacy Policy may be amended at any time in order to reflect legal, regulatory, or operational developments.

Any updated version shall take effect upon publication on the Site.

12. Contact

For any questions relating to this Privacy Policy or the processing of personal data, please contact:

📧 hello@alicjakorekconsulting.com