Updated on 25 January 2022

This Privacy Policy is addressed to you, as a user of the website www.k-ip.fr (hereinafter the “Site”). It is written to describe and inform you of the processing that may be carried out via the Site.

The Site is published by the company API-K, whose information is available under the tab “Legal Notice” (“We”).

We are committed to protecting your privacy and the confidentiality of your personal data.

This Policy allows Us to specify who controls and manages the personal data collected via the Site, as well as the personal information collected, the purposes and methods of processing, and the extent of data transfers. Similarly, the Policy specifies the security measures that We put in place to protect your data, and informs you of all your rights with respect to your personal data, in accordance with European Union regulations.

API-K is the data controller of the personal data collected on our Site in accordance with the applicable laws and regulations on data privacy including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 known as the “General Data Protection Regulation” and Law No. 78-17 of 6 January 1978 known as the “Data Protection Act” as amended (together hereinafter referred to as “GDPR”).

If you have any questions about the Personal Data Policy, please do not hesitate to contact us:

Communication Data: this includes your preferences for receiving marketing or advertising from us.

Profile Data: This includes your interests, preferences, testimonials, opinions and responses to any surveys.

Order Data: this includes your purchase history and order details, information about your payments or refunds from us and details of the products you have purchased from us. We will not collect or process your credit card information directly. Payments are processed by a specialist service provider (set out in section 2 below) via a secure online payment platform and are never sent via our Site in clear text but are encrypted to a high security standard. Order data also includes information you provide to us when you request further information about a product or order or when you contact our customer service department.

Purpose(s)	Data processed	Legal basis(s)	Duration of retention in active base
Creation and management of your customer account	Identification data Profile data	Fulfilment of a contract	Until you request the deletion of the account or at the latest 3 years after your last contact with us.
Processing and execution of your orders	Identification data Order data	Fulfilment of a contract	Until you request the deletion of the account or at the latest 3 years after your last contact with us.
To respond to you and resolve your queries	Identification data Order data	Fulfilment of a contract	Until your query or request is closed
For marketing purposes	Identification data Profile data Communication data	Your consent	Until you request the deletion of the account or at the latest 3 years after your last contact with us.
To manage our relationship with you	Identification data Order data Profile data	Our legitimate interest	Until you request the deletion of the account or at the latest 3 years after your last contact with us.
To ensure that you can exercise your rights (as listed below)	Identification data	Legal obligation	Until you request the deletion of the account or at the latest 3 years after your last contact with us.
To assert and defend the rights of the controller or third parties before the judicial authorities	Identification data Order data Communication data	Our legitimate interest	Until the end of the legal prescription – Article L110.4 of the Commercial Code
In order to prevent fraud and to ensure the regularity of transactions	Identification data Order data	Identification data Order data Our legitimate interest (to prevent fraud or to guarantee the security of the network and information of your computer systems)	5 years

Only the authorised and specified persons mentioned below will have access to your data:

Your data is not communicated, exchanged, sold or rented to any other person than those mentioned above.

Users of the Site understand and accept that their login and password will be shared between the Site and the K-IP Application published by API-K (the “Application”) and that they will therefore be able to connect to the Application with the same login and password used on the personal space of the Site.

The deposit of cookies on your terminal during the consultation and use of the Website is governed by the Cookies Policy which we invite you to read carefully.

In accordance with the French Data Protection Act, as well as the RGPD, you have the right to obtain the communication and, if necessary, the rectification or deletion of data concerning you, by contacting:

You may also exercise your right to withdraw your consent at any time, for data that has been collected and is processed on the basis of this legal basis.

Vous disposez de la possibilité de vous opposer, pour des motifs légitimes, à figurer dans un fichier, et pouvez refuser sans avoir à vous justifier, que les données qui vous concernent soient utilisées à des fins de prospection commerciale.

En outre, vous disposez de la possibilité de vous opposer à tout moment, pour des raisons tenant à votre situation particulière, aux traitements énumérées à l’article 21 du RGPD.

You have a right to the portability of the personal data you have provided to us, understood as the data you have actively and consciously declared in the context of accessing and using the Site and its services, as well as the data generated by your activity in the context of using the Site and its services. We remind you that this right only concerns data collected and processed on the legal basis of consent or the execution of the contract binding us.

This right may be exercised free of charge, at any time, and in particular when you close your account on the Site, by contacting us at the addresses mentioned in Article 4.a).

In this context, we will send you your personal data, by any means deemed useful, in a standard open format that is commonly used and machine-readable, in accordance with the state of the art.

You are reminded that you also have the right to limit the processing of your personal data, understood as a freeze on the use of your data. You have the right to obtain the limitation of the processing of your personal data in the following cases

You can exercise this right by contacting Us at the addresses mentioned in Article 4.a).

You are reminded that you have the right not to be the subject of a fully automated decision which would produce a legal effect or affect you in substantially the same way, unless you have given Us your express consent, if such processing is necessary for the conclusion or performance of a contract, or if it is authorised by specific legal provisions.

In any event, We must inform you if such a fully automated decision has been taken against you and you may :

You are also informed that you have the right to lodge a complaint with a competent supervisory authority (the Commission Nationale Informatique et Libertés for France), in the Member State in which you are normally resident, where you work or where the violation of your rights would have been committed, if you consider that the processing of your personal data which is the subject of this Policy constitutes a violation of the applicable laws.

This recourse may be exercised without prejudice to any other recourse before an administrative or judicial court. Indeed, you also have the right to an effective administrative or judicial remedy if you consider that the processing of your personal data which is the subject of this Policy constitutes a violation of the applicable laws.

To find out more about your rights, you can also consult the website of the Commission Nationale de l’Informatique et des Libertés, accessible at the following address: https://cnil.fr

We and our possible subcontractors undertake to implement all technical and organisational measures to ensure the security of our processing of personal data and the confidentiality of your data, in accordance with the French Data Protection Act (Loi informatique et Libertés) and the European Data Protection Regulation (RGPD) and Law No. 2018-133 of 26 February 2018 “containing various provisions for adapting to European Union law in the field of security”.

In this respect, We take the necessary precautions, in view of the nature of your data and the risks presented by their processing, to preserve the security of the data and, in particular, to prevent them from being distorted, damaged or accessed by unauthorised third parties (physical protection of the premises, authentication process for our customers with personal and secure access via confidential identifiers and passwords, logging of connections, encryption of certain data, etc.).

We undertake to make our best efforts not to transfer your data outside the European Union.

Should we do so, we confirm that measures to control such transfer(s) will be taken to ensure the confidentiality and integrity of your data.

We reserve the right, at our sole discretion, to change this Policy, in whole or in part, at any time.

Such changes will be effective upon posting of the new privacy policy. Except for material change(s) requiring your express consent, your use of the Site following the effective date of such changes will constitute your acknowledgement and acceptance of the new privacy policy. If you do not agree with the new privacy policy, you should not use the Site and you may exercise your rights at the addresses mentioned in Article 4.a hereof.