Privacy Policy

Protection of your personal data in compliance with the GDPR.

Last updated: February 15, 2026

1. Data Controller

The data controller for personal data collected on the kalicertif.fr website is:

2. Data Collected

We collect the following data only when you voluntarily provide it:

  • Contact form: name, email address, company (optional), subject, and message
  • Platform registration: last name, first name, email address, password
  • Browsing data: IP address, browser type, pages visited (via analytics cookies, with your consent)

3. Purposes of Processing

Your data is used to:

  • Respond to your contact and demonstration requests
  • Provide and improve our blockchain certification services
  • Send communications related to your account (with your consent)
  • Analyse website usage to improve the user experience

4. Legal Basis

The processing of your data is based on:

  • Your consent (contact form, analytics cookies)
  • Performance of a contract (provision of certification services)
  • Legitimate interest (improvement of our services, security)

5. Data Retention Period

  • Contact data: 3 years after the last interaction
  • Account data: duration of the contractual relationship + 5 years (legal obligation)
  • Browsing data: 13 months maximum

6. Data Sharing

Your data is never sold. It may be shared with:

  • Stripe for payment processing
  • OVHcloud for hosting (servers located in France)
  • The Unikium Blockchain for certificate anchoring (only cryptographic hashes are stored on-chain, never your personal data)

7. Transfers Outside the European Union

Your data is primarily hosted in France (OVHcloud). However, certain sub-processors may process data outside the European Union:

  • Stripe, Inc. (United States) — payment processing. Stripe is certified under the EU-US Data Privacy Framework and applies Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring a level of protection equivalent to the GDPR.

No transfer outside the EU is carried out without adequate safeguards in accordance with Articles 44 to 49 of the GDPR. You may obtain a copy of the safeguards in place by contacting us at dpo@kalicertif.fr.

8. Your Rights (GDPR)

In accordance with the General Data Protection Regulation, you have the following rights:

  • Right of access: obtain a copy of your personal data
  • Right to rectification: correct inaccurate data
  • Right to erasure: request the deletion of your data
  • Right to data portability: receive your data in a structured format
  • Right to object: object to the processing of your data
  • Right to restriction: restrict processing in certain cases

To exercise your rights, contact our DPO at dpo@kalicertif.fr. We will respond within 30 days.

You may also file a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés), the French data protection authority: www.cnil.fr.

9. Cookies

The website uses cookies that are strictly necessary for its operation. Analytics cookies are only placed with your explicit consent.

  • Essential cookies: session, display preferences — placed without consent (legal basis: legitimate interest, strictly necessary)
  • Analytics cookies: audience measurement — placed only after consent

9.1 Consent Management

In accordance with the CNIL guidelines of 1 October 2020, a cookie consent banner is displayed on your first visit. You may modify your preferences at any time by clicking the "Manage cookies" link available at the bottom of each page.

Your consent is recorded for a maximum period of 13 months. Refusing analytics cookies does not affect your access to our services in any way.

10. Security

We implement technical and organisational measures to protect your data: SSL/TLS encryption, secure hosting by OVHcloud in France, strict access controls.

11. Amendments

This policy may be updated. The date of the last modification is indicated at the top of the page. We will inform you of any significant changes.