Data protection
Data processed by this site.
This page is an English rendering of the French data protection policy. In the event of any discrepancy, the French version prevails.
Principle
This is a static site. It sets no advertising cookie, embeds no third-party tracker, loads no font or script from an external service, and passes no information to a third party when a page is simply viewed.
Institutional form
- Purpose
- To handle an institutional enquiry and respond to it.
- Legal basis
- Konect SARL’s legitimate interest in receiving, qualifying and responding to a professional enquiry. The form checkbox acknowledges that this information has been read; it is not the legal basis for processing.
- Data collected
- Name, organisation, role, country, work email address, purpose and content of the message. No sensitive data is requested.
- Technical data
- IP address and timestamp, retained on a limited basis solely to prevent abuse.
- Recipients
- Management, operations leadership and the technical lead concerned by the enquiry, within the limits of their responsibilities.
- Retention period
- Twelve months from receipt, then automatic deletion. The purge is performed by a scheduled task, not by manual intervention.
- Place of hosting
- Private infrastructure operated by Konect SARL in its data centres in Montréal, Québec, Canada.
- Processors
- No form-processing provider. The site and receipt of enquiries are operated on Konect SARL’s private infrastructure.
- Transfers
- No transfer to a third-party form-processing provider. The data is received by infrastructure operated on behalf of Konect SARL.
Audience measurement
No audience measurement is in place at present. If one were introduced, it would operate without cookies, without a persistent identifier and without transfer to a third party, and this page would be updated before it went live.
International transfers
Konect SARL is established in Mali and hosts this site on its private infrastructure in Canada. Operational access needed to handle an enquiry may therefore involve Mali and Canada.
- Countries of processing
- Mali, Canada.
- Adequacy decision
- Canada benefits from a partial adequacy decision of the European Commission covering private bodies subject to its federal personal information protection legislation. Mali is the subject of no adequacy decision.
- Safeguards applied
- Minimisation of the data collected, encryption in transit and at rest, access restricted to designated individuals, logging of access, and a bounded retention period.
- Transfer instrument
- For an occasional enquiry initiated from the European Economic Area, the transfer is limited to pre-contractual measures requested by the individual. Any recurring processing or targeted campaign in the Union is preceded by contractual safeguards and a transfer assessment.
Rights of data subjects
Every person has a right of access to the data concerning them, and rights of rectification, erasure, restriction of processing, objection and portability. They may also give directions as to what becomes of their data after their death.
Such requests should be sent to [email protected] or through the contact page, selecting the corresponding purpose. A response is provided within one month, extendable by two months for a complex request, the extension being reasoned.
No identity document is requested by default. One may be requested only where there is reasonable doubt as to the identity of the applicant, and it is destroyed once verified.
Anyone who considers that the processing of their data constitutes a breach may lodge a complaint with the competent supervisory authority of their country of residence.
The controller is Konect SARL. In Mali, the competent authority is the Personal Data Protection Authority (APDP).
Automated decision-making
No decision producing legal effects or significantly affecting a person is taken solely on the basis of automated processing. Enquiries received through this site are read and handled by a person.
Data breach
In the event of a data breach likely to give rise to a risk to the rights and freedoms of individuals, the competent supervisory authority is notified within the applicable time limits, and the individuals concerned are informed where the risk is high. The incident response procedure and the designated officer are documented internally.
Security
Exchanges with this site are encrypted in transit. The content of messages received is encrypted at rest and is not written to technical logs. Access to enquiries is restricted to designated individuals and is logged.