Data protection

Privacy policy

We collect strictly what is needed to answer your enquiry, and nothing else. This page sets out exactly which data is processed, why, for how long, and how you can take back control of it at any time.

Last updated: [TO COMPLETE — publication date]

English translation provided for convenience. In the event of any discrepancy, the French version prevails.

Data controller

The controller of data collected on this website is PPF Global Consulting, whose details appear in the legal notice. Any request relating to your data may be sent to contact@ppf-conseil-formation.fr.

Data collected

The only personal data collected on this website is what you voluntarily provide through the contact form or by e-mail:

  • Full name (required)
  • Work e-mail address (required)
  • Nature of the need expressed (required)
  • Message content (required)
  • Company, phone number and indicative budget (optional)

The site performs no implicit collection: no analytics, no profiling, no advertising tracker, and no resale to third parties.

Purpose and legal basis

Your data is processed for one purpose only: to respond to your enquiry and, where relevant, prepare a commercial proposal.

The legal basis is your consent (Article 6(1)(a) GDPR), given via the form checkbox, together with the performance of pre-contractual steps taken at your request (Article 6(1)(b) GDPR).

Recipients

Your data is intended solely for the people at PPF Global Consulting handling your enquiry. It is never sold, rented or transferred for commercial purposes.

The following may act as technical processors, strictly within the limits of their assignment: our hosting provider, our e-mail provider and, where applicable, the service routing the contact form. These providers are selected for offering guarantees compliant with the GDPR.

Transfers outside the European Union

We prioritise providers hosting data within the European Union. Should a transfer to a third country occur, it would be covered by the appropriate safeguards set out in Chapter V of the GDPR (adequacy decision or standard contractual clauses).

Retention periods

  • Enquiry with no commercial follow-up: 12 months from the last contact.
  • Active commercial relationship: duration of the relationship, then 3 years from the last contact for prospecting purposes.
  • Accounting and contractual records: 10 years, as required by law.

Once these periods expire, data is deleted or anonymised.

Security

We implement appropriate technical and organisational measures to protect your data: encrypted transport (HTTPS), access restricted to authorised personnel, strong authentication on the tools we use, and minimisation of the data collected.

Cookies

This website sets no cookies for analytics, advertising or social networks. No consent banner is therefore required. Typefaces are served from our own domain: no request is sent to a third-party service when you visit.

Your rights

Under the General Data Protection Regulation and the French Data Protection Act, you have the following rights:

  • Right of access — obtain a copy of the data concerning you.
  • Right to rectification — correct inaccurate or incomplete data.
  • Right to erasure — request deletion of your data.
  • Right to restriction of processing.
  • Right to object, in particular to any prospecting.
  • Right to data portability.
  • Right to withdraw consent at any time, without affecting the lawfulness of processing carried out beforehand.

To exercise these rights, write to contact@ppf-conseil-formation.fr. You will receive a response within one month at the latest. Proof of identity may be requested where there is reasonable doubt as to the identity of the requester.

Complaints

If, after contacting us, you believe your rights have not been respected, you may lodge a complaint with the French data protection authority (CNIL) — cnil.fr — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.

Data processed as part of our engagements

This policy covers the website. When we process data on behalf of a client — notably during data enrichment engagements — we act as a processor within the meaning of Article 28 GDPR. The applicable terms (purposes, retention, security, fate of the data at the end of the engagement) are then set out in a specific data processing agreement signed with the client acting as controller.

Changes

This policy may change to reflect legal or technical developments. The date of the latest update appears at the top of this page.