Privacy policy
1. Purpose and scope of the Privacy Policy
KURMI SOFTWARE places the utmost importance and exercises the greatest care in protecting privacy and personal data, as well as complying with the provisions of the applicable laws and regulations.
Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the “GDPR”) states that personal data must be processed in a lawful, fair and transparent manner. Therefore, this privacy policy (hereinafter the “Policy”) aims to provide you with simple and clear information about how we process your personal data when browsing and using the services on our website.
2. Data controller
As part of your activity on the website https://kurmi-software.com/fr/, we collect and use personal data relating to you, a natural person (hereinafter “Data Subject”).
For all processing activities, KURMI SOFTWARE, a simplified joint-stock company registered under SIREN number 529230773, with its registered office in Rennes (35000), and specializing in the application software publishing sector, determines the means and purposes of the processing. Thus, we act as the Data Controller, within the meaning of the regulations relating to personal data, and in particular Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
3. What types of personal data do we collect and how do we collect them?
By using our website or subscribing to our services, you provide us with certain information about yourself, some of which can identify you (“Personal Data”). This occurs when you browse our site, fill out online forms, request demos, or simply wish to receive our communications.
The nature and quality of the Personal Data collected about you vary depending on your interactions with KURMI SOFTWARE. The main types of Personal Data are:
– Identification Data: This includes all information that allows us to identify you, such as your first and last name, email address, and device ID. You can also add other personal information to your website user profile, such as your phone number and address.
– Professional Data: Company name, job title, country of establishment, country, and type of organization.
– Login data: This includes all the information we need to access your personal account, such as your password, login date and time, and other information necessary for authentication and account access.
We also collect your IP address for maintenance and statistical purposes.
– Browsing information: By browsing our website, you interact with it. Therefore, certain information about your browsing activity is collected.
– Data collected from third parties: This includes personal data that you have agreed to share with us or on publicly accessible social networks and/or that we may collect from other publicly accessible databases.
KURMI SOFTWARE will not collect or process personal data that directly or indirectly relates to your race, health status, sexual orientation, political or philosophical beliefs, or religious beliefs.
4. Why do we collect your personal data and how?
We collect your Personal Data for specific purposes and on various legal bases.
When performing the contract or implementing pre-contractual measures, your data are processed for the following purposes:
- Management of support access accounts;
- Management of complaints and after-sales service;
Based on your consent, your Data is processed for the following purposes:
- Management of leads and requests for commercial information;
- Management of demonstration requests;
- Marketing communications;
- Management of cookies and consents;
- Management of webinar registrations;
- Creation of a prospecting blacklist
Based on the legitimate interest of KURMI SOFTWARE , your Data is processed for the following purposes:
- – User authentication;
5. Do we share your personal data?
Your data are intended for authorised Kurmi employees who are responsible for managing and performing contracts and fulfilling legal obligations, depending on the purposes for collecting the data and to the extent permitted by their respective powers.
For some tasks relating to the purposes of processing, and to the extent permitted by their respective duties and permissions, your data may be transferred to the following recipients:
– Entities within the KURMI SOFTWARE Group, in the context of outsourcing activities to another entity within the group;
– Service providers and subcontractors that we engage to perform a range of operations and tasks on our behalf, including: SALESFORCE, AUTOPILOT, PERSISTIQ, CONTACT FORMS, and CONTACT FORMS SUBMISSIONS.
– Business partners only when you have expressly consented by checking a box on our data collection forms;
– Duly authorized public authorities (judicial, regulatory, etc.), within the framework of our legal and regulatory obligations;
– Regulated professions (lawyers, bailiffs, etc.) that may be involved in the implementation of guarantees, debt collection, or litigation;
When your data are sent to our service providers and processors, they are asked to refrain from using the data other than for the purposes for which they were originally intended. We use our best efforts to ensure that such third parties maintain the confidentiality and security of your data.
In any case, only the necessary data are provided. We endeavour to ensure that your data are communicated or sent using secure methods.
We do not sell your data.
6. Are your personal data transferred to third countries?
KURMI SOFTWARE strives to store personal data in France, or at least within the European Economic Area (EEA).
However, the data that we collect when you use our platform or services may be transferred to other countries. For example, this may happen where some of our service providers are located outside the European Economic Area.
In such cases, we guarantee that data are transferred:
- To a country ensuring an adequate level of protection, i.e. a level of protection equivalent to what is required by European Regulations
- Under standard contractual clauses
- Under internal corporate rules
7. How long do we keep your personal data?
We store your personal data only for as long as necessary to achieve the purpose for which we collected the data, in order to meet your needs or fulfil our legal obligations.
Storage periods vary according to several factors, such as:
- The needs of KURMI SOFTWARE business activities;
- Contractual requirements
- Legal obligations
- Recommendations issued by the supervisory authorities
The storage periods for your data are as follows:
| Purpose | Storage Period |
|---|---|
| Lead and sales information request management; Demonstration request management; Marketing communication; Webinar registration management; Creating a prospecting blacklist | The data collected via the form is kept for 3 years from the date of collection or last contact. |
| – To offer you personalized services; – To monitor and improve our websites and applications; – To secure our websites/applications; – To protect you against fraud; – To debug the website; – To receive and use automatically sent device identification characteristics, and to link different devices; – To technically deliver advertisements or content, and to match and combine offline data sources. | Your browsing data on our website is kept for a maximum of 13 months. |
8. How do we guarantee the security of your personal data?
KURMI SOFTWARE is committed to protecting the personal data that we collect or process against any loss, destruction and alteration, as well as unauthorised disclosure and access.
Therefore, we take all appropriate technical and organisational measures, depending on the type of data and the risks involved in their processing. These measures must protect the security and confidentiality of your personal data. They may include such practices as restricted access to personal data for authorised persons only as required for their duties, pseudonymisation and encryption.
In addition, our practices and policies and/or physical and/or logical security measures (secure access, authentication process, backup copies, software, etc.) are regularly checked and updated if necessary.
9. What are your rights?
The GDPR provides data subjects with a number of rights that they can exercise. Therefore, the following rights are provided for:
- Right of information: the right to have clear, precise and complete information on how KURMI SOFTWARE uses personal data.
- Right of access: the right to obtain a copy of the personal data that the controller holds on the data subject.
- Right to rectification: the right to have the personal data corrected if they are inaccurate or obsolete and/or have any incomplete personal data completed.
- Right to erasure / right to be forgotten: the right, subject to certain conditions, to have the data erased or deleted, unless KURMI SOFTWARE has legitimate grounds to retain the data.
- Right to object: the right to object to KURMI SOFTWARE’s processing of personal data for reasons relating to the data subject’s particular situation (subject to conditions).
- Right to withdraw consent: the right to withdraw consent at any time where Processing is subject to consent.
- Right to restriction of processing: the right, subject to certain conditions, to request that personal data processing activities be temporarily suspended.
- Right to data portability: the right to request that the personal data be transmitted in a reusable format for use in another database.
- Right not to be subject to automated decision-making: the right for the data subject to refuse fully automated decision-making and/or exercise the additional safeguards provided in this respect.
- Right to post-mortem privacy: the right for data subjects to provide guidelines on what should happen to their personal data after their death.
Data subjects may be entitled to additional rights under local legislation.
As such, KURMI SOFTWARE has implemented a procedure for managing the rights of data subjects in accordance with the requirements of applicable law. This procedure establishes the:
- Standards to be met to ensure transparent information for data subjects
- Legal requirements that must be fulfilled
- Means authorised for submitting a request to exercise each right, depending on the category of data subjects
- Operational processes for fulfilling requests in accordance with the above requirements
- Parties involved in the processes, as well as their roles and responsibilities
To exercise your rights, you can contact the Data Protection Officer (DPO) at:
- dpo@kurmi-software.com.
- Or by mail to the following address:
Kurmi Software
22 Rue de l’Alma
35000 RENNES – France
When you submit a request to exercise your rights, you are asked to provide as much information as possible about the scope of the request, the type of right exercised, the personal data processing activity concerned, and any other useful elements to facilitate the fulfilment of your request. In addition, in case of reasonable doubt, you may be asked to prove your identity.
You also have the right to lodge a complaint with the CNIL (French data protection authority) at 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, in relation to the way in KURMI SOFTWARE collects and processes your data.
10. Updates to this Privacy Policy
This Policy may be updated from time to time to reflect changes in personal data regulations.
Last updated on 14/11/2025.
