Privacy policy
1. Purpose and scope of the Privacy Policy
KURMI SOFTWARE places the utmost importance and exercises the greatest care in protecting privacy and personal data, as well as complying with the provisions of the applicable laws and regulations.
Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the “GDPR”) states that personal data must be processed in a lawful, fair and transparent manner. Therefore, this privacy policy (hereinafter the “Policy”) aims to provide you with simple and clear information about how we process your personal data when browsing and using the services on our website.
2. Data controller
As part of your activity on the website https://kurmi-software.com/fr/, we collect and use personal data relating to you, a natural person (hereinafter “Data Subject”).
For all processing activities, KURMI SOFTWARE, a simplified joint-stock company registered under SIREN number 529230773, with its registered office in Rennes (35000), and specializing in the application software publishing sector, determines the means and purposes of the processing. Thus, we act as the Data Controller, within the meaning of the regulations relating to personal data, and in particular Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
3. What types of personal data do we collect and how do we collect them?
By using our website or subscribing to our services, you provide us with certain information about yourself, some of which can identify you (“Personal Data”). This occurs when you browse our site, fill out online forms, request demos, or simply wish to receive our communications.
The nature and quality of the Personal Data collected about you vary depending on your interactions with KURMI SOFTWARE. The main types of Personal Data are:
– Identification Data: This includes all information that allows us to identify you, such as your first and last name, email address, and device ID. You can also add other personal information to your website user profile, such as your phone number and address.
– Professional Data: Company name, job title, country of establishment, country, and type of organization.
– Login data: This includes all the information we need to access your personal account, such as your password, login date and time, and other information necessary for authentication and account access.
We also collect your IP address for maintenance and statistical purposes.
– Browsing information: By browsing our website, you interact with it. Therefore, certain information about your browsing activity is collected.
– Data collected from third parties: This includes personal data that you have agreed to share with us or on publicly accessible social networks and/or that we may collect from other publicly accessible databases.
KURMI SOFTWARE will not collect or process personal data that directly or indirectly relates to your race, health status, sexual orientation, political or philosophical beliefs, or religious beliefs.
4. Why do we collect your personal data and how?
We collect your Personal Data for specific purposes and on various legal bases.
When performing the contract or implementing pre-contractual measures, your data are processed for the following purposes:
- Management of support access accounts;
- Management of complaints and after-sales service;
Based on your consent, your Data is processed for the following purposes:
- Management of leads and requests for commercial information;
- Management of demonstration requests;
- Marketing communications;
- Management of cookies and consents;
- Management of webinar registrations;
- Creation of a prospecting blacklist
Based on the legitimate interest of KURMI SOFTWARE , your Data is processed for the following purposes:
- – User authentication;
5. Do we share your personal data?
Your data are intended for authorised Kurmi employees who are responsible for managing and performing contracts and fulfilling legal obligations, depending on the purposes for collecting the data and to the extent permitted by their respective powers.
For some tasks relating to the purposes of processing, and to the extent permitted by their respective duties and permissions, your data may be transferred to the following recipients:
– Entities within the KURMI SOFTWARE Group, in the context of outsourcing activities to another entity within the group;
– Service providers and subcontractors that we engage to perform a range of operations and tasks on our behalf, including: SALESFORCE, AUTOPILOT, PERSISTIQ, CONTACT FORMS, and CONTACT FORMS SUBMISSIONS.
– Business partners only when you have expressly consented by checking a box on our data collection forms;
– Duly authorized public authorities (judicial, regulatory, etc.), within the framework of our legal and regulatory obligations;
– Regulated professions (lawyers, bailiffs, etc.) that may be involved in the implementation of guarantees, debt collection, or litigation;
When your data are sent to our service providers and processors, they are asked to refrain from using the data other than for the purposes for which they were originally intended. We use our best efforts to ensure that such third parties maintain the confidentiality and security of your data.
In any case, only the necessary data are provided. We endeavour to ensure that your data are communicated or sent using secure methods.
We do not sell your data.
6. Are your personal data transferred to third countries?
KURMI SOFTWARE strives to store personal data in France, or at least within the European Economic Area (EEA).
However, the data that we collect when you use our platform or services may be transferred to other countries. For example, this may happen where some of our service providers are located outside the European Economic Area.
In such cases, we guarantee that data are transferred:
- To a country ensuring an adequate level of protection, i.e. a level of protection equivalent to what is required by European Regulations
- Under standard contractual clauses
- Under internal corporate rules
7. How long do we keep your personal data?
We store your personal data only for as long as necessary to achieve the purpose for which we collected the data, in order to meet your needs or fulfil our legal obligations.
Storage periods vary according to several factors, such as:
- The needs of KURMI SOFTWARE business activities;
- Contractual requirements
- Legal obligations
- Recommendations issued by the supervisory authorities
The storage periods for your data are as follows:
| Purpose | Storage Period |
|---|---|
| Lead and sales information request management; Demonstration request management; Marketing communication; Webinar registration management; Creating a prospecting blacklist | The data collected via the form is kept for 3 years from the date of collection or last contact. |
| – To offer you personalized services; – To monitor and improve our websites and applications; – To secure our websites/applications; – To protect you against fraud; – To debug the website; – To receive and use automatically sent device identification characteristics, and to link different devices; – To technically deliver advertisements or content, and to match and combine offline data sources. | Your browsing data on our website is kept for a maximum of 13 months. |
8. How do we guarantee the security of your personal data?
KURMI SOFTWARE is committed to protecting the personal data that we collect or process against any loss, destruction and alteration, as well as unauthorised disclosure and access.
Therefore, we take all appropriate technical and organisational measures, depending on the type of data and the risks involved in their processing. These measures must protect the security and confidentiality of your personal data. They may include such practices as restricted access to personal data for authorised persons only as required for their duties, pseudonymisation and encryption.
In addition, our practices and policies and/or physical and/or logical security measures (secure access, authentication process, backup copies, software, etc.) are regularly checked and updated if necessary.
9. What are your rights?
The GDPR grants data subjects rights that they can exercise. These include:
- Right to information: the right to obtain clear, precise, and complete information about how Kurmi Software uses their personal data.
- Right of access: the right to obtain a copy of the personal data that the data controller holds about the requester.
- Right to rectification: the right to have personal data rectified when it is inaccurate or outdated and/or completed when it is incomplete.
- Right to erasure (right to be forgotten): the right, under certain conditions, to request the erasure of personal data, except when Kurmi Software is required to retain it or has a legitimate reason justifying its retention.
- Right to object: the right to object, under certain conditions, to the processing of personal data for reasons relating to the data subject’s particular situation or, at any time, to the processing of their data for direct marketing purposes.
- Right to withdraw consent: the right to withdraw consent at any time when processing is based on consent, without this withdrawal affecting the lawfulness of processing carried out before the withdrawal.
- Right to restriction of processing: the right, under certain conditions, to request the temporary suspension of the processing of personal data.
- Right to data portability: the right to receive the personal data provided to Kurmi Software in a structured, commonly used, and machine-readable format, or to request its transmission to another data controller where technically feasible. 9. Right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, except where provided for by law.
- Right to define guidelines regarding the fate of your Data after your death, in accordance with applicable law.
Additional rights may be granted to Data Subjects under applicable national regulations.
To this end, Kurmi Software has implemented a Data Subject rights management procedure that complies with the requirements of applicable regulations. This procedure defines, in particular:
- The methods for informing Data Subjects;
- The applicable legal requirements;
- The procedures for submitting requests to exercise rights;
- The processes for handling these requests within the regulatory timeframes;
- The roles and responsibilities of the various stakeholders.
To exercise your rights, you can contact the Data Protection Officer (DPO):
- By email: dpo@kurmi-software.com
- By mail : 22 rue de l’alma, RENNES (35000), France
When you submit a request to exercise your rights, please specify, as much as possible, the right concerned, the processing concerned, and any information that will facilitate the processing of your request. If there is reasonable doubt about your identity, you may be asked to provide proof of identity.
You can also object to receiving our marketing emails or withdraw your consent at any time by using the unsubscribe link or the mechanism provided for this purpose in each email. When our communications use tracking pixels that require consent, you can also object to their use or withdraw your consent using the same method. This withdrawal does not affect the lawfulness of processing carried out before it was exercised.
If, despite our exchanges, you feel that your rights are not being respected, you can file a complaint with the National Commission for Information Technology and Freedoms (CNIL) – 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07 or via its website.
10. Updates to this Privacy Policy
This Policy may be updated from time to time to reflect changes in personal data regulations.
Last updated on 27/10/2026.
