Privacy Policy

The data controller within the meaning of Article 4(7) GDPR is:

KONZEPT SERVICES SUARL (SUARL (Société Unipersonnelle à Responsabilité Limitée), totalement exportatrice et non résidente), Rue Omar Kaddeh, Immeuble Le Montplaisir, 2ème étage B25, Avenue Kheireddine Pacha, 1073 Montplaisir, Tunis, Tunisie. Managing Director: Hassan Arouri. Email: hello@konzeptservices.com.

Data protection enquiries: hello@konzeptservices.com.

We process data you actively provide (contact form, email, phone, contractual data) as well as technical data automatically generated when you use the website.

This may include: salutation, first and last name, company, role, email, phone, postal address, country, VAT number, the content of your message, IP address, device and browser information, access timestamp and referrer URL.

Please do not submit special categories of personal data within the meaning of Article 9 GDPR (e.g. health, religion, political opinions).

We process your data on the following legal bases:

• Article 6(1)(b) GDPR – pre-contractual and contractual performance, handling enquiries;
• Article 6(1)(c) GDPR – compliance with legal obligations (in particular tax retention);
• Article 6(1)(f) GDPR – legitimate interests (operation, security and improvement of the website, direct marketing to existing customers, fraud prevention);
• Article 6(1)(a) GDPR – consent (newsletter, non-essential cookies, reference citation).

Only strictly necessary cookies are set without consent. Any other cookies, in particular for analytics, marketing or personalisation, are activated only after your express consent via our consent banner (Article 6(1)(a) GDPR, Article 82 of the French Data Protection Act).

You may withdraw your consent at any time with effect for the future by adjusting your browser settings or re-opening our consent tool.

We send newsletters only with your consent (double opt-in). Every email contains an unsubscribe link. You may also opt out at any time by writing to hello@konzeptservices.com.

We disclose personal data only where permitted by law: (1) at your request, (2) to perform the contract, (3) where required by a legal obligation or a competent authority, or (4) to carefully selected processors (Article 28 GDPR), in particular hosting, email and IT providers as well as tax partners. All processors are bound by GDPR-compliant agreements.

We do not sell or rent personal data.

Where personal data is transferred outside the European Economic Area (for example to our host Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA), such transfers rely on an adequacy decision (Article 45 GDPR) or on appropriate safeguards such as the EU Standard Contractual Clauses (Article 46 GDPR).

Unless expressly agreed otherwise, your data is processed and stored within the European Union.

Data is retained only for as long as necessary for the purposes pursued or as required by statutory retention periods (in particular 6 and 10 years for tax matters). Contact enquiries that do not lead to a contract are deleted 36 months after the last interaction, unless renewed by new activity.

In accordance with Article 32 GDPR, we implement appropriate technical and organisational measures to protect your data (TLS encryption, access controls, corporate VPN, locked workstations, regular audits, ISO 27001 in progress). In the event of a notifiable breach, we will notify the competent authority and, where required, the affected individuals without undue delay (Articles 33 and 34 GDPR).

You have, at any time, the right to:

• access (Article 15 GDPR);
• rectification (Article 16 GDPR);
• erasure (“right to be forgotten”, Article 17 GDPR);
• restriction of processing (Article 18 GDPR);
• data portability (Article 20 GDPR);
• objection, in particular to direct marketing (Article 21 GDPR);
• withdraw consent at any time with effect for the future (Article 7(3) GDPR);
• issue post-mortem instructions regarding your data (Article 85 of the French Data Protection Act).

Please address your requests to hello@konzeptservices.com. We will respond within the statutory period of one month (extendable by two months under Article 12(3) GDPR). Proof of identity may be requested.

Under Article 77 GDPR you have the right to lodge a complaint with a supervisory authority, in particular the authority competent for our seat: Commission Nationale de l’Informatique et des Libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr. Users in Germany may also contact the competent state data protection authority.

KONZEPT SERVICES SUARL may publish a list of customer references or testimonials on its website. Upon written request to hello@konzeptservices.com, we will remove the relevant publications without delay.

No solely automated decision-making, including profiling within the meaning of Article 22 GDPR, takes place.

We reserve the right to update this Policy to reflect changes in the law or in our services. The current version is always available on this page.

For any data protection enquiry, please email hello@konzeptservices.com or write to: KONZEPT SERVICES SUARL, Data Protection, Rue Omar Kaddeh, Immeuble Le Montplaisir, 2ème étage B25, Avenue Kheireddine Pacha, 1073 Montplaisir, Tunis, Tunisie.