Privacy Policy

What is the purpose of our Privacy Policy?

Akoya Consulting SAS, which manages the akoya.group website, attaches great importance to the protection and confidentiality of your personal data, which represents, for us, a mark of seriousness and trust.

In this regard, our Personal Data Privacy Policy reflects our commitment to upholding, within Akoya Consulting SAS, the applicable rules on personal data protection and, more specifically, those set out in the General Data Protection Regulation (“GDPR”).

In particular, our Privacy Policy aims to inform you of the manner in which, and the reasons for which, we process your personal data in the context of the services we provide to you.

Who is our Privacy Policy addressed to?

Our Privacy Policy is addressed to you, regardless of your place of residence, provided you are at least 15 years of age, whether you are one of our clients or a “simple” visitor to the akoya.group website.

If you are under the legal age specified above, you are not authorised to use our services without the prior and explicit consent of one of your parents or the person holding parental authority, which must be sent to us by email at dpo@akoyaconsulting.com.

If you believe that we hold personal data relating to your children without having consented to this, we invite you to contact us at the dedicated address indicated above.

Why do we process your personal data, and on what legal basis?

We process your personal data primarily for the following reasons:

to browse our website, benefit from our services and to enable us to respond to your requests (e.g. information requests, complaints, etc.), on the basis of our general terms and conditions and our legitimate interest in providing you with the best possible service.
to benefit from our audit and strategic consulting services for businesses, on the basis of our general terms and conditions.
to stay informed of our latest offers and events by email, on the basis of our legitimate interest in retaining existing clients and prospecting new potential clients.
to stay informed of our latest offers and events by telephone, on the basis of our legitimate interest in retaining existing clients and prospecting new potential clients.
to manage invoicing and any outstanding payments, on the basis of our legitimate interest in obtaining consideration for the provision of our service and on the basis of our general terms and conditions.
to follow and comment on our publications on social media, on the basis of our legitimate interest in maintaining a dedicated page on social networks.
to receive our newsletter which keeps you informed of all news relating to our services, on the basis of our legitimate interest in retaining our clientele.
to send satisfaction surveys, on the basis of our legitimate interest in improving our services.
to guarantee and strengthen the security and quality of our services on a day-to-day basis (e.g. statistics, data security, etc.), on the basis of our legal obligations, our general terms and conditions, and our legitimate interest in ensuring the smooth operation of our services.

How did we obtain your personal data?

Your data is collected directly from you when you are a client of our services or a “simple” visitor to our akoya.group website, and we are committed to processing your data solely for the purposes described above.

It is also possible that your personal data may be processed indirectly in the context of trade fairs or social networks (e.g. LinkedIn).

However, when you voluntarily publish content on pages we manage on social networks, you acknowledge that you are entirely responsible for any personal information you may share, regardless of the nature and origin of the information provided.

What personal data do we process, and for how long?

We have summarised below the categories of personal data and their respective retention periods:

Professional identification data (e.g. surname, first name, position, company, etc.) and contact details (e.g. professional email address and telephone number, etc.) retained for the entire duration of service provision, plus the applicable statutory limitation periods, which are generally 5 years.
Data relating to professional background (e.g. position, grade, seniority, skills, qualifications, training, etc.) retained for the entire duration of service provision, plus the applicable statutory limitation periods, which are generally 5 years.
Where there is a confusion between the name of your organisation and your personal name (e.g. sole trader, micro-enterprise, etc.), financial and economic data (e.g. bank account number, verification code, etc.) retained for the time necessary for the transaction and the management of invoicing and payments, plus the applicable statutory limitation periods, which are generally 5 to 10 years.
Telephone number in the context of our telephone prospecting campaigns, retained for a maximum period of 3 years from our last contact with you.
Email address, retained for a maximum period of 3 years from our last contact with you in the context of our email prospecting campaigns, and retained until the end of your newsletter subscription to receive our newsletter.
Connection data (e.g. logs, IP address, etc.) retained for a period of 1 year.
Cookies, which are generally retained for a maximum period of 13 months. For further details on our use of cookies, please refer to our Cookie Policy, accessible at any time on our website.

Upon expiry of the applicable retention periods, the deletion of your personal data is irreversible and we will no longer be able to communicate it to you thereafter. At most, we may retain anonymised data for statistical purposes only.

Please also note that in the event of a dispute, we are required to retain all personal data concerning you for the entire duration of the proceedings, even after the expiry of the retention periods described above.

What rights do you have to control the use of your personal data?

Applicable data protection regulations grant you specific rights that you may exercise, at any time and free of charge, in order to control the use we make of your data.

Right of access and copy of your personal data, provided that such a request does not conflict with business confidentiality, professional secrecy, or the confidentiality of correspondence.
Right of rectification of personal data that is inaccurate, outdated, or incomplete.
Right to object to the processing of your personal data carried out for commercial prospecting purposes, as well as to processing based on our legitimate interest, unless compelling and legitimate grounds for such processing override your interests, rights, and freedoms.
Right to erasure (“right to be forgotten”) of your personal data that is not essential to the proper functioning of our services.
Right to restriction of processing, which allows you to freeze the use of your data where the legitimacy of a processing operation is contested.
Right to data portability, which allows you to retrieve a portion of your personal data in order to store it or transfer it easily from one information system to another.
Right to issue instructions regarding the fate of your data in the event of death, either directly or through a trusted third party or legal heir.

For a request to be considered, it must be submitted directly by you, or your representative, to the following address: dpo@akoyaconsulting.com.

Requests may not be submitted by any person other than yourself or your authorised representative. We may therefore ask you to provide a proof of identity where there is any doubt as to the identity of the applicant, as well as evidence of representation where applicable.

We will respond to your request as promptly as possible, within a maximum period of one month from receipt, unless the request is technically complex or we are simultaneously handling a large number of requests. In such cases, the response period may be extended to a maximum of three months.

Please note that we reserve the right to refuse to respond to any excessive or unfounded request, particularly where it is repetitive in nature.

Who may have access to your personal data?

Your personal data is processed by our teams and by our technical service providers solely for the purpose of operating our service.

We would like to specify that we screen all our technical service providers before engaging them in order to ensure that they scrupulously comply with the applicable rules on personal data protection.

FURTHERMORE, WE GUARANTEE THAT WE NEVER TRANSFER OR SELL YOUR DATA TO THIRD PARTIES OR COMMERCIAL PARTNERS.

May your personal data be transferred outside the European Union?

Personal data processed by our website is hosted exclusively on servers located within the European Union.

Furthermore, we make every effort to use only technical tools whose servers are also located within the European Union. If this were not the case, we ensure that they implement the appropriate safeguards required to guarantee the confidentiality and protection of your personal data.

How do we protect your personal data?

We implement all required technical and organisational measures to ensure the security of your personal data on a day-to-day basis — in particular, to guard against any risk of destruction, loss, alteration, or unauthorised disclosure.

Do we use cookies when you browse our website?

We wish to inform you that we use cookies when you browse our website. For further information, please refer to our Cookie Policy.

Who can you contact for further information on the use of your personal data?

In order to best guarantee the protection and integrity of your data, we have officially appointed an independent Data Protection Officer (“DPO“) with our supervisory authority.

You may contact our DPO at any time, free of charge, at dpo@akoyaconsulting.com for further information or details on the way in which we process your data.

How can you contact the CNIL?

You may contact the French data protection authority, the “Commission Nationale de l’Informatique et des Libertés” or “CNIL”, at any time using the following contact details: Service des plaintes de la CNIL, 3 place de Fontenoy – TSA 80751, 75334 Paris Cedex 07, or by telephone on +33 1 53 73 22 22.

May this Privacy Policy be amended?

We may amend our Privacy Policy at any time in order to adapt it to new legal requirements and to any new processing activities we may implement in the future.