Legal Notice

Article 1 - Purpose

This Privacy Policy aims to define, regulate, and specify all legal, technical, and organizational rules applicable to the collection, processing, storage, protection, and governance of personal data handled by Grande Charte Digital within the operation of its website, professional services, and B2B activities. It also establishes the responsibilities, rights, guarantees, limitations, and obligations applicable to both parties (Grande Charte Digital and any concerned individual) to ensure strict GDPR compliance, full transparency, and responsible data management within the company.

Article 2 - Data Controller

The Data Controller is: Grande Charte Digital, Grande Charte SARL, located at AV Bir Anzarane, IMM AL KRAR, ETG 3, APPT 25.
As such, Grande Charte Digital determines the purposes, means, limits, and legal conditions for processing collected personal data. The Data Controller ensures that every processing operation complies with the GDPR, applicable national regulations, and the principles of minimization, proportionality, necessity, security, and fairness.
Any request related to exercising rights, objections, complaints, or additional information can be sent by email to: info@grandecharte.co.
Grande Charte Digital commits to responding within the legal deadlines and ensuring strict and documented follow-up for every request.

Article 3 - Nature of Collected Data

Grande Charte Digital may collect the following categories of personal data:

• Contact data (such as name, surname, professional email address, and business phone number when voluntarily provided);
• Browsing data (such as visited pages, timestamps, IP address, device information, site interactions, strictly necessary cookies);
• Analytical data (from third-party tools used solely for statistical and performance measurement purposes).

These data are strictly limited to what is necessary for the intended professional use, are not exploited for any other purpose, and are not collected beyond what is proportionally required to ensure the legitimate functioning of Grande Charte Digital’s services.

Article 4 - Purposes of Processing

Data are processed exclusively for clearly defined and legitimate professional purposes. They are used to:

• Manage, monitor, and maintain continuity in B2B business relationships between Grande Charte Digital and its contacts;
• Continuously optimize and improve user experience and overall website usability;
• Analyze performance, usage trends, navigation behavior, and traffic metrics to inform strategic digital development decisions;
• Communicate relevant, contextualized, and value-added professional information, notably through newsletters or B2B-oriented marketing emails.

These purposes are strictly limited to Grande Charte Digital’s business scope and cannot be used for incompatible or unauthorized uses.

Article 5 - Legal Basis

Processing activities are primarily based on Grande Charte Digital’s **legitimate interest** within its B2B professional activities.
This includes professional communication between entities, commercial management and follow-up, audience measurement, website security, and continuous service improvement.
When exchanges evolve toward the preparation, analysis, or establishment of a commercial relationship (quotes, scoping, preliminary studies, negotiations), such processing may also rely on a pre-contractual or contractual basis.
Certain technical operations involving limited retention or archiving for evidence purposes are carried out in compliance with applicable egal and security obligations.

Article 6 - Hosting and Security

Personal data processed by Grande Charte Digital are hosted exclusively within the European Union by Contabo GmbH, a German company headquartered at:
Aschauer Str. 32a, 81549 Munich, Germany.
Phone: +49 89 356471770 — Email: info@contabo.com — Website: https://contabo.com

Grande Charte Digital implements strict technical and organizational measures to guarantee data integrity, confidentiality, availability, and resilience. These measures include:

• Strict and segmented logical access control;
• Secure authentication for authorized internal access;
• Server security mechanisms, firewalls, and system hardening;
• Monitoring, supervision, and traceability of critical technical activities;
• Regular technical backups to ensure continuity and restoration capability;
• Protection against unauthorized access, destruction, loss, alteration, or unlawful disclosure.

These measures are continuously adjusted, reviewed, and strengthened based on evolving technological, cyber, regulatory, or organizational risks and are subject to ongoing internal review.

Article 7 - Data Retention

Personal data are retained only for fixed, limited, and proportionate periods, strictly aligned with the purposes defined in this Policy.
After these periods, data are deleted, anonymized, or securely archived in compliance with regulatory requirements and best practices for information governance and protection.

Article 8 - Log Archiving

For security, traceability, abuse prevention, incident management, and evidentiary purposes, certain technical browsing elements (such as server logs, connection data, and session markers related to system stability) may be archived for a strictly limited duration.
Access to such data is restricted, monitored internally, and solely used for legitimate and proportionate purposes within the scope of this Policy.

Article 9 - No Data Transfer Outside the EU

No data transfers outside the European Union are carried out.

Article 10 - No External Data Subprocessing

Grande Charte Digital does not entrust any personal data processing to external subcontractors.

Article 11 - No AI Processing

Grande Charte Digital does not process personal data through generative Artificial Intelligence or any automated decision-making system.
No AI model, algorithmic engine, automated scoring tool, or profiling mechanism is applied to collected personal data.
Grande Charte Digital guarantees that any analysis, interpretation, processing, or data use relies exclusively on human intervention, human decision-making control, and a non-automated decision process.

Article 12 - Client-Specific Confidentiality

Data, documents, deliverables, and technical or strategic materials provided by clients are subject to strict confidentiality obligations.
They cannot be reused, copied, shared, or analyzed outside the scope of contractual assignments.

Article 13 - Data Subject Rights

Every individual has the right to access, correct, delete, and object to data processing.
These rights can be exercised by contacting: info@grandecharte.co.

Article 14 - Newsletter Unsubscription

Each marketing communication sent by Grande Charte Digital includes an automatic unsubscribe link.

Article 15 - Effective Date

This Policy takes immediate effect and may be updated following regulatory or internal developments.

Last updated: 11/6/2025