Skip to content
Klocel

Privacy policy

Version in force — last updated: 25 July 2026

Data controller

The controller for the data collected through this site is KLOCEL SAS, 20 rue de Tachainville, La Varenne, 28630 Ver-lès-Chartres, France.

Contact: contact@klocel.com.

Contact and data protection officer

KLOCEL SAS has not appointed a data protection officer (DPO). That appointment is not mandatory in our situation: we are not a public authority, we do not carry out large-scale systematic monitoring of individuals, and we do not process special-category data at scale within the meaning of articles 9 and 10 GDPR (article 37 GDPR).

Any request concerning your personal data can be sent to contact@klocel.com, or by post to KLOCEL SAS, 20 rue de Tachainville, La Varenne, 28630 Ver-lès-Chartres, France.

Processing activities

We only collect the data you send us, plus what simply displaying a web page technically involves. Below is every processing activity related to this site.

Answering a contact request
Data
First name, last name, work email address, company (optional), phone (optional), subject, message, browsing language.
Legal basis
KLOCEL’s legitimate interest in answering enquiries addressed to it (article 6.1.f GDPR).
Retention
Three years from our last contact.
Preventing automated submissions
Data
IP address, request headers, browser identifier and technical signals, processed by Cloudflare Turnstile to tell a human from a bot.
Legal basis
KLOCEL’s legitimate interest in protecting its form from abuse (article 6.1.f GDPR).
Retention
No retention by KLOCEL. See Cloudflare’s own policy for its retention.
Delivering and keeping your message
Data
The content of your message and the details it contains, delivered by Resend and received in our Microsoft 365 professional mailbox.
Legal basis
KLOCEL’s legitimate interest in handling your request (article 6.1.f GDPR).
Retention
Three years in the mailbox, as above.
Server technical logs
Data
IP address, requested page, timestamp, browser identifier — generated automatically by the host on every page view.
Legal basis
KLOCEL’s legitimate interest in the security and proper operation of the site (article 6.1.f GDPR).
Retention
Period set by the host as part of its own service.

Whether the requested information is mandatory

In the contact form, only the first name, last name, email address, subject and message fields are necessary. The others are optional and marked as such.

Without the necessary fields we are unable to handle your request — that is the only consequence of withholding them.

Recipients and processors

Internally, your data is accessible only to authorised KLOCEL staff (commercial and technical teams) who need it to handle your request.

We use the following processors, each bound by an agreement compliant with article 28 GDPR:

Vercel Inc.
Role
Website hosting, delivery and technical logs.
Country of establishment
United States.
Resend
Role
Delivering form messages to our mailbox.
Country of establishment
United States.
Cloudflare, Inc.
Role
Protecting the form against automated submissions (Turnstile).
Country of establishment
United States.
Microsoft Ireland Operations Ltd
Role
Professional mailbox (Microsoft 365) hosting the address that receives your messages.
Country of establishment
European Union, with possible recourse to processors established in the United States.

Transfers outside the European Union

Some of our processors are established in the United States (Vercel, Resend, Cloudflare): your data may therefore be transferred outside the European Union, framed in accordance with Chapter V GDPR (articles 44 to 49).

Depending on the recipient, that transfer relies on the European Commission’s adequacy decision of 10 July 2023 on the EU-US Data Privacy Framework, for entities certified under it, and/or on the European Commission’s standard contractual clauses (implementing decision 2021/914), together with supplementary measures where required.

Details of the safeguards applying to each processor, and a copy of the clauses, are available on request at contact@klocel.com.

Security

In accordance with article 32 GDPR, we implement the following measures:

  • The whole site, contact form included, is served over HTTPS (TLS encryption).
  • The site has no database: your message travels by email and is never stored by the site itself.
  • Access to the mailbox receiving your requests is restricted to authorised staff.
  • Every processor is selected and bound by a processing agreement covering security and confidentiality.

Automated decision-making and profiling

We take no automated decisions producing legal effects concerning you, and we carry out no profiling (articles 13.2.f and 22 GDPR).

The form’s anti-bot check is an automated technical filter: it may wrongly prevent your message from being sent. Should that happen, the email address and phone number shown on the Contact page remain available — you are never left without a way to reach us.

Your rights

Under the conditions set out in the GDPR, you have the following rights:

  • Right of access to your data (article 15).
  • Right to rectification (article 16).
  • Right to erasure (article 17).
  • Right to restriction of processing (article 18).
  • Right to data portability (article 20).
  • Right to object, in particular where processing relies on our legitimate interest (article 21).
  • Right to withdraw your consent at any time, where processing relies on it (article 7.3).
  • Right to give instructions on what happens to your data after your death (article 85 of the French Data Protection Act).

Exercising your rights, and complaints

Send your request to contact@klocel.com, or by post to KLOCEL SAS, 20 rue de Tachainville, La Varenne, 28630 Ver-lès-Chartres, France. Proof of identity will only be requested where there is reasonable doubt as to your identity.

We answer within one month of receiving the request, extendable by two months where the request is complex or numerous — we would inform you in that case.

If, after contacting us, you consider your rights are not respected, you may lodge a complaint with the French data protection authority: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr.

Cookies and trackers

This site sets only one cookie, strictly necessary, which remembers your language choice. No audience-measurement tool is installed, and no advertising tracker. Details are in our cookie policy.

Changes to this policy

This policy may change, notably to reflect a technical change to the site or to our processors. The applicable version is the one published here, with its update date at the top of the page.

In the event of a substantial change, visitors will be informed on the site.