Privacy Policy
Protection and management of your personal data
Last updated: January 2025
GDPR Compliance
Kalis Market is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable French legislation. This policy describes how we collect, use, and protect your information.
1. Data Controller
The data controller for personal data is:
Kalicertif SAS
- SIREN : 929 978 393
- SIRET : 929 978 393 00015
- Registered office: 231 rue Saint-Honoré, 75001 Paris, France
- Email : privacy@kalis.market
Data Protection Officer (DPO):
For any questions regarding data protection, contact our DPO at: dpo@kalis.market
2. Data we collect
Identification data
- • First and last name
- • Email address
- • Phone number
- • Postal address (for deliveries)
- • Date of birth (if necessary)
- • Profile picture (optional)
Login data
- • Login ID
- • Password (encrypted)
- • IP address
- • Browser type and device
- • Login history
- • Cookies and session identifiers
Transaction data
- • Purchase history
- • Order details
- • Payment information (via secure provider)
- • Billing addresses
- • History of certificates created
Usage data
- • Pages visited and interactions
- • Features used
- • Time spent on platform
- • Preferences and settings
- • Performance data
Communications
- • Messages exchanged with support
- • Reviews and comments
- • Communication preferences
- • Newsletter subscriptions
3. Legal basis and purposes of processing
We process your personal data on the following legal bases:
Contract performance
- • Creating and managing your account
- • Processing your orders
- • Providing our services
- • Managing authenticity certificates
- • Customer service and support
Legal obligations
- • Compliance with tax legislation
- • Fraud prevention
- • Retention of billing data
- • Response to authority requests
Legitimate interests
- • Improving our services
- • Platform security
- • Anonymized statistical analysis
- • Prevention of fraudulent activities
Consent
- • Sending newsletters
- • Marketing communications
- • Non-essential cookies
- • Sharing with partners (with agreement)
4. Data sharing and disclosure
We never sell your personal data. We may share your data only in the following cases:
Service providers
Hosting (OVH), payment (Stripe), delivery, email, analytics - all subject to strict confidentiality agreements.
Business partners
Only with your explicit consent and for complementary services.
Legal obligations
If required by law, court order, or government authority.
Rights protection
To protect our rights, property, or security, as well as those of our users.
5. Data retention period
We retain your personal data only for as long as necessary for the purposes for which it was collected:
Account data
For the lifetime of your account + 3 years after closure (legal obligations)
Transaction data
10 years (accounting and tax obligations)
Authenticity certificates
Indefinitely (to guarantee traceability and authenticity)
Marketing communications
Until consent withdrawal + 3 years maximum
Analytics data
13 months (in accordance with CNIL recommendations)
6. Data security
We implement appropriate technical and organizational measures to protect your data:
Technical measures
- • SSL/TLS encryption
- • Password hashing
- • Firewall and DDoS protection
- • Regular backups
- • 24/7 monitoring
Organizational measures
- • Restricted data access
- • Staff training
- • Confidentiality agreements
- • Regular security audits
- • Incident response plan
In case of breach
In case of data breach, we will inform you within 72 hours and take all necessary measures to limit the impacts.
7. Your rights
In accordance with GDPR, you have the following rights regarding your personal data:
Right of access
Obtain confirmation that your data is being processed and receive a copy.
Right to rectification
Correct inaccurate or incomplete data about you.
Right to erasure
Request deletion of your data in certain circumstances.
Right to restriction
Restrict the processing of your data in certain cases.
Right to portability
Receive your data in a structured format and transfer it to another controller.
Right to object
Object to the processing of your data for reasons related to your particular situation.
How to exercise your rights?
To exercise these rights, contact us at:
- Email: privacy@kalis.market
- DPO: dpo@kalis.market
- By mail: Kalicertif SAS, 231 rue Saint-Honoré, 75001 Paris
8. Cookies and similar technologies
We use cookies and similar technologies to improve your experience. For more information, see our Cookie Policy.
Types of cookies used:
- • Essential cookies (always active)
- • Performance cookies (with consent)
- • Functional cookies (with consent)
- • Marketing cookies (with consent)
9. International transfers
Your data is primarily stored in France and the European Union. If a transfer outside the EU is necessary, we ensure that:
- The country offers an adequate level of protection (adequacy decision)
- Standard contractual clauses from the European Commission are in place
- Appropriate safeguards are implemented
10. Protection of minors
Our platform is not intended for persons under 18 years of age. We do not knowingly collect personal data from children.
If you are a parent or legal guardian and discover that your child has provided us with personal data, please contact us immediately.
11. Changes to this policy
We may update this privacy policy to reflect changes in our practices or for other operational, legal, or regulatory reasons.
In case of substantial changes, we will inform you by email or via a notification on the platform at least 30 days before they take effect.
Date of last modification: January 2025
Contact and complaints
To contact us
Kalicertif SAS
Service Protection des Données
231 rue Saint-Honoré
75001 Paris, France
Supervisory authority
If you believe your rights are not being respected, you can file a complaint with the CNIL:
Phone: +33 1 53 73 22 22
Commission Nationale de l'Informatique et des Libertés
3 Place de Fontenoy
TSA 80715
75334 Paris Cedex 07
© 2025 Kalis Market - All rights reserved