Personal data
Privacy policy
What we collect, why we collect it and how you can exercise your rights.
Data controller
ODK AGENCY, whose registered office is at La Turbine, 32 boulevard du Port, 95000 Cergy, France, is the controller of the processing described in this policy.
You can submit any request about your personal data to contact@odk-agency.com or through the website Contact page.
Data we collect
When you use the contact form, we collect the information you provide: first name, last name, email address, optional phone number, company and the content of your request.
When you request the training programme, we collect your email address and evidence of your request.
Purposes and legal bases
- Answering your request and preparing a potential business relationship: pre-contractual steps taken at your request.
- Managing requests reliably in Automateez CRM: legitimate interest in maintaining prospect relationships.
- Providing the requested training programme: pre-contractual steps taken at your request.
- Keeping the website secure and operational: legitimate interest and security obligations.
Recipients and processors
Data is accessible only to authorized ODK AGENCY personnel and service providers required to operate the service, including Automateez CRM, Supabase and Vercel.
These providers act under contractual and security commitments. Some may process data outside the European Economic Area using safeguards provided by applicable data protection law.
Retention
Prospect data is kept for the time required to handle the request and for no longer than three years from collection or the prospect’s last contact, unless a legal obligation or the need to preserve evidence requires otherwise.
Cookie choices are stored for six months.
Your rights
You may request access, correction, erasure or portability of your data, restrict its processing or object to it where applicable law allows.
Email contact@odk-agency.com or use the Contact page to exercise your rights. We may request proof of identity where there is reasonable doubt. You may also lodge a complaint with the French data protection authority, the CNIL.
Security
Forms send data to a server-side route on the website. Requests to the CRM are signed and technical secrets are never exposed in the browser.
We apply reasonable validation, limitation, access-control and transmission-security measures.