How Idun Group collects and processes your personal data, in line with the GDPR (EU Regulation 2016/679) and the French Data Protection Act.
Idun Group, headquartered in Paris 15th arrondissement, France (SIREN 981 732 175), is the controller of personal data collected via idun-group.com.
Contact: contact@idun-group.com.
No Data Protection Officer (DPO) has been appointed; appointment is not mandatory given our activity and size (GDPR article 37).
Audience measurement (PostHog): anonymised IP address, browser type, pages viewed, visit duration, traffic source. No individual identification is performed.
Forms (blog newsletter sign-up, article usefulness vote): email address, and free-text comments you submit.
Direct exchanges: email address and content of messages you send to h.geoffrey@idun-group.com or via our scheduling link (Google Calendar).
No special-category data within the meaning of GDPR article 9 (health, political opinions, religion, sexual orientation, biometrics) is collected.
Anonymised audience measurement and site improvement: your prior consent to analytics cookies (GDPR art. 6.1.a).
Replying to your enquiries, scheduling calls, commercial demonstrations: performance of pre-contractual measures or legitimate interests (GDPR art. 6.1.b and 6.1.f).
Newsletter sign-up: your consent (GDPR art. 6.1.a), withdrawable at any time via the unsubscribe link in every email.
IT security and technical logging: legitimate interests (GDPR art. 6.1.f).
Compliance with our accounting and tax obligations (invoices, contracts): legal obligation (GDPR art. 6.1.c).
PostHog audience data: 12 months from collection.
Newsletter email addresses: until you unsubscribe, then 3 years for permitted commercial prospecting.
Commercial email exchanges: 3 years from the last contact.
Customer data (contracts, invoices): 10 years from the close of the financial year (accounting obligation, French Commercial Code art. L.123-22 and General Tax Code art. 286).
Consent cookie: 12 months.
PostHog Inc.: audience measurement, EU hosting in Germany (eu.i.posthog.com).
Google LLC (Firebase Hosting): website hosting, United States.
Google LLC (Google Calendar): call scheduling via external link, United States.
No data is sold. No advertising profiling or automated decision-making producing legal effects is carried out.
Firebase Hosting and Google Calendar are operated by Google LLC in the United States. These transfers rely on Google's participation in the EU–US Data Privacy Framework, complemented by Standard Contractual Clauses adopted by the European Commission.
PostHog uses EU hosting; no transfer outside the EU takes place for data collected via our integration.
Under GDPR articles 15 to 22 and the French Data Protection Act, you have the right to access, rectify, erase, restrict, object to and port your personal data. You may also withdraw your consent, where processing is based on it.
You may also issue post-mortem directives regarding your data (article 85 of the French Data Protection Act).
Send your request, together with proof of identity where necessary, to h.geoffrey@idun-group.com. We will respond within one month, extendable by two months in case of particular complexity.
If, after contacting us, you believe your rights have not been respected, you may lodge a complaint with the French Data Protection Authority (CNIL): 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or online via cnil.fr/en/plaintes. Visitors based in another EU member state may also lodge a complaint with their local supervisory authority.
