Privacy Policy

Digitalico (“we”, “our”, “us”) is committed to protecting and respecting your privacy. This policy explains how we collect and use your personal data, your rights under data protection law, and the steps we take to safeguard your information.We are dedicated to ensuring that your information is handled securely and in compliance with the UK General Data Protection Regulation (UK GDPR), the EU GDPR (Regulation (EU) 2016/679), and the Data Protection Act 2018.

Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:
  • “Personal Data” means any information relating to an identified or identifiable natural person. This may include names, contact details, identification numbers, location data, or factors specific to the identity of an individual.
  • “Controller” means the natural or legal person which determines the purposes and means of the processing of Personal Data. For this Privacy Policy, Digitalico acts as the Data Controller.
  • “Processing” means any operation performed on Personal Data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure, restriction, erasure, or destruction.
  • Personal Data- means any information relating to an identified or identifiable natural person. This may include names, contact details, identification numbers, location data, or factors specific to the identity of an individual.
  • Controller- means the natural or legal person which determines the purposes and means of the processing of Personal Data. For this Privacy Policy, Digitalico acts as the Data Controller.
  • Processing- means any operation performed on Personal Data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure, restriction, erasure, or destruction.
  • Processor- means a natural or legal person which processes Personal Data on behalf of the Controller.
  • “Data Subject” means the individual to whom the Personal Data relates.

1. Identity of the Data Controller

The data controller is Digitalico, a private limited company (SARL) with share capital of €1000, registered in the Paris Trade and Companies Register under number 941421513. Our registered office is:
30 bis rue du Vieil Abreuvoir, 78100 Saint-Germain-en-Laye.We are responsible for any personal data you provide to us and will handle it in accordance with applicable data protection law. For more information about your data protection rights, you may also consult the Information Commissioner’s Office (ICO) at www.ico.org.uk or the French supervisory authority CNIL at www.cnil.fr.

2. Your Rights

Under Articles 15–23 of the GDPR, you have a number of rights in relation to your personal data. These include:
  • Right of access – to obtain a copy of the personal data we hold about you.
  • Right to rectification – to have inaccurate or incomplete data corrected.
  • Right to erasure – to request deletion of your data where there is no lawful reason for us to retain it.
  • Right to restriction – to request restriction of processing where you contest the accuracy of the data or the lawfulness of its processing.
  • Right to data portability – to receive your personal data in a portable, machine-readable format and have it transferred to another controller, when applicable.
  • Right to object – to object to processing carried out in our legitimate interests, including direct marketing.
  • Post-mortem rights – in France, individuals may determine how their data should be handled after their death. In the absence of instructions, rights may be exercised by heirs as permitted under the French Data Protection Act.
Exercising your rights
To exercise your rights, please write to us at:

Digitalico
 30 bis rue du Vieil Abreuvoir
 78100 Saint-Germain-en-Laye
Or email: legal@digitalico.com

If you believe your rights have not been respected, you are entitled to lodge a complaint with the ICO (www.ico.org.uk) or, in France, with the CNIL (www.cnil.fr).
3. Purposes and Legal Basis for Processing
We will only process your personal data where there is a lawful basis to do so. The purposes and the lawful bases include:
  • Contractual necessity – managing your contract, billing, and service delivery.
  • Legal obligation – compliance with bookkeeping, tax, or regulatory requirements.
  • Legitimate interests – maintaining client relationships, debt recovery, defending our legal rights, or ensuring service efficiency.
  • Consent – where you have given explicit consent, for example, to receive marketing communications.
  • Consent – where you have given explicit consent, for example, to receive marketing communications.
We will only process your personal data where there is a lawful basis to do so. The purposes and the lawful bases include:
  • Contractual necessity – managing your contract, billing, and service delivery.
  • Legal obligation – compliance with bookkeeping, tax, or regulatory requirements.
  • Legitimate interests – maintaining client relationships, debt recovery, defending our legal rights, or ensuring service efficiency.
  • Consent – where you have given explicit consent, for example, to receive marketing communications.
  • Contractual necessity – managing your contract, billing, and service delivery.
  • Legal obligation – compliance with bookkeeping, tax, or regulatory requirements.
  • Legitimate interests – maintaining client relationships, debt recovery, defending our legal rights, or ensuring service efficiency.
  • Consent – where you have given explicit consent, for example, to receive marketing communications.
  • Consent – where you have given explicit consent, for example, to receive marketing communications.
4. Information We Collect
Depending on your interaction with us, we may collect the following categories of data:
  • Title, name, surname
  • Email address and telephone number
  • Postal address and, where applicable, company name

Methods of collection

Personal data may be collected directly from you:
  • Through our website forms
  • Via email, post, or telephone
  • At events organised by us
  • At events organised by us

Methods of collection

You will always be informed whether providing data is mandatory or optional. If mandatory data is not provided, we may be unable to deliver our services.
  • Through our website forms
  • Via email, post, or telephone
  • At events organised by us
You will always be informed whether providing data is mandatory or optional. If mandatory data is not provided, we may be unable to deliver our services.
5. Data Retention
We retain personal data for as long as is necessary for the purposes for which it was collected, subject to statutory retention requirements
  • Prospective clients – data retained for 36 months from the last contact.
  • Clients – data retained for the duration of the contractual relationship, plus 60 months thereafter.
We may retain certain information for longer where required by law (e.g., accounting or regulatory obligations).
6. Sharing Your Data
Your personal data may be shared with:
  • Internal departments, such as marketing, accounts, HR, sales, and administration.
  • Subcontractors and service providers engaged under Article 28 GDPR (including IT, hosting, maintenance, website optimisation, and newsletter distribution).
  • Internal departments, such as marketing, accounts, HR, sales, and administration.
  • Subcontractors and service providers engaged under Article 28 GDPR (including IT, hosting, maintenance, website optimisation, and newsletter distribution).
  • Subcontractors and service providers engaged under Article 28 GDPR (including IT, hosting, maintenance, website optimisation, and newsletter distribution).
  • Subcontractors and service providers engaged under Article 28 GDPR (including IT, hosting, maintenance, website optimisation, and newsletter distribution).
In certain cases, we may also be required to share data with regulators, legal authorities, or professional advisers to defend our rights in legal proceedings.
7. Transfers Outside the EEA/UK
We currently do not transfer your personal data outside the European Economic Area or the United Kingdom. If our policy changes, we will update this Privacy Policy accordingly.
8. Data Security
As Data Controller, Digitalico implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, loss, or alteration. Access to your data is strictly limited to employees and service providers who require it for legitimate purposes and are subject to confidentiality obligations.
9. Cookies

What are cookies?

Cookies are small text files placed on your device by websites you visit. They enable certain functionalities and help us understand how our site is used.
We use session cookies (deleted when you close your browser) and persistent cookies (stored for a defined period or until manually deleted). We may also use web beacons, scripts, or similar technologies to analyse user behaviour and improve services.
In line with the Privacy and Electronic Communications Regulations (PECR), we will always seek your consent before placing advertising, analytics, or social media cookies.

Managing cookies

You can manage cookies through:
  • Our cookie management tool, available at the footer of our site.
  • Your browser settings, where you may accept or decline cookies, delete existing cookies, or set preferences.
Further information is available via your browser’s help menu, or from the ICO: https://ico.org.uk/your-data-matters/online/cookies.

Managing cookies

You can manage cookies through:

Managing cookies

You can manage cookies through:
  • Our cookie management tool, available at the footer of our site.
  • Your browser settings, where you may accept or decline cookies, delete existing cookies, or set preferences.
  • Your browser settings, where you may accept or decline cookies, delete existing cookies, or set preferences.

Mobile devices

You can also manage tracking and cookies directly through your smartphone system settings:

Mobile devices

You can also manage tracking and cookies directly through your smartphone system settings:
10. Contact Details
If you have any questions about this Privacy Policy or wish to exercise your rights under data protection law, you may contact our Data Protection Officer (DPO):
David Carralon
Company Owner & Data Protection Officer
Email: legal@digitalico.com
Telephone: +33 (0)6 15 35 55 33
Postal: Digitalico, 30 bis rue du Vieil Abreuvoir, 78100 Saint-Germain-en-Laye