Your privacy is important to us. This policy explains how we collect, use, and protect your personal information in compliance with GDPR and other data protection laws.
Koda Company is fully compliant with the General Data Protection Regulation (GDPR) and other applicable data protection laws. We are committed to protecting your privacy and ensuring transparent data handling practices.
Koda Company acts as the data controller for personal information collected through our website and services.
| Company Name | Koda Company |
|---|---|
| Website | https://koda-tech.fr |
| contact@koda-tech.fr | |
| Phone | +33 7 53 91 07 67 |
| Address | France (EU) |
We collect the following types of personal information:
| Data Type | Information Collected | Collection Method |
|---|---|---|
| Account Information | Name, email address, username, password | Account registration, OAuth login |
| Profile Information | Phone number, company name, address, bio | Voluntary profile completion |
| Project Information | Project details, business requirements, specifications | Project creation form |
| Payment Information | Billing address, payment method details | Stripe payment processing |
| Communication Data | Messages, support requests, feedback | Contact forms, project communication |
| Technical Information | IP address, browser type, device information | Automatic collection via website |
We use your personal information for the following purposes:
Under GDPR, we process your personal data based on the following legal grounds:
| Legal Basis | Processing Activities | Examples |
|---|---|---|
| Contract Performance | Providing web development services | Account creation, project delivery, payment processing |
| Legitimate Interest | Business operations and improvements | Analytics, security, fraud prevention, service optimization |
| Consent | Optional features and marketing | Newsletter subscriptions, marketing emails, cookies |
| Legal Obligation | Compliance requirements | Tax records, data breach notifications, law enforcement requests |
We share personal information with trusted third-party providers who help us operate our business:
| Service Provider | Purpose | Data Shared | Safeguards |
|---|---|---|---|
| Stripe | Payment processing | Payment and billing information | PCI DSS compliant, GDPR compliant |
| Google/Facebook | OAuth authentication | Basic profile information | OAuth 2.0 security standards |
| Email Services | Transactional emails | Email addresses, names | Encrypted transmission, data processing agreements |
| Hosting Providers | Website and data hosting | All website data | EU-based servers, GDPR compliance |
We may disclose personal information when required by law or to:
We retain personal information only as long as necessary for the purposes outlined in this policy:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account Information | Active account + 3 years after closure | Service provision, legal obligations |
| Project Data | Duration of project + 5 years | Contract fulfillment, warranty support |
| Payment Records | 7 years from transaction | Tax and legal compliance |
| Communication Data | 3 years from last interaction | Customer support, dispute resolution |
| Marketing Data | Until consent withdrawal | Marketing communications (consent-based) |
| Analytics Data | 26 months | Service improvement, aggregated analysis |
Under GDPR and other data protection laws, you have the following rights regarding your personal information:
Request a copy of the personal information we hold about you, including details about how it's processed.
Request correction of inaccurate or incomplete personal information.
Request deletion of your personal information under certain circumstances.
Request limitation of how we process your personal information.
Receive your personal information in a structured, machine-readable format.
Object to processing of your personal information for specific purposes.
Withdraw consent for processing activities that rely on your consent.
File a complaint with your local data protection authority if you're unsatisfied with our response.
To exercise any of these rights, please:
We implement comprehensive security measures to protect your personal information:
Your personal information may be transferred to and processed in countries outside the European Economic Area (EEA):
| Service | Location | Safeguard | Data Transferred |
|---|---|---|---|
| Stripe | USA | Standard Contractual Clauses | Payment information |
| Google Services | USA | Standard Contractual Clauses | OAuth authentication data |
| USA | Standard Contractual Clauses | OAuth authentication data |
Our services are not directed to individuals under the age of 16, and we do not knowingly collect personal information from children under 16.
If you believe we have collected information from a child under 16:
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.
When we make material changes:
If you have questions about this Privacy Policy, want to exercise your rights, or need to report a privacy concern, please contact us:
We're committed to addressing your privacy concerns promptly and thoroughly.
Response Time: We aim to respond to all privacy inquiries within 48 hours and complete data requests within 30 days.
If you're not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with your local data protection authority or the French data protection authority (CNIL):
