General Data Protection Regulation
RGPD

1. Data Controller

akawan – 16 rue Arnaud Vidal 31000 – dpo@akawan.fr acts as the data controller for the data collected via the Bosl.ai anonymization SaaS service.

2. Data Collected

The service only collects data necessary for the operation of the platform, including:

• Registration information (name, email address, account information);
• Service usage data;

3. Purposes and Legal Basis for Processing

The data is processed for the following purposes:

• To provide the anonymization service and ensure its operation (contractual performance);
• To manage customer relations and technical support (contractual performance);
• To conduct anonymized statistical analyses for the purpose of continuous improvement (legitimate interest);
• To comply with applicable legal and regulatory obligations.

4. Data Recipients

Data may only be transmitted to:

• Authorized akawan staff members and its subcontractors (hosting, support), subject to confidentiality obligations;
• To any legally authorized authority in the event of a legal obligation.

5. Data Retention

Personal data is retained for the period necessary to achieve the following purposes:

• Account information: until account deletion or one year after the last contact;
• Technical logs: 12 months maximum;
• Data to be anonymized: deleted immediately after processing; no raw data is stored.

6. Security Measures

akawan implements appropriate technical and organizational measures to ensure the security, integrity, and confidentiality of personal data:

• Encryption of data exchanges;
• Strict access control;
• Logging and monitoring of actions.

7. Data Subject Rights

In accordance with regulations, each user has the following rights:

• Right of access, rectification, erasure (right to be forgotten), restriction, objection, and portability;
• Right to withdraw consent for processing based on consent;
• Right to file a complaint with the CNIL (French Data Protection Authority). To exercise these rights, contact dpo@akawan.fr

8. Data Sharing and Transfer

No non-anonymized data is transmitted to third parties except in the cases provided for above. If certain processing operations involve transfers outside the EU, appropriate safeguards are in place in accordance with the GDPR.

9. Cookies and Traceability

The service only uses technical cookies necessary for its operation. No tracking or advertising cookies are implemented on the platform.

10. Changes to the Privacy Policy

This policy may be updated at any time. Any substantial changes will be notified by email or through the app. The latest version is always available on our website.