Privacy policy

This policy describes how Key Advisory Group collects and processes your personal data, in accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act of 6 January 1978 as amended.

Data controller

The data controller is Key Advisory Group (SAS), whose registered office is in Issy-les-Moulineaux, France. For any question regarding your data, please write to didier.gerbault@keyadvisorygroup.com.

Data collected

We only collect the data you provide through the contact form: first name, last name, e-mail address, phone (optional), company, city and the content of your message. For security purposes, a hash of your IP address is kept temporarily to limit abuse.

Purposes and legal basis

This data is processed for the sole purpose of responding to your request and managing our relationship. The legal basis is your consent, collected via the form’s checkbox, together with the legitimate interest of Key Advisory Group in handling the requests it receives.

Recipients

Your data is intended solely for Key Advisory Group. It is never sold, disclosed to third parties or used for advertising. It may be processed by our technical sub-processors acting on our behalf: our host IONOS (European Union) and the Cloudflare Turnstile anti-spam service. No transfer outside the European Union is carried out without appropriate safeguards.

Retention period

Messages received through the contact form are kept for a maximum of three (3) years from the last exchange, then deleted or anonymised.

Cookies and security

The site uses no advertising cookies or audience-measurement tools. Only strictly necessary cookies are set: a technical session cookie and, where applicable, a functional cookie for the Cloudflare Turnstile anti-spam tool protecting the contact form. These consent-exempt cookies cannot track you. Exchanges with the site are encrypted (HTTPS).

Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict, object to and port your data, as well as to set instructions regarding its fate after your death. You may exercise these rights, or withdraw your consent at any time, by writing to didier.gerbault@keyadvisorygroup.com.

If, after contacting us, you consider that your rights are not respected, you may lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.