Last updated on 07/09/2026
1. Purpose of the Policy
Caprikorn places particular importance on protecting your personal data. This policy explains how we collect, use, store, and protect your data when you browse our website, contact our teams, subscribe to or use our services, or apply for a job.
It applies to website visitors, prospects, customers, users of our services, job applicants, participants in our promotional campaigns, and anyone who interacts with us, including on social media.
2. Data Controller and Contact Information
The data controller is:
Caprikorn SAS
79 Clichy Street
75009 Paris, France
If you have any questions regarding your personal data or wish to exercise your rights, you may contact our Data Protection Officer (“DPO”) at the following address: [email protected].
3. Data We Process
Depending on your relationship with us and the services you use, we may process, among other things:
- Identification and contact information: last name, first name, mailing address, email address, phone number;
- Data related to your contractual relationship: requests, quotes, orders, contracts, communications with our teams, complaints, and invoices;
- Economic and financial data necessary for billing and payment, such as bank account information and direct debit authorizations;
- Technical and connection data : IP address, connection logs, browsing data, and device information;
- Data related to the use of our services, including, where applicable, housing and consumption data;
- Marketing data: preferences, consents, opt-outs, and interactions with our communications;
- Data related to job applications: resumes, cover letters, recruitment communications, and evaluations;
- Data shared through the chatbot, forms, social media, customer reviews, contests, or satisfaction surveys;
- Call recordings, provided you were notified in advance.
We primarily collect this data directly from you when you use our services, communicate with us, or browse the website. If we collect data from a third party, we will provide you with the information required by applicable regulations.
4. Purposes and Legal Bases
We process your data for the following purposes:
| Purpose | Legal Basis |
| Maintain the website, respond to your inquiries, manage appointments, quotes, and requests for information | Pre-contractual measures taken at your request or based on a legitimate interest |
| Subscribe to, provide, and administer services; manage the contractual relationship, orders, payments, deliveries, and support | Performance of the contract and, where applicable, legal obligations |
| Manage Billing, Unpaid Invoices, and Collections | Performance of the contract, legal obligations, and legitimate interests |
| Provide customer support and handle requests and complaints | Performance of the contract or legitimate interest |
| Secure our systems, prevent fraud, ensure availability, and improve the quality of our services | Legal Obligations and Legitimate Interests |
| Sending marketing communications via email or text message | Consent, when required; legitimate interest for customers, within the applicable legal limits |
| Manage the newsletter | Consent |
| Measuring our online advertising campaigns and promoting our services | Consent for trackers when required; legitimate interest in other cases permitted by law |
| Manage the chatbot, blog, FAQs, and social media | Legitimate interest |
| Collect and publish customer reviews; conduct satisfaction surveys | Legitimate interest |
| Organize contests or promotional campaigns | Enforcement of the relevant regulation and legitimate interest |
| Manage Hiring | Precontractual measures taken at the applicant’s request and legitimate interest |
| Record certain calls when this feature is enabled | Legitimate interest or consent, where required |
The information marked as required in our forms is necessary to process your request or, as the case may be, to enter into or perform the contract. If you do not provide this information, we may not be able to respond to your request or provide you with the relevant service. All other information is optional.
5. Data Recipients
Your data is accessible, within the scope of their responsibilities, to authorized teams at Caprikorn. It may also be shared with our service providers acting on our behalf, particularly in the areas of web hosting, IT, support, payment processing, sending communications, customer relations, or security.
We may also share data with private and public partners or organizations when necessary to provide our services, comply with a legal obligation, or defend our rights. We do not sell your personal data.
6. Transfers Outside the European Economic Area
The personal data processed by our platform is hosted exclusively on servers located within the European Union.
In addition, some of our service providers may process data outside the EEA. In such cases, we ensure that these transfers are governed by a mechanism recognized under applicable regulations, including an adequacy decision or the standard contractual clauses adopted by the European Commission, supplemented as necessary by appropriate safeguards. You can obtain more information about these safeguards by writing to [email protected].
7. Retention Periods
We retain your data only for as long as necessary to fulfill the purposes for which it was collected, and thereafter for as long as necessary to comply with our legal obligations or to defend our rights.
Accordingly, subject to the approval of our retention policy:
- Data relating to the contractual relationship are retained for the duration of the contract and for five years after its termination, for evidentiary purposes and to manage any claims.
- Accounting records and supporting documents are retained for ten years.
- Data used for marketing purposes via email or text message is retained for three years as of the last contact initiated by the individual concerned, unless the individual objects or withdraws their prior consent;
- Newsletter subscription data is retained until consent is withdrawn or the user unsubscribes;
- Application data is retained for the duration of the hiring process and then, subject to your consent where required, for two years as of the last contact;
- Login data and technical logs are retained for one year, unless a longer retention period is required due to a security incident or a legal obligation;
- Telephone recordings, when they exist, are retained for the period announced at the time of the recording, in principle six months.
In the event of a dispute, we may retain the data strictly necessary for the duration of the proceedings and until the exhaustion of all available remedies or the expiration of the applicable time limits. Once the applicable time limits have expired, the data is deleted or irreversibly anonymized.
8. Your Rights
Subject to the conditions set forth in the regulations, you have the following rights:
- The right to access your data and obtain a copy of it;
- Right to correct inaccurate or incomplete data;
- The right to have your data erased when the legal conditions are met;
- Right to restriction of processing;
- The right to data portability for the data you have provided to us, where applicable;
- The right to object, on grounds relating to your situation, to processing based of our legitimate interests;
- The right to object, at any time and without having to provide a reason, to the use of your data for marketing purposes;
- The right to withdraw your consent at any time when the processing is based on your consent; such withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal;
- The right to provide instructions regarding what should happen to your data after your death.
To exercise your rights, please write to us at [email protected]. To help us process your request, please use this address. If we have reasonable grounds to doubt your identity, we may ask you to provide the information necessary to verify it.
We will respond to you within the applicable legal timeframe, which is generally one month from the date we receive your request. This timeframe may be extended by two months in cases where the request is complex or where there is a large volume of requests; we will notify you of this within the first month. Exercising your rights is free of charge, except in cases of manifestly unfounded or excessive requests.
You may also file a complaint with the National Commission for Information Technology and Civil Liberties (“CNIL”), specifically through its website: www.cnil.fr.
9. Automated Decisions
Caprikorn does not make decisions based solely on automated processing, including profiling, that produce legal effects on you or similarly significantly affect you.
If such processing is carried out, this policy will be updated to inform you of the underlying rationale, the significance, and the expected consequences of such processing, as well as the rights you have.
10. Safety
We implement appropriate technical and organizational measures to safeguard the security, confidentiality, and integrity of your personal data and, in particular, to prevent the risk of destruction, loss, alteration, disclosure, or unauthorized access.
11. Cookies and Other Trackers
When you browse our website, we use cookies and other tracking technologies. Some are necessary for the website to function; others are placed in accordance with your preferences and, when required, after obtaining your consent.
For details on cookies, their purposes, retention periods, and the partners involved—and to configure your preferences—please visit our [Cookies Policy].
12. Policy Change
We may amend this policy to reflect changes in laws, regulations, technology, or our data processing practices. The “Last Updated” date at the top of this document indicates the effective date of the online version.