Privacy Policy

1 - Introduction

This Privacy Policy informs users of https://www.neebsuraconsulting.eu how their personal data is collected, processed and protected in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR).

2 - Data controller

The controller of personal data is:

NEEBSURA CONSULTING

Represented by Ms Suraya AHSEEK

200 rue de la Croix Nivert - 75015 Paris

admin@neebsuraconsulting.eu

NEEBSURA CONSULTING has not appointed a Data Protection Officer (DPO), as the organisation is not legally required to do so.

3 - Data collected

NEEBSURA CONSULTING collects only the data strictly necessary for its B2B activity, including:

• Full name
• Company name
• Business email address
• Telephone number
• Job title
• Messages sent through contact forms
• Email address and consent associated with newsletter subscription
• Technical connection and security data, including IP address, browser type and technical logs depending on the services used

No special-category data, within the meaning of Article 9 GDPR, is intentionally collected.

4 - Purposes of processing

Data is used exclusively for:

• Managing contact enquiries
• Booking appointments
• Sending the newsletter to people who have expressly opted in
• Delivering B2B consulting, training and support services
• Organising diagnostics, strategic sessions and training
• Managing customer relationships and sales follow-up
• Preparing quotations and invoices
• Meeting legal and accounting obligations

5 - Lawful basis

Processing is based on:

• Pre-contractual steps or performance of a contract for quotation requests, appointments and services
• Consent for newsletter subscription and cookies requiring consent; consent may be withdrawn at any time
• Legitimate interests for website security, general enquiries and professional sales follow-up, subject to the right to object
• Legal obligations for invoicing, accounting and other applicable requirements

6 - Data recipients

Data is intended exclusively for NEEBSURA CONSULTING’s internal teams and technical providers strictly necessary for operation of the website and services:

• ChatGPT Sites (OpenAI) and Cloudflare: website publication, hosting and security
• Formspree: receiving and forwarding contact forms and newsletter subscription requests
• Microsoft 365: email and professional correspondence storage
• Calendly: appointment booking
• Stripe and Stripy: payments and transaction information
• Cookiebot: managing and recording cookie preferences
• Indy: administration, invoicing and customer follow-up
• LinkedIn and tools needed for a service, where their use forms part of that service

Data is not sold or commercially disclosed to third parties.

Payment

NEEBSURA CONSULTING does not collect or retain full payment-card numbers or security codes. Billing information, payment status and details needed for bank transfers may be processed for payment management and accounting.

Card payments are processed by Stripe or Stripy, depending on the selected payment method. Bank transfers are processed by the relevant banks. Applicable payment terms are specified in the quotation or during booking, before payment.

Transfers outside the European Union

Some technical providers may process or store data outside the European Union, particularly in the United States. Calendly states that it hosts user and invitee data there; Formspree states that it uses infrastructure and processes data in the United States.

Applicable safeguards depend on the provider and processing: an adequacy decision where its conditions are met, or the European Commission’s Standard Contractual Clauses and supplementary measures where necessary. Calendly lists the Data Privacy Framework and Standard Contractual Clauses among its transfer mechanisms; Formspree states that it relies on Standard Contractual Clauses as a processor.

Provider information: https://calendly.com/legal/privacy-notice and https://formspree.io/legal/privacy-policy/ ; Formspree safeguards: https://formspree.io/security/ . For details about transfers relating to your enquiry or the corresponding safeguards, contact admin@neebsuraconsulting.eu.

7 - Retention period

Data is retained for:

• For sales prospecting: no more than three years from collection of the prospect’s data or the last contact initiated by that prospect, subject to an objection or withdrawal of applicable consent; merely opening an email does not restart this period
• For the newsletter: for the duration of the subscription, followed by removal from the active mailing list on unsubscription; evidence of consent and information strictly necessary to honour an objection may be retained to document and respect the choices made
• The contractual period plus 5 years for customers
• Applicable statutory periods for invoicing and accounting obligations

8 - Security

NEEBSURA CONSULTING implements appropriate technical and organisational measures to secure personal data and prevent:

• Loss
• Alteration
• Unauthorised access
• Unlawful disclosure

The hosting providers and service providers used meet the security standards required under European regulations.

9 - User rights

Subject to the conditions and limits set by the GDPR, each user may exercise the following rights:

• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to object
• Right to data portability

To exercise these rights, withdraw consent or object to sales follow-up, contact admin@neebsuraconsulting.eu or write to NEEBSURA CONSULTING - 200 rue de la Croix Nivert - 75015 Paris. Withdrawal does not affect processing lawfully carried out beforehand on that basis. Required form fields are marked; without necessary information, it may not be possible to process the request.

NEEBSURA CONSULTING responds to requests without undue delay and at the latest within one month of receipt. This period may be extended by two months where necessary because of the complexity and number of requests; the individual is informed of the extension and its reasons within the first month.

10 - Complaint

Any user may lodge a complaint with the competent supervisory authority:

Commission Nationale de l’Informatique et des Libertés (CNIL)

3 Place de Fontenoy - TSA 80715 - 75334 Paris Cedex 07

https://www.cnil.fr

11 - Cookies

Strictly necessary cookies support website operation, security and the storage of your choices. They do not require consent where the statutory exemption conditions are met.

Other cookies requiring consent, where offered, require your prior agreement. Their purposes, providers and lifetimes are shown in the Cookiebot manager available through ‘Manage my cookies’ in the footer.

You may accept, refuse or change optional-cookie choices at any time. Refusing them does not prevent page browsing; some third-party features may require separate activation. Audience-measurement cookies are exempt from consent only where they meet the conditions set by the CNIL.

12 - Changes to this policy

NEEBSURA CONSULTING reserves the right to amend this policy at any time to ensure that it remains compliant with regulatory developments.

Users are invited to review this page regularly.