1. Data controller
The controller of the personal data collected through this website is Karpa International Group, whose contact details appear at the end of this document. For any question relating to data protection, you may contact us by email at the address indicated below.
2. Personal data we collect
We collect only the data strictly necessary for the purposes described below. When you use the contact form, we process your name, email address, organisation name (optional), the subject of your request and the content of your message. We also process limited technical data (IP address, browser type, pages visited) for security and proper operation of the site. We do not collect any special category of data (health, political opinions, origin, etc.).
3. Purposes and legal bases of processing
Your data is processed in order to respond to your contact requests (legal basis: pre-contractual steps taken at your request — Art. 6(1)(b) GDPR), to ensure the security and proper operation of the site (legal basis: legitimate interest — Art. 6(1)(f) GDPR), to comply with our legal and accounting obligations where applicable (Art. 6(1)(c) GDPR), and to remember your language preference (legal basis: legitimate interest or consent — Art. 6(1)(a)/(f) GDPR).
4. Retention period
Data from the contact form is kept for the period necessary to handle your request and then archived for a maximum of three (3) years from the last contact, unless a longer legal retention obligation applies. Technical logs are kept for six (6) months for security purposes.
5. Recipients of the data
Your data is intended only for the internal departments of Karpa International Group authorised to process it. It may be communicated to our technical service providers (hosting, email) acting as processors within the meaning of Article 28 GDPR, bound by contractual confidentiality and security commitments. Your data is never sold or transferred to third parties for commercial purposes.
6. Transfers outside the European Union
Given the international nature of our activity, your data may be transferred to countries outside the European Economic Area. In that case, such transfers are framed by the appropriate safeguards provided for in Articles 44 to 49 GDPR, in particular the Standard Contractual Clauses adopted by the European Commission or an adequacy decision. A copy of these safeguards may be obtained on request.
7. Your rights
In accordance with Articles 15 to 22 GDPR, you have the right of access, rectification, erasure, restriction of processing, objection on legitimate grounds, and data portability. You may also withdraw your consent at any time where processing is based on consent, without this withdrawal affecting the lawfulness of processing carried out beforehand. To exercise these rights, please contact us at the address shown at the end of this document. You also have the right to lodge a complaint with a competent supervisory authority — in France the CNIL (www.cnil.fr), in Spain the AEPD (www.aepd.es) — or with any other authority of the EU Member State in which you reside.
8. Cookies
This site uses cookies strictly necessary for its operation: a language-preference cookie ("karpa_lang", duration 30 days) and a cookie recording your choice regarding cookies ("karpa_cookie_consent", duration 12 months). No analytics or advertising cookies are set without your explicit consent. You may change your preferences at any time via the cookie banner accessible from the footer.
9. Data security
We implement appropriate technical and organisational measures to ensure a level of security suited to the risk, in accordance with Article 32 GDPR: encryption of communications (TLS), access control, logging, regular backups and staff training.
10. Changes to this policy
This policy may be updated to reflect legal, technical or organisational changes. Any material change will be indicated on this page and, where appropriate, by any other suitable means. The date of last update is shown at the top of this document.
Contact us
For any question regarding this policy or to exercise your rights, you may write to us at: