Data protection policy

1. Preamble

DALiNK Conseil provides an AI-powered survey creation and management service through the website https://quervey.com (the "Website") in accordance with our terms of service (ToS).

To this end, we process your personal data as defined in the ToS.

We act as data controller within the meaning of applicable regulations, namely Regulation (EU) 2016/679 of 27 April 2016 on data protection ("GDPR") and French data protection law No. 78-17 of 6 January 1978 as amended.

This policy aims to fulfill our information obligation and to remind you of the rights you have regarding your personal data.

2. Data processed

The data we process as part of the Service includes:

• identity and identification (first name, last name);
• contact information (email address);
• account data (role, workspace);
• data relating to surveys created and responses collected;
• technical data: IP address, logs, tokens and browsing data;
• connection data: credentials, session history.

3. Data origin

We collect your data from the information you provide directly during registration and use of the Service. We do not collect data indirectly.

4. Legal basis

The legal basis for processing your personal data is:

• performance of the contract between us (the ToS) for data necessary to provide the Service;
• your consent for non-essential cookies;
• our legitimate interest in improving the Service and ensuring platform security.

5. Purposes

We process your personal data for the following purposes:

• management of your personal user account;
• provision of the survey creation and management service;
• analysis and improvement of the Service;
• communication relating to the Service (notifications, updates).

We do not process your data for purposes other than those mentioned above. If we decide to expand our processing purposes, you will be informed through an update of this policy.

6. Recipients

Your data may be shared with internal or external recipients as appropriate.

Internal recipients include all DALiNK Conseil personnel authorized to access your data. All are bound by a confidentiality obligation.

External recipients are technical subcontractors involved in providing the Service (hosting, email delivery, analytics).

Your data is not shared with other external recipients without your consent.

7. Retention period

Your data is processed for a limited period determined by legal and contractual requirements.

In general, your data is retained for the duration of your registration with the Service, then for 3 years after account deletion.

As an exception, technical data is retained for one year from collection.

After these periods, your data is irreversibly deleted or anonymized.

8. Your rights

You have the following rights regarding your personal data:

• the right to request confirmation that data concerning you is being processed, to access that data and to request a copy;
• the right to have any inaccurate or outdated data concerning you rectified;
• the right to request erasure or restriction of your data under the conditions set out in Articles 17 and 18 of the GDPR;
• the right to object to the processing of your data on legitimate grounds;
• the right to data portability;
• the right to issue instructions regarding the fate of your data after your death.

Requests to exercise your rights should be sent by email to contact@quervey.com or by post to DALiNK Conseil, 4 rue des Epinettes, 78630 Morainvilliers, France.

9. Security

We implement the technical and organizational measures we deem appropriate to combat unauthorized destruction, loss, alteration or disclosure of your data.

10. Data breach

In the event of a personal data breach, we commit to notifying the CNIL (French Data Protection Authority) under the conditions set out in the GDPR.

If the breach poses a high risk to you and your data has not been adequately protected, we will inform you and provide all necessary information and recommendations.

11. Subcontracting

We may use subcontractors to process your personal data. We ensure that each subcontractor complies with its obligations under the GDPR and require them to sign a written contract imposing the same obligations as ours.

12. Cross-border data transfers

We reserve the right to transfer data we process outside the EU, of which you will be informed. In such cases, we will ensure the protection of your rights and sign any necessary contracts to govern such transfers.

13. Cookies

a) What are the cookies on the Website used for?

When browsing our Website, information about your device's navigation may be stored in "cookie" files. The cookies we issue allow us to:

• adapt the presentation of our Website to your device's display preferences (language, resolution, operating system);
• allow you to access reserved and personal areas, such as your account;
• implement security measures;
• measure audience and analyze Website usage.

b) Your cookie choices

Several options are available to manage cookies. You may express and modify your cookie preferences at any time through the cookie management banner accessible on the Website.

If you refuse cookie storage, you may no longer benefit from certain features that require their use. We disclaim any liability for reduced functionality resulting from cookies you have refused or deleted.

14. Contact

As permitted by law, you may file a complaint with the CNIL (French Data Protection Authority):

CNIL Complaints Service
3 place de Fontenoy – TSA 80751
75334 Paris Cedex 07, France
+33 1 53 73 22 22

If you would like more information, you may contact us at: contact@quervey.com.