Privacy policy

This policy describes how Designta, publisher of the catalia.fr site, collects and processes personal data of its visitors and clients. The complete identity of the data controller is provided in the Legal notice.

1. Data controller

The data controller is Designta (EURL), operating under the Catalia brand. No data protection officer (DPO) has been designated, as the activity does not fall within the obligation cases set out in article 37 of the GDPR. For any question regarding your data: matt@catalia.fr.

2. Data collected

Designta collects the following data:

• Identification data (last name, first name, email, phone, role, company): when you fill out a contact form, request a quote, register for a service, or download a resource.
• Contractual and billing data (address, SIRET, terms, invoices): for Clients who have signed a quote or agreement.
• Browsing data (pages visited, duration, traffic source, device type): collected via cookies and trackers when you consent.

3. Purposes and legal bases

In accordance with article 6 of the GDPR, each purpose relies on an identified legal basis:

• Reply to your requests (contact, quote) — legal basis: pre-contractual measures at your request (art. 6.1.b).
• Performance of services sold (training, consulting, coaching) — legal basis: performance of the contract (art. 6.1.b).
• Accounting and legal obligations (retention of invoices, training records) — legal basis: legal obligation (art. 6.1.c).
• Communication about our services (emails, newsletters) — legal basis: legitimate interest of Designta to promote its services to qualified prospects or existing clients (art. 6.1.f), with the right to object at any time.
• Audience measurement and Site improvement — legal basis: consent (art. 6.1.a) collected via the cookie banner.

4. Retention periods

• Prospect data (contact forms, unconfirmed quote requests): 3 years from the last active contact.
• Client data (contracts, agreements, accepted quotes): 10 years from the end of the contractual relationship (commercial prescription period).
• Accounting documents and invoices: 10 years (art. L. 123-22 of the French Commercial Code).
• Training-action documents (attendance sheets, evaluations, certificates): 4 years minimum, in accordance with obligations applicable to training bodies.
• Audience measurement cookies: 13 months maximum.
• Connection data: in accordance with legal retention periods for hosts.

5. Recipients

Your data is processed by Designta. It may be shared with:

• Designta's technical providers acting as processors (hosting, emailing, accounting, CRM tools), bound by a confidentiality commitment and a processing agreement compliant with article 28 of the GDPR.
• Training-action funders (OPCO, Pôle Emploi, employer) when the service is covered.
• Competent authorities in case of legal obligation or judicial procedure.

6. Transfers outside the European Union

The Site is hosted by Vercel Inc., a company headquartered in the United States (see Legal notice). As such, some technical data may transit to the United States. This transfer is governed by the mechanisms set by the GDPR (standard contractual clauses or Data Privacy Framework as applicable). Designta does not carry out any other transfers outside the EU without ensuring an adequate level of protection.

7. Cookies and trackers

The Site uses cookies that are strictly necessary for its operation (always active) and, subject to your consent, audience measurement cookies (Google Analytics). You may modify your preferences at any time via your browser or the Site's cookie management module when in place.

8. Security

Designta implements reasonable technical and organizational measures to protect your data against loss, alteration, disclosure, or unauthorized access: authentication, access management, backups, hosting with a recognized provider.

9. Your rights

In accordance with articles 15 to 22 of the GDPR, you have the following rights: access, rectification, erasure, restriction of processing, objection, portability, and the right to define directives regarding what happens to your data after your death. To exercise these rights, send your request to matt@catalia.fr, providing proof of identity if necessary. Designta commits to respond within one month from receipt.

If, after contacting us, you consider that your rights are not respected, you may file a complaint with the French data protection authority (CNIL), 3 place de Fontenoy — TSA 80715 — 75334 Paris Cedex 07, or online at cnil.fr.

10. Changes

This policy may be updated to reflect a regulatory evolution or a change in our practices. The date of the last update appears at the top of the page.

11. Contact