Privacy policy

This policy explains how Designta, the publisher of the catalia.fr website, collects and processes the personal data of its visitors and clients. The full identity of the data controller is set out in the Legal notice.

1. Data controller

The data controller is Designta (EURL), operating under the Catalia brand. No data protection officer (DPO) has been appointed, as the business does not meet the conditions that make this mandatory under article 37 of the GDPR. For any question about your data: matt@catalia.fr.

2. Data collected

Designta collects the following data:

• Identification data (last name, first name, email, phone, role, company): when you fill out a contact form, request a quote, register for a service, or download a resource.
• Contractual and billing data (address, SIRET, terms, invoices): for Clients who have signed a quote or agreement.
• Browsing data (pages visited, duration, traffic source, device type): collected via cookies and trackers when you consent.

3. Purposes and legal bases

Under article 6 of the GDPR, each purpose rests on a defined legal basis:

• Responding to your requests (contact, quotes). Legal basis: steps taken at your request before entering into a contract (art. 6.1.b).
• Delivering the services you buy (training, consulting, coaching). Legal basis: performance of the contract (art. 6.1.b).
• Meeting accounting and legal obligations (keeping invoices and training records). Legal basis: legal obligation (art. 6.1.c).
• Telling you about our services (emails, newsletters). Legal basis: Designta's legitimate interest in promoting its services to qualified prospects and existing clients (art. 6.1.f), with the right to object at any time.
• Measuring traffic and improving the Site. Legal basis: consent (art. 6.1.a), obtained through the cookie banner.

4. Retention periods

• Prospect data (contact forms, quote requests that did not lead to a contract): 3 years from the last active contact.
• Client data (contracts, agreements, accepted quotes): 10 years from the end of the contractual relationship (the commercial limitation period).
• Accounting records and invoices: 10 years (art. L. 123-22 of the French Commercial Code).
• Training records (attendance sheets, assessments, certificates): at least 4 years, in line with the obligations that apply to training providers.
• Analytics cookies: 13 months at most.
• Connection logs: for the periods that hosting providers are required by law to keep them.

5. Recipients

Your data is processed by Designta. It may be shared with:

• Designta's service providers acting as processors (hosting, email, accounting, CRM tools), bound by a duty of confidentiality and a data processing agreement that complies with article 28 of the GDPR.
• The funders of training programs (OPCO, Pôle Emploi, the employer) where funding is provided.
• The relevant authorities, where required by law or in legal proceedings.

6. Transfers outside the European Union

The Site is hosted by Vercel Inc., a company based in the United States (see the Legal notice). As a result, some technical data may be transferred to the United States. Such transfers are covered by the safeguards the GDPR provides (standard contractual clauses or the Data Privacy Framework, as applicable). Designta makes no other transfers outside the EU without first ensuring an adequate level of protection.

7. Cookies and trackers

The Site uses cookies that are strictly necessary for it to work (always on) and, with your consent, analytics cookies (Google Analytics). You can change your preferences at any time through your browser or, where available, the Site's cookie settings.

8. Security

Designta puts in place reasonable technical and organizational measures to protect your data against loss, alteration, disclosure, or unauthorized access: authentication, access controls, backups, and hosting with an established provider.

9. Your rights

Under articles 15 to 22 of the GDPR, you have the following rights: access, rectification, erasure, restriction of processing, objection, portability, and the right to set instructions for what happens to your data after your death. To exercise these rights, send your request to matt@catalia.fr, with proof of identity if needed. Designta undertakes to respond within one month of receiving it.

If you still believe your rights are not being respected after contacting us, you may lodge a complaint with the French data protection authority (CNIL), at 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or online at cnil.fr.

10. Changes

This policy may be updated to reflect a change in the law or in our practices. The date it was last updated appears at the top of the page.

11. Contact