Data controller
The data controller is HK CO, a société par actions simplifiée (SAS) under French law, whose registered office is located in Annecy (Haute-Savoie, France), registered under SIRET number 106 938 061 00012 (SIREN 106 938 061, 106 938 061 R.C.S. Annecy). Any question relating to this policy may be sent to contact@houssamkarrach.com. No data protection officer has been appointed: the processing carried out falls under none of the cases making such an appointment mandatory under Article 37 of the General Data Protection Regulation.
Data collected
The site collects data only when you voluntarily fill in the contact form. What is then transmitted is your name, your email address, your company name if you provide it — that field is optional —, the type of engagement selected and the content of your message. No other data is requested. The site builds no profile, applies no automated decision-making producing legal effects, and does not enrich your data from third-party sources.
Purpose and legal basis
This data is used solely to answer your request and, where applicable, to continue the exchange it opens. The legal basis is the controller’s legitimate interest in responding to the enquiries addressed to it, together with the performance of pre-contractual steps taken at your request. Your data is neither sold, nor rented, nor transferred, and is not used for any unsolicited commercial prospecting.
Recipients and processors
Your data is sent to Houssam Karrach, the sole recipient. Three technical providers are involved: Cloudflare, Inc., which hosts the site and routes requests; Resend, which handles delivery of the message by email; and Microsoft, whose Clarity tool measures how the pages are browsed (see the “Cookies and audience measurement” section). These providers are established in the United States; the resulting transfers of data outside the European Union are governed by the European Commission’s standard contractual clauses, provided for in their respective contractual terms. No other recipient has access to this data.
Retention period
Messages received are kept for as long as is necessary to handle the request, then for a maximum of three years from the last contact, in line with the practice recommended by the CNIL for prospecting and business relationship data. After that period they are deleted. If a contract is concluded, the related data follows the statutory retention periods applicable to commercial and accounting records.
Your rights
In accordance with Regulation (EU) 2016/679 and the French Data Protection Act, you have a right of access, rectification, erasure, restriction of processing and objection, as well as a right to data portability. You may also set instructions concerning the fate of your data after your death. These rights are exercised by simple request to contact@houssamkarrach.com; a response is provided within the one-month period laid down by the Regulation. If, after contacting us, you consider that your rights are not being respected, you may lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or at cnil.fr.
Cookies and audience measurement
This site uses Microsoft Clarity, an audience measurement and session-replay tool operated by Microsoft, which sets cookies or similar technologies on your browser to understand how pages are browsed; Microsoft may process this data outside the European Union under its own terms. Fonts, by contrast, remain served from the site’s own domain rather than from a third-party service.
Technical logs and security
For security and abuse-prevention purposes, the hosting provider keeps technical logs that may contain your IP address. That processing falls under its own legitimate interest and its own contractual terms. Exchanges with the site are encrypted with TLS, and form data passes through no third-party service other than those mentioned above.
Changes to this policy
This policy may be amended to reflect a change in the site or in the applicable regulation. The version in force is the one published on this page.