Privacy Policy
Last updated: February 2026
ENN CONSULTING SAS is committed to protecting the privacy of users of its website enn-consulting.com. This privacy policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR).
1. Data Controller
The data controller is:
**ENN CONSULTING SAS**
12 mail Saussure, 94000 Créteil, France
Email: shir@enn-consulting.com
**Data Protection Officer (DPO):**
Email: dpo@enn-consulting.com
2. Data Collected
We collect the following data:
**Identification data:**
• First and last name
• Professional email address
• Phone number
• Company name
• Job title
**Navigation data:**
• IP address
• Browser type
• Pages visited
• Visit duration
• Traffic source
**Form data:**
• Information submitted via our contact forms
• Audit requests
3. Processing Purposes
Your data is collected for the following purposes:
• **Contact request management**: responding to your requests
• **Commercial prospecting**: offering our services (with your consent)
• **Website improvement**: analyzing site usage
• **Legal obligations**: complying with regulations
4. Legal Basis
Processing of your data is based on:
• **Your consent**: for non-essential cookies and prospecting
• **Contract execution**: for customer relationship management
• **Legitimate interest**: for improving our services
• **Legal obligations**: for regulatory compliance
5. Data Recipients
Your data may be transmitted to:
• Our internal team (sales, marketing)
• Our technical subcontractors (hosting, emailing)
• Competent authorities when legally required
**Main subcontractors:**
• Scaleway (dedicated server hosting, France)
• Self-hosted Supabase (database, France)
• Google (Analytics, Ads - with Consent Mode V2)
• Meta (Facebook Pixel - with Consent Mode V2)
All our subcontractors are GDPR compliant. Hosting and data are located exclusively in France.
6. Transfers Outside EU
Your data is hosted on our own servers in France (Scaleway datacenter). No personal data is stored outside the European Union.
Some technical data may be transmitted to Google and Meta for advertising campaigns, with your explicit consent (Consent Mode V2). These transfers are governed by:
• Standard contractual clauses from the European Commission
• Data Privacy Framework (DPF) compliance
7. Data Retention
Your data is retained for:
• **Prospects**: 3 years from last contact
• **Clients**: duration of contract + 5 years (legal obligations)
• **Navigation data**: 13 months maximum
• **Cookies**: see our Cookie Policy
8. Your Rights
Under GDPR, you have the following rights:
• **Right of access**: obtain a copy of your data
• **Right to rectification**: correct inaccurate data
• **Right to erasure**: request deletion of your data
• **Right to restriction**: limit processing of your data
• **Right to portability**: receive your data in a structured format
• **Right to object**: object to processing of your data
• **Right to withdraw consent**: at any time
To exercise these rights, contact us at: dpo@enn-consulting.com
You may also file a complaint with the French data protection authority (CNIL).
9. Data Security
We implement appropriate technical and organizational measures to protect your data:
• Data encryption in transit (HTTPS/TLS)
• Secure hosting on compliant servers
• Restricted access to personal data
• Regular backups
• Security system updates
10. Cookies
Our website uses cookies. For more information, see our Cookie Policy.
11. Changes
We reserve the right to modify this privacy policy at any time. Changes take effect upon publication on the website.
12. Contact
For any questions regarding this policy or your personal data:
Email: dpo@enn-consulting.com
Address: 12 mail Saussure, 94000 Créteil, France