Kimoun Kimoun Kimoun Kimoun

Privacy Policy — Kimoun

How kimoun.com handles personal data: quote form, cookieless audience measurement, retention periods, GDPR rights.

🇫🇷 Lire en français : Politique de confidentialité

1. Data Controller  

The data controller for personal data collected via kimoun.com is:

2. Data Collected  

kimoun.com processes three categories of data.

Technical browsing data, collected automatically to enable site operation, administration and security: IP address, date and time of request, resource requested, standard technical information transmitted by your browser (user-agent).

Data submitted via the quote request form (page /en/get-a-quote/): first name, email address, phone number (optional), primary type of need, free-text message, organisation or activity, and explicit consent to be contacted. This data is processed by kimoun-forms, our own form-handling service, self-hosted on Kimoun infrastructure (VPS): it is stored in an internal database (SQLite) on that server, and the associated emails are delivered through our own mail server (Mailu). No third-party marketing provider is involved in this processing.

Audience measurement data: anonymous visit counts, most-visited pages and traffic sources. Measurement is carried out by Umami, an open-source solution hosted on our own infrastructure (mesure.kimoun.com): it places no cookies, does not retain your IP address and associates no personally identifiable data with these measurements. No data is transmitted to any third party, no advertising cookies, no cross-site tracking, no commercial sharing.

3. Purposes of Processing  

Data is processed for the following purposes:

  • Operation and security of the website (technical data)
  • Processing your quote requests and related commercial communication (form)
  • Follow-ups after an inbound request: following a quote or contact request, we may send you a short sequence of follow-ups (at day 2 and day 5) in order to act on your request
  • Anonymous audience measurement to understand how the site is used and improve it

These follow-ups rely on our legitimate interest in acting on a request you initiated. Every non-transactional email includes a one-click unsubscribe link; you can stop them at any time.

No data is used for advertising, commercial profiling, or resale to third parties.

Each purpose relies on a distinct legal basis under GDPR:

  • Legitimate interest of the publisher in ensuring the proper operation and security of the website (technical data)
  • Pre-contractual measures taken at your request prior to entering into a potential contract (quote form, Art. 6.1.b GDPR)
  • Legitimate interest of the publisher in measuring traffic to its website in order to improve it (audience measurement, Art. 6.1.f GDPR). As this measurement is strictly anonymous, cookieless and involves no transmission to any third party, it falls under the consent exemption provided for audience measurement by Article 82 of the French Data Protection Act (loi Informatique et Libertés), as interpreted by the guidelines of the CNIL, the French data protection authority. No consent banner is therefore required for this purpose.

5. Recipients of Data  

Data is accessible to:

  • Olivier Watte / Kimoun, data controller
  • OVH (2 rue Kellermann, 59100 Roubaix — servers in France), website hosting provider

Form data is transmitted to no third-party sub-processor: it is processed and stored by our own kimoun-forms service, on Kimoun infrastructure, and emails are sent through our internal mail server. Likewise, audience measurement data is processed by our own Umami instance, hosted on Kimoun infrastructure.

No data is sold, transferred or used for commercial prospecting by third parties.

6. Retention Periods  

The following retention periods apply:

  • Server logs (IP addresses, requests): 6 months
  • Qualified quote requests (emails, form): 3 years from the last contact (standard CNIL period for B2B prospecting), then automatically anonymised by the kimoun-forms service
  • Audience measurement data (anonymous statistics, on our Umami instance): 25 months maximum, the retention period recommended by the CNIL for audience measurement
  • Newsletter subscribers (if subscribed): until unsubscription or 12 months of inactivity

Beyond these periods, data is deleted or anonymised.

7. Cookies and Trackers  

kimoun.com only uses strictly necessary cookies for its operation. No consent banner is displayed, for a simple reason: there is nothing to accept.

No audience measurement cookies. Our statistics tool, Umami, works without placing a single cookie and without retaining any IP address. This is what allows us to measure all traffic while falling under the consent exemption provided by the CNIL (see section 4). No advertising cookies, no cross-site tracking, no commercial sharing.

Essential cookies (always active, no consent required): necessary for the proper functioning of the website and for navigation. No personal data is transmitted to third parties via these cookies. Duration: the browsing session.

No third-party cookies on forms. Our forms are handled by our own service (kimoun-forms) and place no third-party cookies. Spam protection relies on internal technical measures (anti-bot token, honeypot, rate limiting), with no third-party service and no tracking cookie.

8. Your Rights  

In accordance with GDPR and French data protection law, you have the following rights over your personal data:

  • Right of access: obtain confirmation that your data is or is not being processed, and receive a copy
  • Right to rectification: correct inaccurate or incomplete data
  • Right to erasure (“right to be forgotten”): request the deletion of your data
  • Right to restriction of processing
  • Right to data portability: receive your data in a structured, machine-readable format
  • Right to object to processing, in particular for commercial prospecting
  • Right to withdraw your consent at any time (newsletter)

To exercise these rights, write to contact@kimoun.com stating your request. You will receive a response within a maximum of one month.

If you believe your rights are not being respected, you may lodge a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés — the French data protection authority):

9. Updates  

This privacy policy may be amended at any time to reflect changes to the website, its features, or applicable regulations. The current version is the one published at this address.

Last updated: 4 September 2026

For any questions relating to your personal data, write to contact@kimoun.com or consult our legal notice.

On this page: