Kimoun Kimoun Kimoun Kimoun

Privacy Policy — Kimoun

How kimoun.com handles personal data: quote form, cookieless audience measurement, retention periods, GDPR rights.

🇫🇷 Lire en français : Politique de confidentialité

1. Data Controller  

The data controller for personal data collected via kimoun.com is:

2. Data Collected  

kimoun.com processes three categories of data.

Technical browsing data, collected automatically to enable site operation, administration and security: IP address, date and time of request, resource requested, standard technical information transmitted by your browser (user-agent).

Data submitted via the quote request form (page /en/get-a-quote/): first name, email address, phone number (optional), primary type of need, free-text message, organisation or activity, and explicit consent to be contacted. This data is collected and stored via Brevo (a marketing platform based in France).

Audience measurement data: anonymous visit counts, most-visited pages and traffic sources. Measurement is carried out by Umami, an open-source solution hosted on our own infrastructure (mesure.kimoun.com): it places no cookies, does not retain your IP address and associates no personally identifiable data with these measurements. No data is transmitted to any third party, no advertising cookies, no cross-site tracking, no commercial sharing.

3. Purposes of Processing  

Data is processed for the following purposes:

  • Operation and security of the website (technical data)
  • Processing your quote requests and related commercial communication (form)
  • Anonymous audience measurement to understand how the site is used and improve it

No data is used for advertising, commercial profiling, or resale to third parties.

Each purpose relies on a distinct legal basis under GDPR:

  • Legitimate interest of the publisher in ensuring the proper operation and security of the website (technical data)
  • Pre-contractual measures taken at your request prior to entering into a potential contract (quote form, Art. 6.1.b GDPR)
  • Legitimate interest of the publisher in measuring traffic to its website in order to improve it (audience measurement, Art. 6.1.f GDPR). As this measurement is strictly anonymous, cookieless and involves no transmission to any third party, it falls under the consent exemption provided for audience measurement by Article 82 of the French Data Protection Act (loi Informatique et Libertés), as interpreted by the guidelines of the CNIL, the French data protection authority. No consent banner is therefore required for this purpose.

5. Recipients of Data  

Data is accessible to:

  • Olivier Watte / Kimoun, data controller
  • Brevo (Sendinblue SAS, 7 rue de Madrid, 75008 Paris — servers in France/EU), sub-processor for the quote form and associated emails
  • OVH (2 rue Kellermann, 59100 Roubaix — servers in France), website hosting provider
  • Google LLC (Mountain View, USA), solely in connection with the reCAPTCHA service that protects our forms against automated submissions

Audience measurement data is transmitted to no third party: it is processed by our own Umami instance, hosted on Kimoun infrastructure.

No data is sold, transferred or used for commercial prospecting by third parties.

6. Retention Periods  

The following retention periods apply:

  • Server logs (IP addresses, requests): 6 months
  • Qualified quote requests (emails, form): 3 years from the last contact (standard CNIL period for B2B prospecting)
  • Audience measurement data (anonymous statistics, on our Umami instance): 25 months maximum, the retention period recommended by the CNIL for audience measurement
  • Newsletter subscribers (Brevo, if subscribed): until unsubscription or 12 months of inactivity

Beyond these periods, data is deleted or anonymised.

7. Cookies and Trackers  

kimoun.com only uses strictly necessary cookies for its operation. No consent banner is displayed, for a simple reason: there is nothing to accept.

No audience measurement cookies. Our statistics tool, Umami, works without placing a single cookie and without retaining any IP address. This is what allows us to measure all traffic while falling under the consent exemption provided by the CNIL (see section 4). No advertising cookies, no cross-site tracking, no commercial sharing.

Essential cookies (always active, no consent required): necessary for the proper functioning of the website, for navigation and for form submission. No personal data is transmitted to third parties via these cookies. Duration: the browsing session.

The quote form (page /en/get-a-quote/) also uses Google reCAPTCHA v3 (anti-spam) and Brevo (form submission), which may place their own strictly necessary technical cookies — these fall under the “Essential cookies” category above and do not require prior consent.

8. Your Rights  

In accordance with GDPR and French data protection law, you have the following rights over your personal data:

  • Right of access: obtain confirmation that your data is or is not being processed, and receive a copy
  • Right to rectification: correct inaccurate or incomplete data
  • Right to erasure (“right to be forgotten”): request the deletion of your data
  • Right to restriction of processing
  • Right to data portability: receive your data in a structured, machine-readable format
  • Right to object to processing, in particular for commercial prospecting
  • Right to withdraw your consent at any time (newsletter)

To exercise these rights, write to contact@kimoun.com stating your request. You will receive a response within a maximum of one month.

If you believe your rights are not being respected, you may lodge a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés — the French data protection authority):

9. Transfers Outside the European Union  

The majority of data processed by the website remains hosted in France (OVH, Brevo).

Audience measurement data does not leave our infrastructure: it is processed by our own Umami instance, hosted in France.

Some technical data may however transit to the United States in connection with the Google reCAPTCHA service, which protects our forms against automated submissions. These transfers are governed by:

  • The Standard Contractual Clauses of the European Commission
  • Google LLC’s adherence to the EU-US Data Privacy Framework (DPF)

10. Updates  

This privacy policy may be amended at any time to reflect changes to the website, its features, or applicable regulations. The current version is the one published at this address.

Last updated: 24 August 2026

For any questions relating to your personal data, write to contact@kimoun.com or consult our legal notice.

On this page: