Personal data (PD)
Kollirama is committed to ensuring that the collection and processing of your data, carried out from this site, complies with the General Data Protection Regulation (GDPR).
Collected data overview
We may collect the following data: last name, first name, email address, phone number, company, address, project, message, language, browsing data and campaign source information, depending on the form used.
LinkedIn publications displayed on the home page are retrieved server-side and presented as external links. No public LinkedIn tracker was identified during the audit.
Data controller
- The data controller is Kollirama Sud, located at 19 RN 113, 30620 Bernis.
- For questions about personal data, exercising rights and complaints: contact@kollirama.fr. The personal data referent is the Director.
- Form recipients are contact@kollirama.fr and kamel@kollirama.fr.
Use of collected data
Process your contact or quote requests
Improve site navigation
Send you the newsletter if you have agreed to it
Contact data is not used for unsolicited commercial follow-ups.
Data protection and retention period
- Kollirama implements all appropriate technical and organizational actions necessary to ensure the security of your data.
- Contact, quote, callback and catalog requests are kept for one year after the last contact. Newsletter subscriptions are kept for one year in Brevo. Technical logs are subject to a separate retention rule.
Hosting and subprocessors
- The site, its database and its storage use Replit. The host is Replit, Inc., 1001 E Hillsdale Blvd, Suite 400, Foster City, CA 94404, United States. Publication and resources are announced in Europe, within the European Union.
- The declared public third-party services are Google Analytics 4, Google Ads, Meta Pixel, YouTube, Google Maps, Brevo and LinkedIn.
- Transfers outside the European Union are governed as follows. Replit (hosting, database and storage): European Commission Standard Contractual Clauses, Implementing Decision 2021/914, Controller-to-Processor module (Replit DPA updated 1 April 2026). Brevo (newsletter): provider established in the European Union, no transfer outside the EU initiated by Kollirama. Google (Analytics 4, Ads): EU–US Data Privacy Framework (Commission adequacy decision of 10 July 2023) and Standard Contractual Clauses available. Meta (Pixel): EU–US Data Privacy Framework (Commission adequacy decision of 10 July 2023) and Standard Contractual Clauses.
Your rights regarding personal data collection
In accordance with the French Data Protection Act ("informatique et libertés"), you have a right to access, rectify, delete and object to data concerning you. You can exercise these rights at contact@kollirama.fr.
You may also lodge a complaint with the competent supervisory authority.
Requests for modification or deletion of your personal data
- You can request the modification or deletion of your data at any time by contacting us via the contact form or by email.
Cookie usage policy
- Our site uses cookies to improve the user experience and perform visitor statistics.
- You can configure your browser to refuse cookies.
This site uses cookies and trackers organized into several categories. A cookie is a small text file stored in your browser when you visit a website.
| Category | Purpose | Provider | Retention | Transfer outside EU |
|---|---|---|---|---|
| Strictly necessary | These cookies are essential for the website to function. They cannot be disabled. | Kollirama (internal) | 13 months / Session | Replit, Inc. (hosting, database, storage): EU standard contractual clauses, Commission decision 2021/914, controller–processor module. Replit DPA. |
| Performance | These cookies help us measure site audience via Google Analytics (GA4). No personally identifiable data is collected. Google Analytics is not yet active in production (identifier not configured). | Google Analytics (GA4) — not yet active in production | Not applicable (not yet active in production) | Not applicable (Google Analytics not yet active in production). Google Analytics safeguards. |
| Targeting | These trackers measure our advertising campaigns through Google Ads and LinkedIn Insight Tag, after your consent. The Facebook Meta Pixel is declared but not yet active in production (identifier not configured). | Google Ads, LinkedIn Insight Tag — Meta Pixel: not yet active in production | Google Ads: 90 days; LinkedIn Insight Tag: 30 days (li_fat_id) to 2 years (bcookie) — Meta Pixel: not yet active in production | Google Ads: DPF and SCCs. LinkedIn: DPF. Meta Pixel: not yet active in production (DPF and European data transfer addendum of 30 July 2024 applicable upon activation). |
| Functionality | No embedded YouTube or Google Maps content was identified on public pages during the audit. If embedded content is added, it must be blocked until you consent. | No embedded content identified during the audit | Not applicable while no content is embedded | Not applicable (no embedded content identified during the audit). |
Services active in production: Google Ads (marketing consent) and LinkedIn Insight Tag (marketing consent). Google Analytics (GA4) and Meta Pixel are not yet active (production environment variables absent). LinkedIn is also used for links and server-retrieved publications. Brevo is called by the newsletter API, with no public script identified.
To learn more about our providers' privacy policies:
You can change your preferences at any time via the "Cookie preferences" link at the bottom of the page.