The purpose of this privacy policy is to inform users of the website: 

· How their personal data is collected. Personal data is defined as any information that can be used to identify a user. This may include: their first and last names, age, mailing address or email address, location, or IP address (this list is not exhaustive);

· Regarding the rights they have with respect to this data; 

· The entity responsible for processing the personal data that is collected and processed; 

· Regarding the recipients of this personal data; 

· About the site's cookie policy. 

This policy supplements the Legal Notice and the General Terms of Use, which users can view at the following address: 

Terms of use

In accordance with Article 5 of European Regulation 2016/679, personal data is:  

· Processed in a lawful, fair, and transparent manner with respect to the data subject;

· Collected for specific (see Article 3.1 herein), explicit, and legitimate purposes, and not further processed in a manner incompatible with those purposes ;

· Adequate, relevant, and limited to what is necessary in light of the purposes for which they are processed;

· Accurate and, where necessary, kept up to date. All reasonable measures must be taken to ensure that personal data that is inaccurate, in light of the purposes for which it is processed, is erased or rectified without delay; 

· Retained in a form that allows for the identification of the individuals concerned for a period no longer than is necessary for the purposes for which the data is processed ;

· Processed in a manner that ensures the appropriate security of the collected data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, through appropriate technical or organizational measures. 

Processing is lawful only if, and to the extent that, at least one of the following conditions is met:

· The data subject has consented to the processing of his or her personal data for one or more specific purposes;

· The processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of precontractual measures taken at the data subject’s request;

· The processing is necessary for compliance with a legal obligation to which the data controller is subject;

· The processing is necessary to protect the vital interests of the data subject or another natural person;

· The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller;

· The processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, unless the interests, fundamental rights, or freedoms of the data subject that require the protection of personal data take precedence, in particular where the data subject is a child.

Section 3.1: Data Collected 

The personal data collected in the course of our business activities are as follows: 

Contract management, customer portal management, service quality monitoring  

The collection and processing of this data is for the following purpose(s): 

 Contract management, customer portal management, service quality monitoring  

Article 3.2: Data Collection Methods

Lorsque vous utilisez notre site, certaines données peuvent être collectées de deux manières :

Données transmises volontairement par l’utilisateur
Lorsque l’utilisateur remplit le formulaire de contact, Kryptex peut collecter les données suivantes : nom, prénom, adresse e-mail, numéro de téléphone, nom de l’entreprise, ainsi que toute information communiquée librement dans le message.

Ces données sont collectées uniquement lorsque l’utilisateur les renseigne volontairement, afin de permettre à Kryptex de répondre à sa demande.

Données collectées automatiquement lors de la navigation
Lors de la consultation du site, certaines données techniques peuvent être collectées automatiquement, notamment : adresse IP, type de navigateur, pages consultées, date et heure de connexion, données relatives au terminal utilisé, ainsi que, le cas échéant, les cookies strictement nécessaires au fonctionnement du site.

Ces données sont utilisées pour assurer le bon fonctionnement, la sécurité et la maintenance du site.

They are stored by the data controller under reasonable security measures.

The company may retain certain personal data beyond the time limits stated above in order to comply with its legal or regulatory obligations.

Article 3.3: Data Hosting

The Kryptex.fr website is hosted by: 

[Company Name]  

Headquarters Address

Contact (email address and/or phone number)]

Section 4.1: The Data Controller 

Personal data is collected by SAS KRYPTEX, located at 20 rue du Vercors, 42100 SAINT-ETIENNE, with a capital of €1,000 and registration number 904 833 076. 

The controller of personal data can be contacted as follows: 

By mail to the following address: SAS KRYPTEX, 20 rue du Vercors, 42100 SAINT-ETIENNE

By email: [email protected]. 

If, after contacting us, you believe that your data protection rights have not been respected, you may file a complaint with the CNIL.

Any user whose personal data is being processed may exercise the following rights, pursuant to European Regulation 2016/679 and the French Data Protection Act (Law No. 78-17 of January 6, 1978):  

· The right of access, the right to rectification, and the right to erasure (set forth in Articles 15, 16, and 17 of the GDPR, respectively); 

· Right to data portability (Article 20 of the GDPR);

· The right to restriction of processing (Article 18 of the GDPR) and the right to object to data processing (Article 21 of the GDPR); 

· The right not to be subject to a decision based solely on automated processing; 

· The right to determine what happens to one's data after death; 

· Right to lodge a complaint with the competent supervisory authority (Article 77 of the GDPR). 

To exercise your rights, please send your letter to SAS KRYPTEX, 20 rue du Vercors, 42100 SAINT-ETIENNE, or by email to [email protected]

In order for the data controller to process the user’s request, the user may be required to provide certain information, such as: their first and last names, email address, and account number, personal account number, or subscriber number. 

Visit cnil.fr for more information about your rights.

The publisher of the Kryptex.fr website reserves the right to modify this Policy at any time to ensure that it complies with applicable law for the benefit of the website’s users. 

Any changes will not affect purchases made previously on the site, which remain subject to the Policy in effect at the time of purchase and as accepted by the user upon confirmation of the purchase. 

Users are encouraged to review this Policy each time they use our services, without the need for formal notification. 

This policy, issued on August 5, 2026, was updated on July 30, 2026.