Privacy policy

The data controller is KAPPONTOS (SARL), 51 rue Polonceau, 75018 Paris, France.

Contact: contact@kappontos.fr

When you use the contact form, we collect your name, your email address, your company name (optional) and the content of your message.

No data is collected without your knowledge and the site uses no advertising trackers.

As part of its business, KAPPONTOS also processes, through the private area of the site (reserved to the operator), professional data relating to its clients and their representatives: name, business email address and role of the contact persons designated by the client. This data is used exclusively for the administrative and contractual management of assignments.

When a contractual document is signed online, the following is recorded for evidence and traceability purposes: the email address of each signatory, the date and time of signature and a technical timestamp. The signed document is then sent by email to both signatories.

This processing is based on the performance of the contract concluded with the client and on the legitimate interest of KAPPONTOS in administering its assignments.

KAPPONTOS publishes Pharos, an offshore construction tracking platform available at pharos.kappontos.fr, open by invitation to the stakeholders of the projects it covers. For each account holder, the following is processed: first name, last name, business email address, password (stored in encrypted form), per-project access roles and, where applicable, a usage counter for AI-assisted features. Actions performed on the platform are logged (timestamp and author's email) for project-data traceability purposes.

The « Request access » form on the sign-in page collects: first name, last name, business email address, company, project concerned and an optional message. This information is used solely to handle the access request; the IP address is used transiently to limit abuse (anti-spam) and is never stored.

Weekly project reports may contain site photographs provided by project stakeholders; they are kept with the reports of the project concerned.

For platform operating data (accounts, technical logs, access requests), KAPPONTOS acts as data controller. For project content entered by project stakeholders (meeting minutes and attendance registers, reports, photographs, feedback), KAPPONTOS acts as processor on behalf of the client commissioning the project, which is the data controller for that content; requests to exercise rights over such content are forwarded to the client concerned.

Meeting minutes may mention the designated representatives of the participating companies (name, company, attendance).

Pharos accounts are deleted when access is no longer required (end of assignment or at the client's request). This processing is based on the performance of the contract concluded with the client and on the legitimate interest of KAPPONTOS in operating the platform.

This data is used solely to respond to your request and to manage any subsequent business relationship.

Processing is based on your consent (voluntary submission of the form) and on the legitimate interest of KAPPONTOS in responding to enquiries addressed to it.

Your data is processed by Kappontos and hosted through technical providers acting as processors: Supabase (database hosting), Brevo (sending notification, invitation and signature emails), Vercel (hosting of the website and of the Pharos platform), Anthropic (data-entry assistance and progress-report analysis features, with no retention of data for training purposes), Sentry (monitoring of the platform's technical errors) and OVH (hosting of the mailbox receiving backup exports, France). The artificial-intelligence assistance features are enabled only where this has been expressly agreed in advance with the client.

Data is hosted primarily in the European Union: database and authentication in Frankfurt (Germany), application execution in Frankfurt, emails through a French provider hosted in the EU, backup exports in France. Some providers (Vercel, Sentry and, where the AI-assisted features are enabled, Anthropic) may involve processing in the United States; these transfers are governed by the mechanisms provided for in Articles 45 and 46 of the GDPR (adequacy decision and/or standard contractual clauses incorporated into the agreements concluded with these providers).

Your data is never sold or transferred to third parties for commercial purposes.

Messages received through the form are kept for as long as necessary to handle your request, then archived or deleted within a maximum of three years from the last contact.

Contract-management and online-signature data is kept for the duration of the contractual relationship, then for the statutory limitation periods applicable to contractual and accounting documents (up to ten years).

Pharos access requests are kept while they are being handled, then deleted at the latest one year after processing; Pharos account data is kept for the duration of the project concerned, and activity logs are automatically purged after a rolling twenty-four months.

Technical backups (snapshots) are kept for a rolling 7 days; daily backup exports are kept for a rolling 12 months.

In accordance with the General Data Protection Regulation (GDPR), you have the right to access, rectify, erase, restrict and object to the processing of your data, as well as the right to data portability. To exercise these rights, write to contact@kappontos.fr.

You may also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).

The public website does not use tracking or advertising cookies. A single technical cookie strictly necessary for authentication is set when you log in to the private area or to Pharos; it is shared between kappontos.fr and its subdomains (pharos.kappontos.fr) to maintain your session.