Privacy
We count visits with Papkot analytics and Yandex Metrika. Visitors in the EU, the EEA, the UK and Switzerland choose first. No advertising, no chat.
This notice covers papkot.com only. pa.papkot.com has its own privacy notice.
Visit: server logs. Email: Papkot mailbox.
The short version
We count visits and see how pages are used, with two tools: Papkot analytics, which keeps page views in our own database, and Yandex Metrika, which sets cookies and records clicks, scrolls and sessions. If you visit from the EU, the EEA, the UK or Switzerland, nothing is counted until you accept in the consent bar. Visitors from other countries are counted without a consent bar. Do Not Track and Global Privacy Control turn both off everywhere. To change your choice, use Privacy choices at the foot of every page. The web server also keeps technical logs of each visit. When you send a form or an email, we use your details only to answer you. We do not sell your data. To use a right, write to privacy@papkot.com.
What this site does not use
This site uses no advertising tools and no chat. It sells no data. The only script it loads from another host is Yandex Metrika, and only after consent where consent is needed. If we add anything else later, we change this page first.
What we collect, why, and on what legal basis
Papkot analytics: pages, time, referring page, browser, country, region and city, a random id in your browser, a salted IP hash, a company guessed from your network
We never store the IP address itself. Purpose: Know which pages are read and which companies show interest. Legal basis: Consent in the EU, the EEA, the UK and Switzerland; legitimate interest elsewhere [to confirm before launch]. Who: Papkot H SAS, in its database at Supabase. The same tool runs on pa.papkot.com.
Retention: 12 months [to confirm before launch]
Yandex Metrika: cookies (such as _ym_uid), pages, clicks, scrolls, a session recording (Webvisor), browser, device and approximate location
Purpose: See how pages are used and where they fail. Legal basis: Consent in the EU, the EEA, the UK and Switzerland; legitimate interest elsewhere [to confirm before launch]. Who: Papkot H SAS, with Yandex as the provider. Yandex processes this data outside the EU (see International transfers).
Retention: as set by Yandex Metrika [to confirm before launch]
Technical logs of each visit (IP address, page, time, browser type), kept on the web server
Purpose: Run and protect the site. Legal basis: Legitimate interest (the PA site gives this basis to its technical data rows). Who: Papkot H SAS, through its web server.
Retention: [to confirm before launch]
Your email address, name and message, when you write to us by email or to privacy@papkot.com
Purpose: Answer your question. Legal basis: Consent and steps before a contract, as on pa.papkot.com [to confirm before launch]. Who: Papkot H SAS and its mailbox provider.
Retention: While there is a business relationship. For a message with no follow-up: [to confirm before launch]
Contact form entries: your topic, name, work email, company, role and message
Purpose: Answer your question. Legal basis: Same as an email. Who: Papkot H SAS. The form sends your message to the Papkot team in Slack, the team messaging tool that Papkot uses. The site itself stores nothing.
Retention: 12 months [to confirm before launch]
Applicant data: your details, message and CV, when you apply through the careers form or by email
Purpose: Read and answer your application. Legal basis: Steps before a contract [to confirm before launch]. Who: Papkot H SAS.
Retention: [to confirm before launch]
International transfers
Some of our service providers process data outside the EU and the UK. Yandex Metrika is one of them [safeguard to confirm before launch]. Where that happens, we rely on an approved transfer mechanism, such as the standard contractual clauses. We hold a written processing agreement with each provider [to confirm before launch]. On request, we give you the current list of providers and the safeguard for each one.
How long we keep data
The web server keeps technical logs for a period [to confirm before launch]. We keep emails while there is a business relationship. We keep contact form messages for 12 months [to confirm before launch]. We keep applications for a period [to confirm before launch].
Your rights
You can ask us what we hold about you. You can ask us to correct it, to erase it or to restrict its use. You can ask for a copy in a portable format. You can object to processing that rests on legitimate interest. To use a right, write to privacy@papkot.com. We aim to answer within 30 days. You can also complain to a supervisory authority. Papkot H SAS is based in France, so our authority is the CNIL (cnil.fr). You can also complain to the authority in the EU or EEA country where you live or work.
Applications
If you apply through the careers form or by email, we read your message and CV to answer your application. Only people at Papkot who need it read them. We keep them for a period [to confirm before launch]. To ask us to delete them earlier, write to privacy@papkot.com. We do not use your CV for anything else.
Who is responsible, and security
Papkot H SAS is the data controller. Registered office: 52 Route de Bischwiller, 67300 Schiltigheim, France. SIREN 952 740 355. Privacy contact: privacy@papkot.com. We use encryption in transit (HTTPS) and access control. No system is perfectly secure.