Kuzzle
Privacy Policy
1. Introduction
Kuzzle, a simplified joint-stock company (SAS) registered with the Montpellier Trade and Companies Register under number 823 509 070, whose registered office is located at 219 rue Le Titien, 34000 Montpellier, France, publishes this website and acts as the data controller for all personal data collected via the website kuzzle.io.
Kuzzle attaches particular importance to the protection of personal data and undertakes to comply with the General Data Protection Regulation (GDPR) as well as with applicable French legislation.
The purpose of this Privacy Policy is to inform you about the processing of personal data carried out by KUZZLE, our commitment to data protection, as well as your rights and how to exercise them.
It applies to:
– the processing of data carried out when visiting the website
– as well as the processing of data that we may carry out in the course of our operational activities.
It concerns:
– Visitors to our websites and communication channels
– Our clients and users of our solutions
– Our suppliers
– Job applicants
2. Methods of Data Collection and Processing
2.1 When visiting our websites and social media pages
Log files
Our website automatically collects and stores information in “log files” transmitted automatically by users’ browsers. This information mainly includes technical data concerning the browser and its version, the operating system used, the referrer URL, the hostname of the accessing device, the time of the server request, and IP addresses. This data is not merged with other data sources.
Cookies
Our website uses cookies. Cookies help make websites more user-friendly, efficient, and secure. They also enable audience measurement and targeted advertising. For more information about cookies, please consult our Cookie Policy.
Forms
If you complete a form on the KUZZLE website, the information transmitted via this form — including contact data provided to process a request or subscribe to our newsletter — is stored in KUZZLE’s IT systems.
Social media pages
If you interact with one of our social media pages, information related to your account — including contact details and information relating to interactions — will be made available to us by the owner of the social media platform.
2.2 When data is part of the relationship with our clients and suppliers
We process personal data necessary for the performance of contracts with our clients and suppliers or for the implementation of pre-contractual measures. Data transmitted by our clients/suppliers is processed and recorded in KUZZLE’s IT systems.
2.3 When data is part of our recruitment campaigns
We process applicants’ personal data necessary for recruitment operations. Data transmitted by candidates is processed and recorded in KUZZLE’s IT systems.
2.4 When you use our solutions
If you use a “SaaS” solution, KUZZLE acts as a data processor to host and manage the databases, including information relating to user identification and associated access rights.
If you use an “On-premise” solution and KUZZLE acts as a data processor to manage the databases, this includes information relating to user identification and associated access rights.
3. Purposes, Legal Bases and Data Retention Periods
Communication operations
– Website security (logs)
Legal basis: Legitimate interest
Retention period: Maximum 6 months
– Service-related cookies
Legal basis: Legitimate interest
Retention period: Varies depending on the type of cookie, with a maximum of 13 months (for more information, see our Cookie Policy).
– Other cookies (audience measurement, advertising)
Legal basis: Consent
– Newsletter subscription
Legal basis: Consent
Retention period: Until unsubscription
Marketing operations
– Prospecting operations targeting professionals
Legal basis: Legitimate interest
Retention period: 3 years from the last contact initiated by the prospect, unless an objection is raised
Client management
– Client management (contracts, orders, invoices, payments, etc.)
Legal basis: Performance of a contract
Retention period: 3 years from the end of the contract
– Client accounting
Legal basis: Legal obligation
Retention period: 10 years
Supplier management
– Administrative operations relating to supplier management (contracts, orders, invoices, payments, etc.)
Legal basis: Performance of a contract
Retention period: Duration of the business relationship plus the applicable commercial/civil statute of limitations
– Supplier accounting
Legal basis: Legal obligation
Retention period: 10 years
Recruitment operations
– Processing of applications, CV database
Legal basis: Legitimate interest and pre-contractual measures
Retention period: 2 years
Provision of KUZZLE software solutions
– Hosting and/or management of KUZZLE software solutions
Legal basis: Acting as a data processor based on contract performance
Retention period: In accordance with the terms of the data processing agreement
4. Types of Data Processed
Personal information that may be collected as part of the processing activities listed above includes:
– Website visitors (security management): Browser and version, operating system used, referrer URL, hostname of the accessing device, time of server request, IP addresses.
– Website visitors (via cookies): Depending on your cookie preferences, we may collect various information relating to your device, browsing activity, and publicly available information from your social media profiles. For more information, please consult our Cookie Policy.
– Prospects (notably via forms): First name, last name, professional email address, company name, job title, phone number, free-text message, information relating to prospecting activities, and preferences (newsletter, event participation, etc.).
– Clients (commercial relationship management): Data necessary to identify clients and data required to monitor the customer relationship (products viewed, quantity and price of products ordered, delivery address, payment information, your preferences regarding marketing operations where applicable, and any other information necessary for managing the commercial relationship).
– Suppliers (contractual relationship management): Data necessary to identify suppliers and data required to monitor the contractual relationship (products/services ordered, quantity, payment information, delivery information, satisfaction information, etc.).
– Candidates (recruitment operations): Contact details (such as name, address, phone number), information provided in the CV (professional background, qualifications), information collected during interviews relating to the candidate’s suitability for the position, and, where applicable, results of tests carried out during the recruitment process.
Users of our solutions: Information relating to user identification, access rights, and connection logs (where KUZZLE acts as a data processor to host and/or manage databases).
5. Data Recipients
Internal teams
Your personal data may be processed for the purposes and under the conditions described above by KUZZLE employees (marketing teams, sales teams, support/customer relations, management) strictly within the limits of their operational needs. All our employees are subject to a strict confidentiality obligation.
Third parties
In certain specific situations, collected personal data may be transmitted to third parties under the following conditions:
– To service providers (and their employees) (e.g., hosting providers, service providers). As data processors with access to data, these third parties are subject to appropriate data protection obligations and process personal data solely for the performance of the services entrusted to them, in accordance with Article 28 of the GDPR. KUZZLE ensures that third parties have access only to personal data necessary for the performance of their specific tasks;
– Where such transmission is required by law, for example to comply with any legal obligation (including, without limitation, tax reporting requirements and disclosures to judicial authorities and governmental agencies, or pursuant to a court order), or to establish, exercise, or defend legal rights before a court;
– In the event of the sale of our company or one of its assets, which may require the disclosure of personal data to the potential buyer to the extent necessary for due diligence purposes; and
If all or part of our company is acquired by a third party, in which case personal data held by KUZZLE would necessarily be disclosed to the acquiring third party.
Transfers outside the European Union
– Some marketing tools we use rely on international companies operating in several countries (e.g., HubSpot, Google, LinkedIn), which may transfer data outside the EU.
– When personal data is transferred to a country outside the European Union, KUZZLE ensures that it is protected and transferred in accordance with legal and regulatory requirements. For example, data may be transferred outside the European Union in one of the following ways:
– The country to which the personal data is transferred has been approved by the European Commission as providing an adequate level of protection;
– The recipient has signed a contract based on the “Standard Contractual Clauses” approved by the European Commission, obliging the recipient to protect the transferred personal data;
– Where the recipient is located in the United States, it may be a certified member of the EU–US data protection framework;
– In other circumstances where the transfer of personal data outside Europe is authorized by law.
6. Data Security
KUZZLE and its data processors implement appropriate technical and organizational measures to prevent data alteration and loss, as well as unauthorized processing or access, in accordance with the legal obligations applicable to data controllers.
7. Your rights
In accordance with applicable regulations, any individual whose personal data is processed has the following rights:
– The right to receive information regarding the data processing carried out by KUZZLE in a concise, transparent, intelligible, and easily accessible manner;
– The right to withdraw consent at any time where processing is based on consent;
– The right to access personal data concerning you;
– The right to request that KUZZLE rectify personal data if it is inaccurate or incomplete;
– The right to object to, erase, or request restriction of processing in certain circumstances. Please note that these rights do not apply systematically, as KUZZLE may be legally required to retain certain data or may be authorized to refuse such requests in specific circumstances.
You may exercise your rights (access, rectification and, where applicable, erasure, objection, restriction, and portability) and define instructions regarding the handling of your personal data after your death by using automated features where available (e.g., unsubscribing from a newsletter), or by contacting our Data Protection Officer (DPO).
The KUZZLE Data Protection Officer may be contacted by email at:
dpo@kuzzle.io
And/or by post at:
KUZZLE SAS
Attn: Data Protection Officer (DPO)
219 rue Le Titien
34000 Montpellier
France
Proof of identity may be requested in the event of reasonable doubt, and a response will be provided within a maximum of one month. If your request concerns the complete deletion of your data, we will inform you of any potential consequences (e.g., loss of access to certain content).
If, after contacting our DPO, you believe that your rights have not been respected, you also have the right to lodge a complaint with the French Data Protection Authority (CNIL), in particular via its website: www.cnil.fr.
8. Minors
The Kuzzle website is intended exclusively for a professional audience. We do not knowingly collect data relating to minors. In the event of accidental collection, the data will be deleted immediately.
9. Cookies and Trackers (Reminder)
To understand how cookies are used, their purposes, and how to manage your preferences, please consult our:
👉 Cookie Policy: https://kuzzle.io/cookies-policy/
10. Updates
This Privacy Policy may be modified at any time.
Last updated: February 2026.