1. Data Controller

akawan – 16 rue Arnaud Vidal 31000 – dpo@akawan.fr acts as the data controller for the data collected through the Bosl.ai anonymization SaaS service.

2. Data Collected

The service only collects the data necessary for the operation of the platform, including:

• Registration information (name, email address, account information)

• Service usage data

3. Purposes and Legal Bases for Processing

The data is processed for:

• Providing the anonymization service and ensuring its operation (contractual execution);

• Managing customer relations and technical support (contractual execution);

• Conducting anonymized statistical analyses for continuous improvement (legitimate interest);

• Complying with applicable legal and regulatory obligations.

4. Recipients of the Data

The data may only be transmitted to:

• Authorized personnel of akawan and its subcontractors (hosting, support), who are bound by confidentiality obligations;

• Any authority authorized by law in the event of a legal obligation.

5. Data Retention

Personal data is retained for the time necessary to achieve the purposes:

• Account information: until account deletion or one year after the last contact;

• Technical logs: a maximum of 12 months;

• Data to be anonymized: deleted immediately after processing, no raw data is stored.

6. Security Measures

akawan implements appropriate technical and organizational measures to ensure the security, integrity, and confidentiality of personal data:

• Encryption of exchanges;

• Strict access control;

• Logging and monitoring of actions.

7. Rights of Data Subjects

In accordance with the regulations, each user has the following rights:

• Right of access, rectification, erasure (right to be forgotten), limitation, opposition, and portability;

• Right to withdraw consent for processing based on consent;

• Right to lodge a complaint with the CNIL. To exercise these rights, contact dpo@akawan.fr

8. Sharing and Transfer of Data

No non-anonymized data is transmitted to third parties outside the cases provided above. If certain processing involves transfers outside the EU, appropriate safeguards are put in place in accordance with GDPR.

9. Cookies and Tracking

See our cookie policy

10. Changes to the Privacy Policy

This policy may be updated at any time. Any substantial changes will be notified by email or via the application. The latest version is always available on our website.