Privacy Policy

1. Data Controller

Toc Consulting
23 Rue de Berne, 75008 Paris, France
SIRET: 808 900 336 00021
Email: tarek@tocconsulting.fr

2. Data We Collect

We may collect the following information when you interact with our website:

• Contact information: name, email address, phone number when you reach out to us via email or book a consultation
• Usage data: pages visited, time spent on pages, referral source, browser type, device type, and IP address (collected via analytics)
• Booking data: scheduling information when you book a consultation through our third-party scheduling tool (Calendly)

3. How We Use Your Data

We use your personal data for the following purposes:

• To respond to your inquiries and provide consulting services
• To schedule and manage consultation appointments
• To improve our website and services based on usage analytics
• To send you relevant information about our services (only with your consent)

4. Legal Basis for Processing (GDPR)

We process your personal data based on:

• Consent: when you voluntarily provide your contact details or book a consultation
• Legitimate interest: to improve our services and understand how our website is used
• Contractual necessity: to perform consulting services you have engaged us for

5. Third-Party Services

We use the following third-party services that may process your data:

• Google Analytics: for website usage analytics (anonymized IP)
• Calendly: for appointment scheduling
• Google Maps: for displaying our location on the contact page

Each of these services has its own privacy policy governing data processing.

6. Data Retention

We retain your personal data only as long as necessary for the purposes outlined above, or as required by law. Contact information is retained for the duration of our business relationship and up to 3 years after the last interaction.

7. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access: request a copy of the personal data we hold about you
• Rectification: request correction of inaccurate data
• Erasure: request deletion of your personal data
• Restriction: request restriction of processing
• Portability: receive your data in a structured, machine-readable format
• Object: object to processing based on legitimate interest

To exercise any of these rights, contact us at tarek@tocconsulting.fr. We will respond within 30 days.

8. Cookies

Our website uses cookies for analytics purposes. These cookies help us understand how visitors interact with our website. You can control cookie preferences through your browser settings.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our website uses HTTPS encryption for all data transmission.

10. International Data Transfers

Some of our third-party service providers may process data outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs).

11. Contact & Complaints

For any questions about this privacy policy or your data, contact us at:
tarek@tocconsulting.fr

You also have the right to lodge a complaint with the French data protection authority:
CNIL (Commission Nationale de l'Informatique et des Libertes)
www.cnil.fr