🔒 GDPR

Personal data protection

Your data and that of your employees remains yours. Klytic, published by Dedicace Software, applies European Regulation No. 2016/679 (GDPR) and the French Data Protection Act (Informatique et Libertés), and helps you comply with them in your own operations.

Two roles, two commitments

Depending on the data concerned, Dedicace Software acts as a processor or as a controller.

🗂️

Data you entrust to our services

Emails, files, contacts, CRM records, calls and logs: for this data, we act as a processor within the meaning of Article 28 of the GDPR. We process it only on your instructions and to deliver the service. A Data Processing Agreement (DPA) is signed with each customer.

🤝

Data from our business relationship

Contact details of your contact persons, contracts, billing and exchanges with support: we act as the controller for this data. This data is used only to perform the contract and manage our relationship with you.

Our commitments

🚫

No disclosure without consent

No data is disclosed to a third party without your prior consent. No advertising, no profiling, no resale.

📍

Hosting in the chosen zone

Your data remains in the zone you have chosen or on your premises, with no transfer outside that zone without your written consent. French operator, not subject to the CLOUD Act.

🔐

Security

Encryption of communications (TLS 1.3) and stored data (AES-256). Technical access is restricted, named and logged.

💾

Backups

Encrypted daily backups, retained for 30 days, to restore your data in the event of an incident.

📝

Controlled interventions

Each intervention is covered by a work order specifying the actions carried out, the data concerned and the persons responsible. You can access this information upon request.

🚪

Data reversibility

At the end of the contract, your data remains available for 30 days in standard formats, after which it is deleted from our infrastructure.

Retention periods

Data hosted in our services

For the duration of the contract, then 30 days to allow you to retrieve it. Backups are retained on a rolling 30-day basis.

Emails filtered by Klytic MTA

Not retained under normal operation. A message is kept, encrypted and temporarily, only if the recipient server is unavailable or if it is quarantined.

Commercial data

Used only within the contractual framework. Data unused for three years is deleted during an annual review, subject to legal obligations (accounting records: 10 years).

Support call recordings

Stored internally and destroyed no later than 30 days after the call. See our Service quality page.

Your rights

In accordance with the French Data Protection Act (Informatique et Libertés) of January 6, 1978 and the GDPR, applicable since May 25, 2018, you have the following rights regarding your personal data.

✓ Access

✓ Rectification

✓ Erasure

✓ Restriction of processing

✓ Objection

✓ Portability

To exercise them, write to us via the contact form or at [email protected]. We will respond within one month. For your users’ data hosted in our services, we handle the request with you, as the controller.

You may also lodge a complaint with the CNIL (cnil.fr). For the Mauritius zone, the Data Protection Act 2017 applies and the competent authority is the Data Protection Office.

Who is responsible?

Dedicace Software, a simplified joint-stock company (SAS) with share capital of €10,000, 4 route de la Côte à Bournet, 16440 Mouthiers-sur-Boëme. SIRET 531 466 167 00032. Phone: +33 9 72 28 48 00. See also our legal notice and the Hosting & Sovereignty page.

Need our DPA?

We will provide you with the Data Processing Agreement and respond to your compliance questionnaires.

Contact us