AI CRAFTERS FRANCEReference document: AI CRAFTERS FRANCE Personal Data Protection Charter

Personal Data Protection Charter

This charter explains how AI CRAFTERS FRANCE handles and protects personal data, including data processed through its digital products such as Hekayatna.

Overview

AI CRAFTERS FRANCE recognizes the importance of privacy for its customers, partners, and product users, and is committed to protecting personal data in accordance with applicable laws, especially GDPR 2016/679.

The content of this page has been adapted to reflect Hekayatna as a digital product operated by the company while preserving the core principles set out in the corporate personal data protection charter.

This charter explains the main processing principles, the categories of data that may be collected, the purposes of use, the rights of data subjects, and the safeguards put in place for protection and security.

1. Data Processing Principles

AI CRAFTERS FRANCE is committed to ensuring that all personal data processing is lawful, fair, transparent, and carried out for specific, legitimate, and explicit purposes.

  • Collect only data that is necessary and proportionate to the stated purpose.
  • Apply appropriate organizational, technical, and security safeguards.
  • Clearly identify when the company acts as controller or processor depending on the service and contractual context.
2. Categories of Data We May Collect

Depending on the service or product being used, the company and products such as Hekayatna may collect data needed to operate the service, communicate effectively, and fulfill user requests.

  • Identity and contact data such as name, email address, phone number, and address where needed.
  • Account and support data such as messages, requests, and service interaction history.
  • Transaction or order data such as order status, technical references, and non-sensitive billing information.
  • Usage, browsing, cookie, and technical performance data.
  • Any information voluntarily provided by the user when contacting us or customizing a service.
3. Sources of Data

We may obtain data directly from users or customers, from parties involved in delivering the service, or from technical tools required to operate and improve our platforms.

  • Data submitted directly through forms, account creation, or service requests.
  • Information provided through support or professional communication.
  • Technical data generated through use of the website or platform.
4. Purposes of Collection and Use

Data is used only within the limits necessary to provide and improve services and to manage the relationship with customers and users.

  • Operate digital products and services and fulfill orders or subscriptions.
  • Manage accounts, contact users, and respond to support requests.
  • Improve quality and performance and analyze usage for operational and statistical purposes.
  • Send commercial or informational communications where legally permitted, with a clear opt-out or unsubscribe option.
  • Comply with legal and regulatory obligations and protect systems against misuse.
5. Recipients of Personal Data

Data may be shared on a need-to-know basis with parties supporting service delivery or legal compliance, and not for unrelated purposes.

  • Internal teams responsible for operating services and supporting customers.
  • Technical partners or service providers supplying hosting, operational tools, or supporting platforms.
  • Legal or regulatory authorities where a lawful obligation or supervisory requirement applies.
6. Retention Periods

Data is retained for as long as necessary to manage the relationship or provide the service, then archived or deleted in line with legal retention periods and the relevant purpose.

  • Operational and service data is kept for as long as practical and legally necessary.
  • Commercial communication data may be retained for a limited period after the relationship ends unless the person requests otherwise.
  • Special or sensitive data is retained only for the shortest necessary period and under stricter controls.
7. Security Measures

AI CRAFTERS FRANCE implements strict measures to protect personal data against unauthorized access, loss, disclosure, or misuse.

  • Secure digital platforms and the operational environments used to deliver services.
  • Raise staff awareness of confidentiality and data protection obligations.
  • Assign a responsible contact or function for data protection where appropriate.
8. Data Subject Rights

Subject to applicable law, individuals may exercise several rights in relation to their personal data.

  • Request access to personal data.
  • Request correction or updating of inaccurate data.
  • Request deletion or restriction of processing where applicable.
  • Object to certain forms of processing.
  • Request portability where legally and technically possible.
9. Cookies

The company uses cookies to support navigation, improve performance, and measure usage. Additional cookies may be used for customization or analytics depending on the service configuration.

  • Technical cookies required for proper site operation.
  • Measurement and analytics cookies used to understand traffic and improve performance.
  • Additional cookies related to personalization or marketing communications where applicable.
  • Users can manage their preferences through browser settings or available consent tools.
10. Updates

This charter is updated regularly to maintain alignment with legal, technical, and organizational developments relevant to the company's activities and products.

Privacy Contact

For any request related to access, correction, deletion, or another privacy matter, please contact AI CRAFTERS FRANCE through the channels below.

Data Protection Email

dpo@aicrafters.com

General Email

info@aicrafters.com

Address

AI CRAFTERS FRANCE, 7 Rue du Val Content, 92260 Fontenay-aux-Roses, France

SIRET Number

92985078200012