SNZ Sona Consulting France SAS ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share information about you when you visit our website or engage with our services, in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and French data protection law.
Table of Contents
1. Data Controller
The data controller responsible for your personal data is:
2. Data We Collect
We collect personal data in the following circumstances:
2.1 Contact Form Enquiries
When you submit a contact or enquiry form on our website, we collect:
- Full name
- Business email address
- Company or organisation name
- Your message or enquiry
- Date and time of submission
2.2 Job Applications
When you apply for a position through our Careers page, we collect:
- Full name and contact details (email, phone)
- CV / résumé and cover letter
- Professional history and qualifications
- Any additional information you voluntarily provide
2.3 Browsing & Technical Data
When you visit our website, we may automatically collect:
- IP address (anonymised where required)
- Browser type and version
- Operating system
- Pages visited, time spent, referral source
- Device type
This data is collected via cookies and analytics tools — see Section 6 for details.
3. Legal Basis for Processing
We only process your personal data where we have a valid legal basis under Article 6 GDPR:
| Purpose | Legal Basis |
|---|---|
| Responding to contact enquiries | Legitimate interest (Art. 6(1)(f)) |
| Processing job applications | Pre-contractual necessity (Art. 6(1)(b)) |
| Analytics cookies | Consent (Art. 6(1)(a)) |
| Essential cookies | Legitimate interest (Art. 6(1)(f)) |
| Compliance with legal obligations | Legal obligation (Art. 6(1)(c)) |
4. Data Retention
We do not retain personal data for longer than is necessary for the purposes for which it was collected:
| Data Type | Retention Period |
|---|---|
| Contact form enquiries | 3 years from last contact |
| Job applications (unsuccessful) | 2 years from application date |
| Analytics cookies | 13 months |
| Essential session cookies | Session / browser close |
After the applicable retention period, data is securely deleted or anonymised.
7. Your Rights
Under the GDPR, you have the following rights in relation to your personal data:
Right of Access
Request a copy of the personal data we hold about you (Art. 15 GDPR).
Right of Rectification
Request correction of inaccurate or incomplete data (Art. 16 GDPR).
Right to Erasure
Request deletion of your personal data in certain circumstances (Art. 17 GDPR).
Right to Portability
Receive your data in a structured, machine-readable format (Art. 20 GDPR).
Right to Object
Object to processing based on legitimate interest at any time (Art. 21 GDPR).
Right to Restrict Processing
Request restriction of processing in certain circumstances (Art. 18 GDPR).
To exercise any of these rights, contact us at privacy@snzsona.com. We will respond within 30 days. You also have the right to lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These include encryption in transit (TLS/HTTPS), access controls, and regular security reviews. However, no transmission over the internet is completely secure, and we cannot guarantee absolute security.
9. Minors
Our website and services are directed at business professionals and are not intended for individuals under the age of 16. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately at privacy@snzsona.com.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in law or our data practices. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Material changes will be communicated via a notice on our website.
11. Contact & Data Requests
For all privacy-related enquiries, data subject requests, or to exercise your rights, please contact our data protection point of contact:
SNZ Sona Consulting — Data Privacy
Paris, France
privacy@snzsona.comWe aim to respond to all requests within 30 calendar days.