This Privacy Policy explains how Jonara collects, uses, stores, and protects personal data
in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR)
and applicable French data protection laws.

1. Data Controller

The data controller is:
Jonara
Simplified Joint-Stock Company with a Single Shareholder (SASU)
Registered office: 24 rue de Clichy, 75009 Paris, France
Registered with RCS Paris under number 999 264 419

For any questions relating to personal data protection, you may contact:
Email: contact[@] jonara.fr

2. Personal Data Collected

Jonara may collect and process the following categories of personal data:

• Identity data (name, surname)
• Contact data (email address, telephone number)
• Professional data (company name, job title)
• Connection and navigation data (IP address, browser type, technical logs)

Personal data is collected only when voluntarily provided by users, notably through
contact forms or direct communications.

3. Purposes of Processing

Personal data is processed for the following purposes:

• Responding to inquiries and contact requests
• Managing professional communications and relationships
• Ensuring the proper functioning and security of the website
• Complying with legal and regulatory obligations

4. Legal Basis for Processing

Personal data is processed on the basis of:

• The data subject’s consent
• The legitimate interests of Jonara (communication, security, service improvement)
• Compliance with legal obligations

5. Data Recipients

Personal data is intended exclusively for Jonara and is not sold or rented.

Data may be shared with trusted service providers strictly necessary for website hosting
and technical operations, subject to confidentiality obligations and GDPR compliance.

6. Data Hosting and Transfers

The website is hosted by OVHcloud, located within the European Union.

Jonara does not transfer personal data outside the European Economic Area (EEA).
If such a transfer were to occur, it would be subject to appropriate legal safeguards.

7. Data Retention

Personal data is retained only for the duration necessary to fulfill the purposes
for which it was collected, and in accordance with applicable legal requirements.

Contact data is generally retained for a maximum period of three (3) years from the last interaction.

8. Cookies

The website may use strictly necessary technical cookies to ensure proper operation and security.

No advertising cookies are used without the user’s explicit consent.
If audience measurement or analytics tools are implemented, users will be informed
and given the opportunity to manage their preferences.

9. Data Subject Rights

In accordance with applicable regulations, users have the following rights:

• Right of access to their personal data
• Right to rectification
• Right to erasure (right to be forgotten)
• Right to restriction of processing
• Right to data portability
• Right to object to processing

These rights may be exercised by contacting Jonara at the email address indicated above.

10. Supervisory Authority

If a user considers that their rights are not respected, they may lodge a complaint
with the competent supervisory authority:

Commission Nationale de l’Informatique et des Libertés (CNIL)
www.cnil.fr

11. Policy Updates

Jonara reserves the right to modify this Privacy Policy at any time.
Any changes will be published on this page and will take effect immediately.