Privacy policy

1. PREAMBLE

KURAGE is a simplified joint-stock company specializing in research and development in functional electrostimulation, as well as the design, development, and commercialization of sports and medical equipment and accessories to aid in the mobilization of paralyzed or weakened limbs. The company also organizes sports activities and events and provides training in sports and health fields.

This privacy policy (hereinafter referred to as the “Policy”) aims to inform users (hereinafter referred to as “Users”) of the website www.kurage.fr (hereinafter referred to as the “Site”) about the terms and conditions of collection and processing of their personal data in connection with the use of the Site, as well as to outline how compliance with personal data protection rules is ensured.

The Policy has been created to ensure that KURAGE conducts its activities in accordance with national, European, and international regulations regarding the protection of personal data, especially Regulation (EU) No. 2016/679 of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (the “General Data Protection Regulation” or “GDPR”) and the amended French Data Protection Act No. 78-17 of January 6, 1978, related to data processing, files, and individual liberties (the “Data Protection Act”) (collectively referred to as the “Applicable Regulations”).

1.1. Control

KURAGE undertakes all necessary actions to ensure compliance with the Applicable Regulations. For any questions related to personal data, KURAGE can be contacted via email at: dpo@kurage.fr.

1.2. Definitions

For greater understanding of the terms used in this Policy, the GDPR provides several definitions commonly used in the context of personal data protection. The definitions in this Privacy Policy are primarily sourced from Article 4 of the GDPR.

2. PRINCIPLES OF PERSONAL DATA PROTECTION

This Policy is based on the principles outlined in the Applicable Regulations. As the Data Controller of the data processing conducted within the Site’s operation, notably through the Site’s contact form, KURAGE is responsible for ensuring compliance with these principles and must be able to demonstrate this compliance at any time.

Implementing and upholding these principles is essential and must be regularly verified by those responsible for data processing within KURAGE.

2.1. Lawfulness, Fairness, and Transparency

Personal data must be processed lawfully, fairly, and transparently in relation to the data subject.

2.2. Purpose Limitation

Personal data must be collected for specific, explicit, and legitimate purposes and not further processed in a way incompatible with those purposes.

2.3. Data Minimization

Personal data must be adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.

2.4. Accuracy

Personal data must be accurate and kept up-to-date as necessary. Reasonable steps must be taken to ensure inaccurate personal data, in light of the purposes for which they are processed, are erased or rectified without delay.

2.5. Storage Limitation

Personal data should be stored in a manner that allows identification of data subjects for no longer than is necessary for the purposes for which they are processed. Data may be kept for longer periods for archival, scientific, historical, or statistical purposes, as long as appropriate technical and organizational measures are implemented to safeguard the rights and freedoms of the data subject.

2.6. Integrity and Confidentiality

Personal data must be processed in a manner ensuring appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using suitable technical or organizational measures.

3. PERSONAL DATA PROCESSED BY KURAGE

3.1. Data Collected on the KURAGE Site

The personal data collected and processed by KURAGE as the Data Controller are those likely to be collected during the User’s interaction with the Site. The personal data that may be processed by KURAGE include:

  • Civil status (name, first name);
  • Personal contact details (postal address, email address, phone number);
  • Any other information transmitted by a User through contact.

This data is collected during the contact process carried out by the User on the Site or through any email exchange from third parties addressed to KURAGE. Additionally, KURAGE collects:

  • User’s connection data, such as IP address, operating system, or browser type;
  • Log file data (date and time of connection, actions taken).

3.2. Purposes of Data Processing

KURAGE acts as the Data Controller of Users’ personal data for purposes including the operation and management of the Site and User contact.

3.3. Legal Basis of Data Processing

KURAGE processes Users’ data under the following legal bases:

  • Consent where the User voluntarily contacts KURAGE;
  • Legitimate interest in processing data essential to the services provided by KURAGE.

3.4. Data Retention Period

Personal data collected by KURAGE is retained only as long as necessary for the purposes for which it was collected, in accordance with Applicable Regulations. In the case of User contact, data is retained only for the period necessary to fulfill the request, or a maximum of three (3) years after collection or last engagement without response.

4. HOSTING OF THE KURAGE SITE

The User acknowledges that the Site’s hosting services are outsourced to an external provider. KURAGE does not transmit any personal data to the host in connection with the Site’s use. The host acts as a Processor under KURAGE’s instructions.

5. SECURITY MEASURES FOR PERSONAL DATA

KURAGE is committed to protecting Users’ data through enhanced technical security measures. As the Data Controller, KURAGE implements technical and organizational measures in compliance with Applicable Regulations.

6. USERS’ RIGHTS REGARDING PERSONAL DATA

In accordance with Applicable Regulations, each User has rights concerning their personal data held by KURAGE. Users may exercise their rights or direct any data protection inquiries to dpo@kurage.fr. Rights include:

  • Right of access to their data and information regarding the processing;
  • Right to rectify inaccuracies or incomplete data;
  • Right to erasure of data no longer necessary for the purposes intended;
  • Right to withdraw consent for processing;
  • Right to restrict data processing;
  • Right to data portability;
  • Right to object to processing for personal reasons, provided the Account is closed.

7. TRANSFER OF PERSONAL DATA

Applicable Regulations strictly control international data transfers. KURAGE does not transfer data outside the EU without User consent and appropriate safeguards.

8. CONTACT

For any questions regarding this Policy or KURAGE’s data protection practices, please contact: dpo@kurage.fr.