Privacy Policy

Last updated: 11/02/2026

IRIS FORMATION CONSEIL attaches great importance to the protection of your personal data and respect for your privacy. This privacy policy informs you transparently about how we collect, use, protect, and process your personal data in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act.

1. Data Controller

IRIS FORMATION CONSEIL
Simplified Joint Stock Company (SAS)
Registered office: 9 rue des Colonnes - 75002 Paris
RCS Paris B 905 385 928
Email: contact@iris-forco.com
Phone: +33 9 52 10 56 69

2. Personal Data Collected

As part of our activities, we may collect the following personal data:

2.1 Via the contact form

Identification data: Name, surname
Contact data: Email address, phone number
Professional data: Company, position (if provided)
Request-related data: Subject and content of the message

2.2 Via resilience diagnostics

Identification data: Name, surname
Contact data: Email address
Type of diagnostic: Corporate or individual diagnostic
Diagnostic results: Responses to questionnaires (if applicable)
Technical data: Date and time of diagnostic completion

Important: We only collect data strictly necessary for the performance of our services. Any data collection is subject to your prior and explicit consent.

3. Purposes and Legal Basis of Processing

3.1 Processing your contact requests

Purpose: To respond to your requests for information regarding our training and services

Legal basis: Consent (Article 6.1.a of the GDPR)

Retention period: 3 years from your last contact

3.2 Management of resilience diagnostics

Purpose: Allow access and monitoring of resilience diagnostics (corporate and individual), analyze results, and communicate adapted recommendations to you

Legal basis: Consent (Article 6.1.a of the GDPR)

Retention period: 3 years from the completion of the diagnostic

3.3 Promotion of our training courses

Purpose: To inform you of our training offers and services related to your interests

Legal basis: Prior and explicit consent (Article 6.1.a of the GDPR)

Retention period: Until withdrawal of your consent or 3 years without interaction from you

Right of withdrawal: You can withdraw your consent at any time via the unsubscribe link present in each email or by contacting us

4. Data Recipients

Your personal data is intended for the internal departments of IRIS FORMATION CONSEIL authorized to process it due to their functions.

No transmission to third parties: We do not sell, rent, or transmit your personal data to third parties for commercial purposes.

Your data may only be communicated:

To our host (Infomaniak Network SA, Switzerland) strictly for site hosting purposes
To competent authorities upon judicial requisition

5. Data Transfer Outside EU

Your data remains in Europe.

Our host Infomaniak Network SA is based in Switzerland, a country recognized by the European Commission as offering an adequate level of personal data protection.

No data transfer is made to countries outside the European Union or Switzerland.

6. Data Security

We implement all appropriate technical and organizational measures to ensure the security and confidentiality of your personal data, including:

SSL/TLS Encryption: All communications between your browser and our site are secured by an SSL certificate
Secure Hosting: Our servers are hosted at Infomaniak, ISO 27001 certified
Restricted Access: Only authorized personnel have access to your data
Regular Backups: Your data is backed up regularly
Protection against unauthorized access: Firewalls and intrusion detection systems

7. Cookies and Tracking Technologies

Our site uses NO cookies.

We do not place any cookies on your browser and do not use any tracking technology (analytics, advertising, social networks, etc.).

Your browsing on our site is entirely anonymous.

8. Your Rights Regarding Your Personal Data

In accordance with the GDPR and the Data Protection Act, you have the following rights regarding your personal data:

✓ Right of access

You can obtain confirmation that your data is being processed and receive a copy of this data

✓ Right of rectification

You can request the correction of your inaccurate or incomplete data

✓ Right to erasure

You can request the deletion of your data under certain conditions

✓ Right to restriction

You can request the limitation of the processing of your data

✓ Right to object

You can object to the processing of your data for legitimate reasons

✓ Right to portability

You can receive your data in a structured and commonly used format

9. How to Exercise Your Rights?

To exercise your rights, you can contact us by the following means:

By email:
contact@iris-forco.com
Subject: "GDPR Rights Exercise"

By postal mail:
IRIS FORMATION CONSEIL
Attention: Data Protection Officer
9 rue des Colonnes
75002 Paris, France

10. Contact

For any question regarding this privacy policy, you can contact us:

IRIS FORMATION CONSEIL
9 rue des Colonnes
75002 Paris
Email: contact@iris-forco.com