Privacy Policy

The controller within the meaning of Art. 4(7) GDPR is:

KONZEPT SERVICES SUARL (SUARL (Société Unipersonnelle à Responsabilité Limitée), entreprise totalement exportatrice et non résidente), 15 Rue Omar Kaddeh, Immeuble Le Montplaisir, 2ème étage B25, 1073 Montplaisir, Tunis, Tunisie. Guichet Unique (A.P.I.) Tunis – Direction Générale des Impôts, Tax ID 1995037B, Code TVA A · Code catégorie M · N° établissement 000. E-mail: hello@konzeptservices.com, tel.: +216 71 90 27 30.

Please address data protection requests to: hello@konzeptservices.com.

We process data that you actively provide (contact form, e-mail, telephone, contract data) as well as technical data automatically generated when using the website.

This may include: salutation, first and last name, company, role, e-mail address, telephone number, postal address, country, VAT ID, content of your message, IP address, device and browser information, time of access and referrer URL.

Please do not transmit special categories of personal data within the meaning of Art. 9 GDPR (e.g. health, religious or political data).

We process your data on the following legal bases:

• Art. 6(1)(b) GDPR – initiation and performance of contracts, handling of inquiries;
• Art. 6(1)(c) GDPR – compliance with legal obligations (e.g. commercial and tax retention);
• Art. 6(1)(f) GDPR – legitimate interests (operation, security and improvement of the website, direct marketing to existing customers, fraud prevention);
• Art. 6(1)(a) GDPR – consent (newsletter, non-essential cookies, reference listing).

We use only technically necessary cookies without consent. All other cookies, in particular for analytics, marketing or personalisation purposes, are only activated after your explicit consent via the consent banner (Art. 6(1)(a) GDPR, § 25(1) TTDSG, Tunisian data protection law).

You can withdraw your consent at any time with effect for the future by changing the cookie settings of your browser or by reopening our consent tool.

We only send the newsletter on the basis of your consent (double opt-in). Every e-mail contains an unsubscribe link. Alternatively, you can unsubscribe at any time by e-mail to hello@konzeptservices.com.

We only disclose personal data where legally permitted: (1) at your instruction, (2) for the performance of a contract, (3) pursuant to a legal requirement or an order issued by an authority, or (4) to carefully selected processors (Art. 28 GDPR), in particular hosting, e-mail and IT service providers and tax advisory partners. We have GDPR-compliant contracts with all processors.

There is no sale or rental of personal data.

Where personal data is transferred to countries outside the European Economic Area (for example to our host Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA), this is based on an adequacy decision (Art. 45 GDPR) or appropriate safeguards such as the EU Standard Contractual Clauses (Art. 46 GDPR).

Unless expressly agreed otherwise, your data is processed and stored within the European Union.

We store your data only for as long as necessary for the relevant purposes or as required by statutory retention periods (in particular 6 or 10 years under commercial and tax law). Contact requests that do not result in a contract are generally deleted 36 months after the last contact, unless a new interaction takes place.

We implement appropriate technical and organisational measures pursuant to Art. 32 GDPR to protect your data against loss, destruction, manipulation and unauthorised access (including TLS encryption, access controls, corporate VPN, locked workstations, regular audits, ISO 27001 in preparation). In the event of a notifiable data breach, we will inform the competent supervisory authority and you without undue delay in accordance with Art. 33 and 34 GDPR.

You have the right at any time to:

• access (Art. 15 GDPR);
• rectification (Art. 16 GDPR);
• erasure (“right to be forgotten”, Art. 17 GDPR);
• restriction of processing (Art. 18 GDPR);
• data portability (Art. 20 GDPR);
• objection to processing, in particular for direct marketing purposes (Art. 21 GDPR);
• withdrawal of consent with effect for the future (Art. 7(3) GDPR);
• instructions regarding the fate of your data after death (Art. 85 Loi Informatique et Libertés).

Please address requests to hello@konzeptservices.com. We will process your request within the statutory period of one month (extendable by two months pursuant to Art. 12(3) GDPR). We may request proof of identity to verify your identity.

You have the right, pursuant to Art. 77 GDPR, to lodge a complaint with a data protection supervisory authority, in particular the authority competent for our registered office: Instance Nationale de Protection des Données Personnelles (INPDP), Tunis, Tunisia, www.inpdp.tn. Users in Germany may also contact the data protection authority competent for their respective federal state.

KONZEPT SERVICES SUARL may publish a list of customer references or testimonials on the website. Upon written request to hello@konzeptservices.com, we will promptly remove such publications.

No exclusively automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.

We reserve the right to adapt this statement to reflect changes in the legal situation or in our services. The current version is available on this page.

For all matters concerning data protection, please contact us by e-mail at hello@konzeptservices.com or by post: KONZEPT SERVICES SUARL, Data Protection, 15 Rue Omar Kaddeh, Immeuble Le Montplaisir, 2ème étage B25, 1073 Montplaisir, Tunis, Tunisie.