PRIVACY POLICY

This policy explains how CARIDEMA (« we ») collect and process your personal data when you visit the site caridema.com (the « Site »), when you use our contact form, or when you register for our communications.
We act in compliance with the Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act n°78-17 of 6 January 1978 as amended.

1) DATA CONTROLLER AND CONTACT

Data Controller: SAS CARIBBEAAN DEVELOPMENT MANAGEMENT, a French company registered in the Registre de Commerces et des Sociétés de Basse-Terre under the number 939 388 732.
Dedicated contact email GDPR: contact@caridema.com
Telephone: +590 690 69 99 26

2) DATA COLLECTION

We collect only what is strictly necessary:

Contact form: identity (first/last name), contact details (email, phone), company/role, subject and message content, date/time, IP address and user agent (for security & logs).
Newsletter / updates (if offered): email, first/last name (optional), date of consent.
Pre-contractual relationship / meeting request: professional information needed to assess your enquiry (project type, location, indicative budget, etc.).
Technical logs & security: IP addresses, timestamps, pages viewed, technical events (anti-fraud / anti-intrusion).
Cookies and trackers: see Section 7.

We do not process any special categories of data within the meaning of the GDPR via the Site, and we process no payment data, as the Site is not an online store.

3) PURPOSES AND LEGAL BASES

Purpose	Examples	Legal basis
Respond to your requests (contact, appointment, estimate)	Message Management, Tracking, Useful Relaunches	Legitimate interest (art. 6 (1) GDPR) and/or pre-contractual measures (art. 6 (1) (b))
Prospection B2B and information about our services	Sending relevant professional emails, invitations	Legitimate interest (B2B) with systematic opt-out
General public newsletter (if applicable)	Send news	Consent (art. 6 (1) (a)) - disenrolment at any time
Site Security	Fraud prevention/abuse, logging	Legitimate interest
Hearing action (analytics)	Attendance statistics	Consent via CMP (except CNIL-free solution)
Legal compliance	Responses to authorities, rights management	Legal obligation (art. 6(1)(c))

4) RECIPIENTS AND PROCESSORS

Your data are processed by CARIDEMA’s authorised staff. We may use processors for hosting, maintenance, security, analytics, and emailing:

Host: Hosty – 651 N Broad St, New Castle 19709, England
Maintenance / Webmaster : Kreative Web, KMA Center D6113, 30230 Bouillargues, France
Emailing / Newsletter : Mailchimp
Analytics : Google Analytics

These providers act on CARIDEMA’s instructions under Article 28 GDPR-compliant agreements. We do not sell your data.
We don't sell your data.

Transfers outside the EU: where certain providers are located outside the EU, we rely on one of the following safeguards: adequacy decision, Standard Contractual Clauses (SCCs) adopted by the European Commission, or any equivalent legal mechanism. You can obtain information about these safeguards by writing to contact@caridema.com.

5) RETENTION PERIODS

We apply proportionate retention periods:

Contact form enquiries / B2B marketing: 3 years from your last interaction.
Clients / contractual files: duration of the engagement + applicable statutory limitations.
Newsletter: until consent is withdrawn (unsubscribe possible at any time).
Technical & security logs: up to 12 months.
Cookies & analytics: see Section 7.

6) YOUR RIGHTS

Under the GDPR, you have the following rights:

Access, rectification, erasure (right to be forgotten)
Restriction and objection (notably to marketing)
Portability of data you provided
Withdrawal of consent at any time (for consent-based processing)
Post-mortem directives regarding your data (Art. 85 of the French Act)

To exercise your rights: contact us@caridema.com and, where appropriate, attach proof of identity.
You may also lodge a complaint with the CNIL: cnil.fr – 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.

7) COOKIES & OTHER TRACKERS

On your first visit, a Consent Management Platform (CMP) lets you accept, refuse, or customise non-essential cookies. You can change your choices at any time.

Categories of cookies:

Technical / necessary (consent-exempt): ensure Site operation (load balancing, session, language preference, etc.).
Audience measurement: traffic statistics. Consent required, unless you use a CNIL-exempt solution (strict settings, truncated IP, etc.).
Marketing / social media (if any): sharing, retargeting. Consent required.

Duration:

Audience-measurement cookies: up to 12 months;
Retention of associated statistics: up to 24 months;
Retention of your choice (consent/refusal): 6 months.

List of tools (to be completed):

Analytics: Google Analytics – purpose: audience measurement.
Emailing: Mailchimp – purpose: list management & sends.
Social networks: Meta / LinkedIn – purposes: share buttons, pixels, audience.

No non-essential cookies are placed without your prior consent.

8) PROSPECTING & NEWSLETTERS

B2B: we may contact professionals about services relevant to their roles (legitimate interests), with the option to object from the first email and at any time.
General public: emailings require your consent.
Each email contains an unsubscribe link.

9) SECURITY

We implement appropriate technical and organisational measures proportionate to risk: in-transit encryption (TLS), logical segregation, access-rights management, backups, logging, component updates, and incident procedures.
As no method is 100% secure, we undertake to notify the CNIL and, where required, affected individuals of any personal data breach meeting legal thresholds.

10) EXTERNAL LINKS

The Site may contain links to third-party sites. We are not responsible for their privacy practices. Please refer to their policies.

11) AMENDMENT OF POLICY

We may update this policy to reflect legal or technical developments. The applicable version is the one published on this page, with its last-updated date. In case of a material change, we will inform you by appropriate means.

12) CONTACT US

For questions about this policy or your data:
Email: contact@caridema.com
Contact form: https://caridema.com/contact us/

QUESTIONS

If you wish to access, correct, amend or delete any personal information we hold about you, make a complaint, or simply require more information, please contact us via the contact page.