Legal notice & Privacy policy

1. Website publisher

This website is published by: Sébastien DUC
Operating under the trade name: KANSO OPS
Business address: France
Email: sebastien.duc@kanso-ops.fr
SIREN/SIRET: company registered in France — number provided on contractual and legal documents
Publication director: Sébastien DUC

2. Website hosting providers

Main website (kanso-ops.com)
Vercel Inc.
Website: vercel.com

Forms, routing and technical orchestration
Self-hosted n8n via Elestio on Scaleway infrastructure (France)
Website: elest.io

3. Intellectual property

All website content (text, images, methodologies, KANSO logo, graphics) is the exclusive property of Sébastien DUC unless otherwise stated. Any reproduction or distribution without authorization is strictly prohibited.

1. Purpose

This policy informs visitors to the website https://www.kanso-ops.com and associated forms about the processing of their professional data in connection with an ROI qualification, diagnostic or service request.

2. Data controller

Sébastien DUC — sebastien.duc@kanso-ops.fr

3. Data collected

Through contact, ROI qualification and diagnostic forms, KANSO OPS collects the data needed for the B2B commercial relationship:

Identification data:

• First and last name
• Professional email address
• Phone number (optional)
• Company name and sector

Business data (diagnostic forms):

• Role in the company
• Headcount and revenue (optional)
• ERP type and tools used
• Size of the team concerned
• Operational control issues and needs
• Timeline and indicative budget (optional)

4. Processing purposes

Data is used to:

• Respond to audit and contact requests
• Generate personalized diagnostic reports
• Prepare tailored commercial proposals
• Improve our services and methodologies

Your data is never sold to third parties.

5. Transfers and processors

To provide the service, data may pass through secure third-party tools:

Service	Provider	Location
Website hosting	Vercel	International cloud infrastructure
Technical orchestration	n8n / Elestio (Scaleway)	France (Paris)
Data storage	Microsoft 365 (SharePoint)	European Union
Email	Microsoft 365 (Outlook)	European Union
AI analysis (reports)	OpenAI / Anthropic	USA
PDF generation	Carbone.io	France
Scheduling	Calendly	USA

All these providers are subject to GDPR or have Standard Contractual Clauses (SCCs) for transfers outside the EU.

6. Processing by artificial intelligence

As part of KANSO OPS audits and diagnostics, your business data may be analyzed by artificial intelligence models (OpenAI, Anthropic) in order to:

• Generate a personalized summary of your situation
• Calculate a digital maturity score
• Propose tailored operational control recommendations

7. Cookies and local storage

Diagnostic forms use your browser local storage only to:

• Remember your acceptance of this privacy policy
• Avoid repeatedly displaying the consent banner

No tracking, advertising or analytics cookies are used on diagnostic forms.

8. Retention period

Prospect data is retained for a maximum of 3 years from the last contact. After this period, it is deleted or anonymized.

9. User rights

Under GDPR (EU Regulation 2016/679), you have the following rights:

• Right of access: obtain a copy of your data
• Right to rectification: correct inaccurate data
• Right to erasure: request deletion of your data
• Right to portability: receive your data in a structured format
• Right to object: object to the processing of your data

To exercise these rights, send an email to: sebastien.duc@kanso-ops.fr

You may also lodge a complaint with the CNIL.

10. Security measures

KANSO OPS implements technical and organizational measures to protect your data:

• HTTPS encryption for all exchanges
• Hosting on secure servers in France (Scaleway)
• Restricted access to data (strong authentication)
• Anti-bot protection on forms (honeypot)

Last updated: April 2026