Privacy Policy

At Kalent, the protection of your personal data is a priority. When you register on the Kalent platform (the “Platform”) and as part of the management of contractual relationships with its clients, Kalent may collect personal data about you. The purpose of this policy is to inform you of how Kalent processes this data in compliance with Regulation (EU) 2016/679 of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the “GDPR”) and French Law No. 78-17 of January 6, 1978, on information technology, files and civil liberties (together the “Applicable Regulations”).

1. Who is the data controller?

When you register on the Platform or in the context of managing contractual relationships with Kalent’s clients, the data controller is Candide, a simplified joint-stock company, registered with the Nantes Trade and Companies Register under number 953 550 597, with its registered office at 10B Quai Turenne, 44000 Nantes (“Kalent”).

2. What data does Kalent collect?

Personal data is information that can directly or indirectly identify an individual.

Kalent collects personal data in the following categories:

• Identification data (name, surname, email address, phone number)
• Professional data (company name, CV, job title/position, LinkedIn URL)
• Order-related data if you are a client of Kalent’s services
• Login data (login logs, encrypted passwords) if you are a client of Kalent’s services
• Browsing data (IP address, pages viewed, connection date and time, browser used, operating system, user ID) if you are a client of Kalent’s services
• Financial and economic data (bank details, credit card information) if you are a client of Kalent’s services
• Any information you choose to send to Kalent as part of a contact request
  

Kalent may also process publicly available personal data. When subscribing to Kalent’s services, mandatory data is indicated when you provide it.

3. How does Kalent collect your data?

Kalent collects your data either:

• Because you provided it directly (e.g., by filling out a contact form on Kalent’s website or subscribing to Kalent’s services),
• Or indirectly, via business partners, service providers, or database enrichment tools.
  

Kalent uses strong data protection mechanisms, including encryption and access controls, to safeguard sensitive data. Kalent does not share, transfer, or disclose Google user data to third parties. All processing activities involving Google user data comply with applicable data protection regulations.

4. Does Kalent use your personal data for profiling?

Yes, for professional matching purposes, but without legal consequences.

a. Profiling definition: as per Article 4(4) GDPR, profiling is any automated processing of personal data to evaluate personal aspects (such as professional performance or behavior).

b. Matching logic: your professional data is analyzed to determine if it matches recruiters’ needs.

c. Consequences: no legal impact or significant effect on you. You may object at any time.

Kalent does not use Google Workspace APIs to develop, improve, or train generalized AI/ML models.

5. Purposes, legal bases, and retention periods

• Providing services (contract execution): data kept for account lifetime + 1 year for logs. Inactive accounts deleted after 2 years. Data archived up to 5 years for evidence.
• Order and client management: data kept during the contract and archived up to 5 years.
• Non-clients listed on the Platform: data kept 2 years (legitimate interest).
• Customer/prospect/candidate database: kept 3 years for prospects, 2 years for candidates, duration of contract for clients.
• Responding to requests: kept 3 years.
• Legal obligations: invoices kept 10 years, transaction data 5 years.
• Analytics/cookies: 13 months with consent.
• Rights requests: ID proof kept only for verification time. Objection records kept 3 years.

6. Who receives your data?

• Kalent staff
• Subcontractors (hosting, analytics, email, payment, billing, cookie management)
• Recruiter clients (independent controllers, responsible for their own processing)
• Public bodies if required by law
  

7. Are your data transferred outside the EU?

Yes, if tools used by Kalent involve transfers. Transfers rely on:

• Adequacy decisions (Article 45 GDPR)
• Standard Contractual Clauses, Binding Corporate Rules, or certifications (Article 46 GDPR)
• Other safeguards under Chapter V GDPR
  

Copies available upon request to Kalent.

8. Your rights

You have rights to:

• Information (Articles 13–14 GDPR)
• Access (Article 15 GDPR)
• Rectification (Article 16 GDPR)
• Restriction (Article 18 GDPR)
• Erasure (Article 17 GDPR)
• Complaint to supervisory authority (in France: CNIL) (Article 77 GDPR)
• Define post-mortem instructions
• Withdraw consent anytime (Article 7 GDPR)
• Portability (Article 20 GDPR)
• Objection (Article 21 GDPR, including profiling)
  

You can exercise these by contacting Kalent. Proof of identity may be requested.

9. Cookies

See Kalent’s Cookie Policy.

10. Contact point

Email: vincent@kalent.ai

Postal address: 10B Quai Turenne, 44000 Nantes

11. Changes

Kalent may update this policy to reflect legal, regulatory, editorial, or technical changes. Updates apply from publication date. Significant changes will be notified.

‍