• Français
    • English

PERSONAL DATA PROTECTION POLICY OF THE WEBSITE

Last update : 2025

1. Why a Privacy Policy?

This Personal Data Protection Policy (hereinafter “the Policy”) is intended to describe how Quarkslab (hereinafter “the Company”) processes the personal data of the users of its website www.quarkslab.com (hereinafter “the Website”). It applies when users’ personal data is collected when they interact with the Website and the services provided by the Company on the Website.

For the purposes of this Policy, “you” and “your” refer to the Website’s users.

2. Who is the controller of your personal data?

The controller of the processing of your personal data is Quarkslab, a French simplified joint stock company, registered under number 538 485 897 00036 with the registry of trade and companies of Paris, whose lead office is located 10 Boulevard Haussmann 75009 Paris – France. This means that Quarkslab determines the purposes and means of the processing of your personal data.

Below you will find the Company’s contact details:

3. What are your rights over your personal data?

Under the conditions defined by the applicable regulations, you may exercise the following rights in relation to the processing of your personal data:

  • Right of access: this right allows you to obtain a confirmation from the Company as to whether your personal data is being processed and, where that is the case, a copy of your personal data.
  • Right to rectification: this right allows you to obtain from the Company the rectification of inaccurate or incomplete personal data concerning you.
  • Right to erasure: this right allows you to obtain from the Company the erasure of your personal data where a regulatory basis applies.
  • Right to restriction of processing: this right allows you to request the Company to temporarily suspend the processing of your personal data where a regulatory basis applies.
  • Right to object: this right allows you to object at any time to the processing of your personal data on grounds relating to your personal situation. 
  • Right to object to processing for sending commercial communications: this right allows you to object to receiving commercial communications:
    • at the time of collection of your personal data, by checking the appropriate box on the forms available on the Website,
    • at any time, by using the unsubscribe link included in the emails or by expressing your objection in case the Company contacts you by telephone.

4. Processing of personal data for the management of requests (scheduling a demo, scheduling a consultation)

Purposes of the processing

The purpose of this processing is to manage requests and questions submitted to the Company.

It allows our Company to:

  • receive requests and questions that you submit via a request form available on the Website (e.g.:“schedule a demo” form, “schedule a consultation” form), 
  • respond to the said requests and questions, 
  • produce statistics on requests (number of requests, type of requests, response time).

 

Legal basis for the processing

This processing is necessary for the pursuit of our Company’s legitimate interests in developing business relations with professionals from the cybersecurity industry who express an interest in our products and services.

Recipients of the personal data

Within the limits of their respective responsibilities, all or part of your personal data is disclosed to:

  • the employees of our Company,  
  • the employees of our service providers in charge of the technical management of the Website.

Source of the personal data

Your personal data are collected by the Company when you complete at least one of the Website’s forms.

Mandatory nature of the data collection

Fields marked with an asterisk on the forms are mandatory and must be completed for your request to be considered. Otherwise, your request will not be taken into consideration.

Storage period of the personal data

The requests you have made, and the answers provided by the Company are stored for a period of three years from your last contact with the Company.

5. Processing of personal data for the management of event registrations

Purposes of the processing

The purpose of this processing is to manage the Company’s event registrations. 

It allows our Company to:

  • receive registration requests submitted through the event registration form, 
  • send registration confirmation by email,
  • manage the list of participants,
  • manage the logistics of the events, 
  • measure participant satisfaction,
  • realize statistics on the management of events.

 

Legal basis for the processing

This processing is necessary for the pursuit of the Company’s legitimate interest to: 

  • promote the sharing of cybersecurity knowledge among industry professionals,
  • improve the management of its events.

 

Recipients of the personal data

Within the limits of their respective responsibilities, all or part of your personal data is disclosed to:

  • the employees of our Company,  
  • the employees of our service providers in charge of the technical management of the Website,
  • the employees of our service providers in charge of the management and the logistics of the events.

 

Source of the personal data

Your personal data are collected by the Company when you complete the event registration form on the Website.

Mandatory nature of the data collection

Fields marked with an asterisk on the event registration form are mandatory and must be completed for your registration request to be considered. Otherwise, your request will not be taken into consideration.

Storage period of the personal data

Your personal data will be stored by our Company for a period of three years from the closing of the event.

6. Processing of personal data for sending commercial communications dedicated to professionals

Purposes of the processing

The purpose of this processing is to manage the Company’s commercial communications in relation to its direct marketing operations. 

Il allows the Company to:

  • calculate, by means of cookies (see “Use of cookies on the Website”), your appetence for its products and services based on your profile (position in your company and the industry of your company), your interactions with the Website and the services provided by the Company on the Website (subscription to the monthly newsletter, registration for an event, submitting a request for contact, scheduling a consultation or a demo), in order to determine whether the Company contacts you by email or telephone for direct marketing purposes,
  • send commercial communications, by email, related to the Company’s products, services, and events,
  • promote the Company’s products, services, and events by telephone, 
  • personalize the content of commercial communications,
  • measure the audience of commercial communications (mail openings, clicks on links, conversion rates).

 

Legal basis for the processing

This processing is necessary for the pursuit of the Company’s legitimate interests to:

  • develop commercial relationships with professionals from the cybersecurity industry who are interested in its products and services,
  • improve the content of its commercial communications.

 

Recipients of the personal data

Within the limits of their respective responsibilities, all or part of your personal data is disclosed to:

  • the employees of our Company,  
  • the employees of our service providers in charge of the technical management of the Website, 
  • the employees of our service providers in charge of the technical management of commercial prospecting actions.

 

Source of the personal data

Your personal data are collected while you navigate on the Website and complete the following forms: newsletter subscription, contact request, “scheduling a demo”, “scheduling a consultation”, event registration.

Mandatory nature of the data collection

The personal data required to manage our commercial prospecting actions are those indicated as mandatory on the forms available on the Website.

Storage period of the personal data

Your personal data processed for our commercial prospecting actions will be stored for a period of 3 years from your last interaction with the Company.

In case you opt of from receiving commercial communications, your personal data will be stored for the duration of the statute of limitations for offences in France (6 years). This storage is necessary for the Company to defend its rights and interests, and to demonstrate its compliance.

7. Use of cookies on the Website

8. How to exercise your rights over your personal data?

To exercise your rights, please send your request : 

  • by mail to 10 Boulevard Haussmann 75009 Paris – France
  • by email to dpo@quarkslab.com 

If you consider that the processing of your personal by the Company infringes the rights listed above, or if you are not satisfied with the way your request relating to your rights was handled by the Company, you can lodge a complaint with the French supervisory authority (Commission nationale de l’informatique et des libertés (Commission nationale de l’informatique et des libertés, at 3 Place de Fontenoy, 75007 Paris, or directly at www.cnil.fr).

In the event of changes to this policy will be amended and we invite you to consult it regularly.