Version dated 26 September 2026

Privacy policy

Data controller

Rami Mtimet

Echoes SARL – Les Berges du Lac, Tunis – Paris, France

Data collected

Forms (name, email, telephone, company, message), browsing (logs, cookies), contractual data.

Purposes

Contact/quote form (pre-contractual), B2B prospecting (legitimate interest), analytics (consent), security (legitimate interest), project management (contractual).

Legal bases

Legal bases: Article 6(1)(a), (b), (c) and (f) of the GDPR.

Recipients

Recipients: Echoes teams (France/Tunisia), EU technical processors compliant with Article 28 of the GDPR.

Transfers outside the EU

Transfers outside the EU to Tunisia → SCCs + enhanced security + restricted access.

Retention periods

Retention periods: prospects, 3 years. Logs, 6 months. Cookies, as specified by the CMP.

Project data and GDPR rights

Project data: duration of the contract. GDPR rights: access, rectification, erasure, objection, restriction and portability – dpo@echoesagency.fr

Complaints

Complaints: CNIL.

Security

Encryption, multi-factor authentication (MFA), strict access control, access logging and secure backups.

Cookies

Necessary cookies + analytics cookies subject to consent through a compliant CMP.