1. Data controller
The controller of personal data collected on the d1consulting.fr website is D1 Consulting. Contact: contact@d1consulting.fr
D1 Consulting
Personal data protection policy
D1 Consulting's commitment to protecting your data
Last update: August 6, 2026
2. Data collected
We collect the personal data you voluntarily provide via: • The contact form: last name, first name, email, phone (optional), request type, message. • The application form: title (optional), last name, first name, email, phone (optional), desired position, availability, cover letter. CVs are not uploaded to the site: you send them to us by email. If you consent to it, we also collect browsing data for audience measurement and campaign tracking purposes (see the "Cookies and trackers" section). We do not knowingly collect any sensitive data within the meaning of Article 9 GDPR, and we ask you not to include any in your messages.
3. Purposes of processing
Data is collected to: • Respond to your contact requests and establish a business relationship • Process job applications • Improve the user experience of the website • Comply with our legal and regulatory obligations
4. Legal basis
The processing of your data is based on: • Your explicit consent (contact form, application) • The performance of pre-contractual measures at your request • D1 Consulting's legitimate interest in improving its services
5. Retention period
Your data is kept: • Commercial contact data: 3 years from the last contact • Unsuccessful applications: 2 years after the last exchange • Accounting and tax data: 10 years in accordance with legal obligations
6. Recipients of the data
Your data is intended only for authorized D1 Consulting teams. It is never sold or transferred to third parties for commercial purposes. Certain technical subcontractors (host, email tools, captcha platform) may access it strictly within the scope of their services, under confidentiality commitments.
7. Your rights
In accordance with the GDPR and the French Data Protection Act, you have the following rights: • Right to access, rectify and erase your data • Right to restrict and object to processing • Right to data portability • Right to withdraw your consent at any time • Right to lodge a complaint with the CNIL (www.cnil.fr) To exercise these rights, contact us at: contact@d1consulting.fr
8. Security
D1 Consulting implements appropriate technical and organizational measures to protect your data against unauthorized access, loss, destruction or disclosure: HTTPS connection, captcha, secure hosting, data access control.
9. Cookies and trackers
The site distinguishes two categories of trackers. 1) Trackers subject to your consent None is loaded until you click "Accept" in the banner: staying silent never counts as acceptance. You can change your mind at any time via the "Manage cookies" link at the bottom of every page. • Google Analytics 4 — _ga and _ga_H76648ZDBL cookies, published by Google Ireland Limited / Google LLC, 13-month lifetime. Purpose: audience measurement (number of visitors, pages viewed, navigation paths). Data is hosted by Google and may be transferred to the United States under the Data Privacy Framework. • D1 Consulting tracking pixel — /d1-tracking.js script, published by D1 Consulting. Purpose: linking visits to our email campaigns in order to measure their effectiveness. 2) Trackers exempt from consent These set no cookies and cannot identify you. • Matomo — audience measurement that we host on our own servers (matomo.d1consulting.fr). It runs without any cookie; your IP address is truncated before being recorded; data is never shared with a third party nor cross-referenced with other sites; raw visit data is deleted after 25 months; your browser's "Do Not Track" header is respected. Under these conditions, the French data protection authority (CNIL) exempts audience measurement from consent. If you reject cookies via the banner, we also switch this measurement off, even though we are not required to. • hCaptcha — published by Intuition Machines, Inc. (United States). Protects forms against automated submissions; present only on pages containing a form. • d1-cookie-consent — local storage, published by D1 Consulting. Stores your choice so you are not asked again on every page. • mtm_consent_removed — a cookie set only if you reject: it records that rejection so audience measurement stays off. It does not exist until you have rejected something. No advertising, retargeting or ad-network sharing cookies are used.
