Privacy Policy and Data Protection
Last update: 2026.04.30
This policy is addressed to every user of SAHAR’s website https://sahar.fr (hereinafter referred to as the “Website”) in order to help you understand how your data is processed. This Privacy Policy informs you regarding the processing of your personal data while using the Website.
SAHAR is committed to protecting your data. We believe in transparency and data confidentiality. As the data controller, we ensure that all processing activities are carried out in compliance with data protection rules including the General Data Protection Regulation (“GDPR”), as described in this Privacy Policy.
🔎 Learn more about the use of your data
Responding to your contact requests
| What usage for your data? (Purpose) | Respond to your requests sent from the contact form. |
| What data? Providing the data marked as mandatory is necessary to respond to your request. | Last name ; first name ; email address ; request content ; organization (optional). |
| On what basis? (Legal basis) | Legitimate interest. |
| Retention period | The amount of time we need to respond to your request. |
| Who are the recipients of your data? The data collected and processed is not sold or rented, free of charge or for a fee, to third parties. | Internal teams in charge of answering your requests ; website hosting services ; email provider. |
| Transfers outside EU? SAHAR prefers sovereign solutions when possible. | United States of America (email provider). Your data will benefit from an equivalent level of protection (European Commission adequacy decision: for more information, please refer to the “references” section). |
Cookies and trackers
What is a cookie? A cookie is a small file stored by a server on a user’s device (computer, phone, etc.) and associated with a web domain. It allows the website to recognize you on subsequent visits, store information about you and, in some cases, track your browsing for statistical or advertising purposes. The broader term “tracker” covers cookies as well as invisible pixels, browser‑fingerprinting techniques and any equivalent device.
The principle. Placing a cookie or tracker on your device requires your prior consent, unless it is strictly necessary to provide the requested service.
On this Website. On your first visit, a banner invites you to accept or decline analytics. No measurement cookie is placed until you have explicitly given your consent. If you decline, or if your browser signals that you do not wish to be tracked (Do Not Track), no measurement takes place. Your choice is remembered and remains revocable at any time via the Cookie settings button in the footer.
For more information on cookies and the applicable rules, see the CNIL guidelines (in French).
Cookies placed (with your consent)
| Name | Issuer | Purpose | Duration |
|---|---|---|---|
_pk_id.<id>.<hash> | Matomo (SAHAR) | Identify the visitor pseudonymously to measure traffic and recognize successive visits | 13 months |
_pk_ses.<id>.<hash> | Matomo (SAHAR) | Identify the current browsing session | 30 minutes |
mtm_consent | Matomo (SAHAR) | Remember your consent to analytics | 6 months |
sahar-cookie-consent-v1 (local storage) | SAHAR | Remember your choice in the cookie banner | until you clear it |
Measuring Website audience
| What usage for your data? (Purpose) | Understanding how the Website is used in order to improve it: most‑viewed pages, traffic sources, navigation paths, contact conversions. |
| What data? | Pages visited and time spent ; browser type, operating system and screen size ; approximate country derived from the IP address, which is anonymized before any use ; pseudonymous identifier stored in the _pk_id cookie, allowing successive visits to be recognized. |
| On what basis? (Legal basis) | Your consent, collected via the cookie banner (article 82 of the French Data Protection Act). |
| Retention period | 13 months maximum for detailed data, 25 months for aggregate statistics. |
| Who are the recipients of your data? | SAHAR internal teams only. No transmission to third parties, no cross‑referencing with other processing, no tracking across other websites. |
| Transfers outside EU? | None. The measurement tool is installed on SAHAR servers in France. |
The tool used is called Matomo, a self‑hosted open‑source software. No data is shared with any third party and no advertising profiling is performed.
Withdrawing your consent
You can at any time:
- change your choice via the Cookie settings button displayed in the footer of every page ;
- enable Do Not Track in your browser — this will be respected in priority ;
- use the Matomo opt‑out form.
🔐 Learn more on the security of your data
SAHAR ensures to implement all physical and logical security measures necessary to protect the confidentiality, integrity and availability of your data.
However, certain residual risks remain inherent in the use of the Internet. Remain vigilant in your digital activities.
⚖️ What are your rights on your data?
You have rights on your data processed by SAHAR:
- Access: to be informed about your data processed by SAHAR ;
- Rectify: in case one or several of your data are no longer accurate (e.g. you have a new email address) ;
- Delete: if you no longer want SAHAR to process your data ;
- Object: object to your data being processed by SAHAR for a specific purpose ;
- File a request with the data protection authority (in France, the CNIL).
You can exercise your rights directly:
- By post (SAHAR, 10 rue Fromentin, 75009 PARIS, France) ;
- By email (dpo@sahar.fr).
🔄 Modifications and update of this policy
SAHAR reserves the right to modify this data protection policy at any time. In the event of a change, the updated privacy policy will be published on the Website with the date of the last update. We encourage you to check this page regularly.
📚 References and definitions
- Adequacy decision “Privacy Framework”: European Commission’s decision of 10 July 2023, stating that the United States of America provides an equivalent level of protection for personal data. Transfers of personal data from the EU to certain US entities can therefore take place freely, without any specific framework. To find out more, please consult the CNIL’s dedicated page (available in French only).
- Applicable jurisdiction: this Data Protection Policy is governed by French law and any dispute relating to it will fall within the exclusive jurisdiction of the courts of Paris.
- “Data Privacy Rules”: the law of 6 January 1978 (“Data Protection Law”) consolidated in particular by the General Data Protection Regulation no. 679/2016 (“GDPR”).
- “Personal data” or “Data”: any information relating to an individual who can be identified, directly or indirectly.
- Cookie: a small file stored by a server on a user’s device (computer, phone, etc.) and associated with a web domain. The Website does not place any cookie for tracking purposes.
- Tracker: generic term covering HTTP cookies, invisible pixels, browser‑fingerprinting techniques and any equivalent device used to identify or track a user.
- Audience measurement exempt from consent: exemption provided by the CNIL allowing website‑traffic measurement without obtaining consent, on condition that the purpose is strictly limited to such measurement, that the data are anonymous and used only on behalf of the publisher, that no cross‑referencing with other processing is performed, and that no data are transmitted to third parties or used to track the user across other websites.