Privacy Policy and Data Protection
Last update: 2026.05.29
This policy is addressed to every user of SAHAR’s website https://sahar.fr (hereinafter referred to as the “Website”) in order to help you understand how your data is processed. This Privacy Policy informs you regarding the processing of your personal data while using the Website.
SAHAR is committed to protecting your data. We believe in transparency and data confidentiality. As the data controller, we ensure that all processing activities are carried out in compliance with data protection rules including the General Data Protection Regulation (“GDPR”), as described in this Privacy Policy.
🔎 Learn more about the use of your data
Responding to your contact requests
| What usage for your data? (Purpose) | Respond to your requests sent from the contact form. |
| What data? Providing the data marked as mandatory is necessary to respond to your request. | Last name ; first name ; email address ; request content ; organization (optional). |
| On what basis? (Legal basis) | Legitimate interest. |
| Retention period | The amount of time we need to respond to your request. |
| Who are the recipients of your data? The data collected and processed is not sold or rented, free of charge or for a fee, to third parties. | Internal teams in charge of answering your requests ; website hosting services ; email provider. |
| Transfers outside EU? SAHAR prefers sovereign solutions when possible. | United States of America (email provider). Your data will benefit from an equivalent level of protection (European Commission adequacy decision: for more information, please refer to the “references” section). |
Cookies and trackers
What is a cookie? A cookie is a small file stored by a server on a user’s device (computer, phone, etc.) and associated with a web domain. It allows the website to recognize you on subsequent visits, store information about you and, in some cases, track your browsing for statistical or advertising purposes. The broader term “tracker” covers cookies as well as invisible pixels, browser‑fingerprinting techniques and any equivalent device.
The principle. Placing a cookie or tracker on your device requires your prior consent, unless it is strictly necessary to provide the requested service or falls under an exemption provided by the CNIL — in particular audience measurement strictly limited to that purpose.
On this Website. Audience measurement is performed with Matomo, configured to be exempt from consent under the CNIL guidelines: no cookie or tracker is placed on your device, your IP address is anonymized (2 bytes) before any use, the data is neither cross‑referenced with other processing nor transmitted to third parties, and no tracking is performed across other websites. No consent banner is therefore required. If your browser signals that you do not wish to be tracked (Do Not Track), no measurement takes place, and you may object to the measurement at any time (see “Objecting to the measurement” below).
For more information on cookies and the applicable rules, see the CNIL guidelines (in French).
Cookies and trackers placed
None. The Website does not place any cookie or tracker on your device, including for audience measurement: Matomo is configured without cookies (cookieless).
Measuring Website audience
| What usage for your data? (Purpose) | Understanding how the Website is used in order to improve it: most‑viewed pages, traffic sources, navigation paths, contact conversions. |
| What data? | Pages visited and time spent ; browser type, operating system and screen size ; approximate country derived from the IP address, which is anonymized (2 bytes) before any use. No identifier is stored on your device (cookieless measurement). |
| On what basis? (Legal basis) | Exemption from consent for audience measurement, provided by the CNIL guidelines: the purpose is strictly limited to such measurement, with no cross‑referencing or transmission to third parties. |
| Retention period | Audience statistics are kept for 25 months maximum. |
| Who are the recipients of your data? | SAHAR internal teams only. No transmission to third parties, no cross‑referencing with other processing, no tracking across other websites. |
| Transfers outside EU? | None. The measurement tool is installed on SAHAR servers in France. |
The tool used is called Matomo, a self‑hosted open‑source software. No data is shared with any third party and no advertising profiling is performed.
Objecting to the measurement
Although audience measurement is exempt from consent, you can object to it at any time:
- enable Do Not Track in your browser — this will be respected ;
- use the Matomo opt‑out form.
🔐 Learn more on the security of your data
SAHAR ensures to implement all physical and logical security measures necessary to protect the confidentiality, integrity and availability of your data.
However, certain residual risks remain inherent in the use of the Internet. Remain vigilant in your digital activities.
⚖️ What are your rights on your data?
You have rights on your data processed by SAHAR:
- Access: to be informed about your data processed by SAHAR ;
- Rectify: in case one or several of your data are no longer accurate (e.g. you have a new email address) ;
- Delete: if you no longer want SAHAR to process your data ;
- Object: object to your data being processed by SAHAR for a specific purpose ;
- File a request with the data protection authority (in France, the CNIL).
You can exercise your rights directly:
- By post (SAHAR, 10 rue Fromentin, 75009 PARIS, France) ;
- By email (dpo@sahar.fr).
🔄 Modifications and update of this policy
SAHAR reserves the right to modify this data protection policy at any time. In the event of a change, the updated privacy policy will be published on the Website with the date of the last update. We encourage you to check this page regularly.
📚 References and definitions
- Adequacy decision “Privacy Framework”: European Commission’s decision of 10 July 2023, stating that the United States of America provides an equivalent level of protection for personal data. Transfers of personal data from the EU to certain US entities can therefore take place freely, without any specific framework. To find out more, please consult the CNIL’s dedicated page (available in French only).
- Applicable jurisdiction: this Data Protection Policy is governed by French law and any dispute relating to it will fall within the exclusive jurisdiction of the courts of Paris.
- “Data Privacy Rules”: the law of 6 January 1978 (“Data Protection Law”) consolidated in particular by the General Data Protection Regulation no. 679/2016 (“GDPR”).
- “Personal data” or “Data”: any information relating to an individual who can be identified, directly or indirectly.
- Cookie: a small file stored by a server on a user’s device (computer, phone, etc.) and associated with a web domain. The Website does not place any cookie for tracking purposes.
- Tracker: generic term covering HTTP cookies, invisible pixels, browser‑fingerprinting techniques and any equivalent device used to identify or track a user.
- Audience measurement exempt from consent: exemption provided by the CNIL allowing website‑traffic measurement without obtaining consent, on condition that the purpose is strictly limited to such measurement, that the data are anonymous and used only on behalf of the publisher, that no cross‑referencing with other processing is performed, and that no data are transmitted to third parties or used to track the user across other websites.