Privacy policy

PRIVACY POLICY

Last updated: August 31, 2026

1. Who processes your data

The data controller is LOBBY KLG, a single-shareholder limited liability company (EURL) with share capital of €200, whose registered office is at 8 rue Dancourt, 75018 Paris, France, registered with the RCS of Paris under number 982 680 944.

For any questions relating to your personal data: contact@ciao-lobby.com

We have not appointed a Data Protection Officer (DPO), as this appointment is not mandatory given the nature and volume of our processing activities.

2. What data we collect, why and on what basis

ProcessingData collectedPurposeLegal basisRetention
“Tell us about your project” formName, email, project stage, project type, estimated budget, target opening date, project descriptionReview your request, respond and qualify the projectPre-contractual measures taken at your request (GDPR Art. 6.1.b)3 years from last contact
Budget simulator (Estimate page)Questionnaire responses, email if providedProvide an estimate and ensure sales follow-upConsent / pre-contractual measures3 years from last contact
Newsletter and editorial communicationsEmail, first name, preferencesSend our content and newsConsent (GDPR Art. 6.1.a)Until unsubscribe, then maximum 3 years
B2B commercial prospectingName, professional email, company, positionProfessional outreachLegitimate interest (GDPR Art. 6.1.f)3 years from last contact
Customer relationship managementContact details, billing data, exchangesContract performance and accounting obligationsContract + legal obligation10 years (accounting obligations)
Audience measurementBrowsing data, pages viewed, IP addressUnderstand site usage and improve itConsentMaximum 13 months
Site security and operationConnection logs, IP addressSecurity, abuse prevention, technical loggingLegitimate interest12 months

Mandatory form fields are marked as such. If they are not completed, we will not be able to process your request.

We do not collect any special category data within the meaning of Article 9 of the GDPR, and the website is not intended for children under 15 years of age.

3. Who has access to your data

Your data is accessible to the LOBBY KLG team and to our technical subcontractors, who act on our instructions and under agreements compliant with Article 28 of the GDPR:

ProviderRoleData location
Lovable Labs ABWebsite hosting and deploymentEuropean Union (Sweden)
BrevoEmail sending, form and contact managementEuropean Union (France)
Google (Workspace)Professional emailUnited States — Standard Contractual Clauses
Notion Labs Inc.Request tracking and customer relationship managementUnited States — Standard Contractual Clauses
Zapier Inc.Automation of flows between our toolsUnited States — Standard Contractual Clauses

We do not sell or rent your data to third parties. It may be transmitted to the competent authorities in the event of a legal obligation, as well as to our accountant for administrative management purposes.

Transfers outside the European Union: some providers are based in the United States. These transfers are governed by the European Commission's Standard Contractual Clauses and, where applicable, by these providers' certification under the Data Privacy Framework.

4. Cookies

On your first visit, a banner allows you to accept, refuse or configure cookies. Your choice is retained for 6 months and can be changed at any time via the cookie management link in the footer.

  • Strictly necessary cookies — site operation, security, storage of your consent preferences. Placed without prior consent.
  • Audience measurement cookies — traffic and usage statistics. Subject to your consent.
  • Third-party and embedded content cookies — videos, Instagram or LinkedIn content that may place their own cookies. Subject to your consent.

You can also configure your browser to block cookies, with the risk of altering certain site functionalities.

5. Your rights

In accordance with the GDPR and the French Data Protection Act, you have the following rights:

  • Access — obtain a copy of the data we hold about you
  • Rectification — correct inaccurate or incomplete data
  • Erasure — request deletion of your data
  • Restriction — freeze the use of your data
  • Objection — object to processing based on our legitimate interest, and at any time to commercial prospecting
  • Portability — receive your data in a structured, machine-readable format
  • Withdrawal of consent — at any time, without retroactive effect
  • Post-mortem instructions — define the fate of your data after your death

To exercise these rights, write to us at contact@ciao-lobby.com or by post to LOBBY KLG, 8 rue Dancourt, 75018 Paris, France. We respond within one month. Proof of identity may be requested if there is reasonable doubt about your identity.

If you believe your rights are not being respected, you may file a complaint with the CNIL: 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr

6. Security

We implement appropriate technical and organizational measures to protect your data: encryption of exchanges (HTTPS), access control, enhanced authentication on our tools, regular backups and selection of GDPR-compliant providers.

7. Changes to this policy

This policy may be amended to reflect legal, technical or organizational developments. The date of the last update appears at the top of the page. In the event of a substantial change, we will inform you by an appropriate means.

LOBBY KLG — EURL with share capital of €200 — 8 rue Dancourt, 75018 Paris — RCS Paris 982 680 944 — VAT FR26982680944 — contact@ciao-lobby.com