Privacy Policy

When using the Carthage application (published by Narok), we place paramount importance on respecting your privacy and protecting your personal data, in compliance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (Loi Informatique et Libertés).

1. Data Controller

Personal data collected through the Carthage application is processed by Narok.
Data Protection Officer (DPO) Contact: contact@narok.fr

2. Collected Data

We limit data collection to what is strictly necessary (data minimization):

• Identification details: Last name, first name, email address (during account creation).
• Connection and technical data: IP address, connection logs, types of requests made during phishing simulations.
• Campaign-related data: Engagement results of targeted employees during training exercises.

3. Purposes and Legal Basis

Your data is processed for the following purposes:

• Provision of the service: User account management and execution of awareness campaigns (Legal basis: performance of a contract or legitimate interest).
• Security and traceability: Ensuring security and combating fraud (Legal basis: legal obligation).

4. Retention Period

Data is retained only for the time strictly necessary to fulfill the purposes for which it was collected. For example, simulation campaign logs are kept for [Specify duration, e.g., 1 year] after the campaign has concluded.

5. Your Rights

In accordance with applicable regulations, you have the following rights regarding your personal data:

• Right of access and right to rectification of your data.
• Right to erasure (right to be forgotten).
• Right to restriction and right to object to processing.
• Right to data portability of your data.

To exercise your rights, you can contact us at the following email address: dpo@narok.fr. If you believe, after contacting us, that your data rights are not respected, you may submit a complaint to the CNIL (Commission Nationale de l'Informatique et des Libertés) in France.