How FALCON protects your personal data in compliance with GDPR
The company KG CONSEILS & SERVICES, operating under the FALCON Référencement brand (hereinafter "FALCON", "we" or "our"), attaches fundamental importance to protecting the personal data of its users (hereinafter "you" or "the User").
The purpose of this Privacy Policy is to inform you about how we collect, use, store and protect your personal data when you use our platform accessible at falcon-referencement.fr and our associated services.
This policy is established in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR), as well as French Law No. 78-17 of 6 January 1978 on information technology, data files and civil liberties, as amended.
By using our platform, you accept the practices described in this Privacy Policy. We invite you to read it carefully.
The controller of personal data collected via the FALCON platform is:
KG CONSEILS & SERVICES (FALCON Référencement)
SAS (Simplified Joint-Stock Company)
SIREN: 911 242 287 — SIRET: 911 242 287 00017
VAT number: FR26 911242287
Registered office: 6 Courtiaux La Chaise, 87130 Neuvic-Entier, France
President: Kévin Godeby
Email: contact@falcon-referencement.fr
FALCON has appointed a Data Protection Officer (DPO) whom you can contact for any questions regarding the processing of your personal data:
Email: dpo@falcon-referencement.fr
Mail: DPO FALCON Référencement — 6 Courtiaux La Chaise, 87130 Neuvic-Entier, France
As part of using the FALCON platform, we collect and process the following categories of personal data:
Your personal data is collected and processed for the following purposes:
| Purpose | Description |
|---|---|
| Service provision | Account creation and management, search engine submission of your sites, SEO audits, GEO visibility tracking, JARVIS-AI assistant functionality |
| Billing | Subscription management, payment processing via Stripe, invoice issuance, payment reminder management |
| Service improvement | Aggregated analysis of platform usage, bug identification and improvement areas, new feature development |
| Communication | Sending service-related notifications (search engine alerts, audit results, updates), newsletters (with consent), information about new features |
| Security | Fraud detection and prevention, protection against unauthorized access, platform security |
| Legal obligations | Compliance with accounting and tax obligations, response to requests from competent authorities |
The processing of personal data carried out by FALCON is based on the following legal grounds:
The processing of your data is necessary for the performance of the subscription agreement to which you have subscribed. This includes creating your account, providing Services (submissions, audits, analytics, GEO), managing your subscription and billing.
Some processing is based on your explicit consent, in particular sending newsletters and marketing communications, placing non-essential cookies and using your data for personalized service improvement purposes. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before such withdrawal.
Some processing is based on FALCON's legitimate interest, particularly improving the platform and Services, securing the platform and preventing fraud, and generating aggregated and anonymized statistics.
Some processing is necessary to comply with our legal obligations, particularly the retention of billing data in accordance with French accounting and tax obligations.
Your personal data is retained for the following periods:
| Data type | Retention period |
|---|---|
| Account data (name, email, sites) | Active account duration + 3 years after last activity or account deletion |
| Billing data | 10 years from the end of the financial year, in accordance with French tax obligations (article L.123-22 of the Commercial Code) |
| Browsing and analytics data | 25 months maximum, in accordance with CNIL recommendations |
| Connection logs | 12 months, in accordance with the law on confidence in the digital economy (LCEN) |
| Usage data (audits, submissions) | Active account duration + 30 days after termination |
| Cookies | 13 months maximum |
Upon expiration of these periods, data is permanently deleted or irreversibly anonymized.
Your personal data may be communicated to the following categories of recipients, in strict compliance with the principle of minimization:
| Subcontractor | Purpose | Location |
|---|---|---|
| Stripe, Inc. | Payment processing and subscription management | USA (EU standard contractual clauses) |
| Hostinger International Ltd. | Platform and data hosting | Europe (Lithuania / Cyprus) |
| OVH SAS | Domain name registration | France (Roubaix) |
| AI Providers (Anthropic, OpenAI, Mistral, Google) | AI processing for JARVIS-AI and GEO optimizations | Anonymized API calls — no personal data transmitted |
Calls to the APIs of artificial intelligence providers (Anthropic/Claude, OpenAI/GPT, Mistral, Google/Gemini) are made anonymously. Only technical data necessary for SEO and GEO optimization is transmitted (HTML structure, meta tags, page text content). No personally identifiable data (name, email, IP address) is transmitted to AI providers. Calls are made with strict instructions for non-retention of data by providers.
Your data may be communicated to competent judicial, administrative or tax authorities, upon duly justified request and under the conditions provided by law.
FALCON never sells, rents or shares your personal data with third parties for commercial or advertising purposes.
All your personal data is hosted on servers located in Europe (Hostinger), within the European Union. Domain names are registered with OVH (France).
As part of using certain subcontractors, data transfers outside the European Economic Area (EEA) may occur, particularly with Stripe (United States) for payment processing.
These transfers are governed by the following safeguards, in accordance with Chapter V of the GDPR:
Calls to AI provider APIs are made with anonymized data and do not constitute a transfer of personal data within the meaning of the GDPR.
In accordance with the GDPR and the French Data Protection Act, you have the following rights regarding your personal data:
You have the right to obtain confirmation that your personal data is being processed and to access all such data, as well as information relating to its processing (purposes, categories, recipients, retention period).
You have the right to request the rectification of your personal data if it is inaccurate, incomplete or outdated. You can directly modify your information from your "Account" section on the platform.
You have the right to request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, when you withdraw your consent, or when the processing is unlawful. This right does not apply when processing is necessary to comply with a legal obligation.
You have the right to receive your personal data in a structured, commonly used and machine-readable format (JSON, CSV). You can export your data (sites, audits, reports, analytics) directly from your FALCON dashboard.
You have the right to object at any time to the processing of your personal data based on legitimate interest, including profiling. You may also object to the processing of your data for direct marketing purposes at any time and without reason.
You have the right to request the restriction of processing of your personal data in certain cases provided by the GDPR, particularly when you contest the accuracy of the data or when the processing is unlawful.
In accordance with the Data Protection Act, you have the right to define directives relating to the retention, deletion and communication of your personal data after your death.
To exercise any of these rights, send your request by email to dpo@falcon-referencement.fr, accompanied by a copy of your identity document. We undertake to respond within a maximum period of 30 days.
In case of an unsatisfactory response, you have the right to lodge a complaint with the CNIL (French Data Protection Authority): www.cnil.fr.
FALCON uses cookies and similar technologies to ensure the proper functioning of the platform and improve your experience. A cookie is a small text file placed on your device (computer, tablet, smartphone) when visiting a website.
| Type | Purpose | Duration | Consent |
|---|---|---|---|
| Strictly necessary cookies | Authentication, security (CSRF), display preferences (light/dark theme), user session | Session or 12 months | Not required |
| Analytics cookies | Platform audience measurement, user journey analysis, identification of most visited pages | 13 months | Required |
| Functional cookies | Storage of user preferences (language, dashboard display, recently viewed sites) | 12 months | Required |
During your first visit to the platform, a banner informs you of the use of cookies and allows you to accept or refuse non-essential cookies.
You can modify your cookie preferences at any time from your account settings or by configuring your browser:
Refusing analytical and functional cookies does not affect the basic functioning of the platform, but may limit certain personalization features.
The FALCON tracking pixel installed on user sites collects anonymized browsing data (page views, traffic source, bounce rate). This data is used exclusively to provide statistics in the user's dashboard. IP addresses are anonymized before storage. The pixel does not place any cookies on visitors to user sites.
FALCON implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk, in accordance with Article 32 of the GDPR:
FALCON reserves the right to modify this Privacy Policy at any time to adapt it to changes in the platform, legislation or recommendations from the CNIL.
In case of substantial modification, you will be informed by email at the address associated with your account at least 15 days before the changes take effect. The date of the last update is indicated at the bottom of this page.
We encourage you to regularly consult this page to learn about any changes. Continued use of the platform after notification of the update constitutes acceptance of the new provisions.
For any questions regarding this Privacy Policy or to exercise your rights regarding personal data, you can contact our Data Protection Officer:
Email: dpo@falcon-referencement.fr
Mail: DPO KG CONSEILS & SERVICES (FALCON Référencement), 6 Courtiaux La Chaise, 87130 Neuvic-Entier, France
We undertake to process your request within a maximum period of 30 days from receipt. This period may be extended by 60 days in case of complex requests, in which case you will be informed of this extension.
If you believe that the processing of your personal data constitutes a violation of the GDPR, you have the right to lodge a complaint with the competent supervisory authority:
3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
Phone: 01 53 73 22 22
Website: www.cnil.fr
Fill out the form, our team will contact you within 24 hours.