This Privacy Policy explains how Rahat.fr collects, uses, stores, protects and processes personal data when you visit our website, contact us, create an account, request or purchase services, or otherwise interact with our digital services.
Rahat.fr is committed to protecting personal data and respecting applicable data-protection laws, including the General Data Protection Regulation (GDPR/RGPD) and applicable French data-protection legislation.
1. Data Controller:
For personal data processed through this website and our services, the data controller is:
Rahat.fr
Legal form: Entrepreneur individuel (EI)
Registered in France
SIREN: 990 334 369
SIRET (Head Office): 990 334 369 00024
VAT Number: FR13 990334369
Registered location: Caen, France
Website: www.rahat.fr
Email: info@rahat.fr
Depending on a particular service or contractual arrangement, Rahat.fr may also process certain personal data on behalf of a customer as a data processor. Where applicable, such processing may be governed by a separate Data Processing Agreement (DPA).
2. Personal Data We May Collect:
Depending on how you interact with Rahat.fr, we may collect or process different categories of personal data, including:
• Identity information, such as your name, surname or username.
• Contact information, such as your email address, telephone number and postal address.
• Account information, including account identifiers, profile information and authentication-related data.
• Business and professional information, such as company name, position, business requirements and project information.
• Information submitted through contact forms, quotation requests, support requests, appointment forms, job applications, course registrations, event registrations or other website forms.
• Transaction and billing information relating to purchases, subscriptions, invoices and payments.
• Technical information, such as IP address, browser type, device information, operating system, language, time zone and technical logs.
• Website usage information, such as pages visited, interactions, referring pages and other analytics information, subject to applicable consent requirements.
• Communications exchanged with Rahat.fr through email, support channels or other communication services.
• Files, documents or other content that you voluntarily provide when using our services.
• Cookie and preference information as described in our Cookie Policy.
We seek to collect only the personal data that is relevant and reasonably necessary for the purposes for which it is processed.
3. How We Collect Personal Data:
We may collect personal data:
• Directly from you when you complete a form, create an account, contact us, request a quotation, make a purchase, subscribe to a service or otherwise provide information.
• Automatically through our website, servers, cookies and similar technologies.
• Through third-party services or integrations that you choose to use with our services.
• From business customers or authorized users where they provide information necessary for us to deliver contracted services.
• From publicly available sources where permitted by applicable law.
4. Purposes of Processing:
We may process personal data for the following purposes:
• To operate, maintain and secure our website and services.
• To respond to inquiries, contact requests and support requests.
• To prepare and manage quotations, orders, contracts and customer relationships.
• To create and manage user accounts.
• To provide purchased, subscribed or requested services.
• To process transactions, billing, invoicing and payment-related activities.
• To provide customer service and technical support.
• To manage appointments, events, courses, applications and registrations.
• To communicate important administrative, contractual, technical or security information.
• To improve our website, products, services and user experience.
• To measure website performance and usage where legally permitted.
• To prevent fraud, abuse, unauthorized access and other security incidents.
• To comply with accounting, tax, legal and regulatory obligations.
• To establish, exercise or defend legal claims.
• To send marketing or promotional communications where permitted by law or where the required consent has been obtained.
• To provide AI-powered, automated or integrated digital services when requested by the user or customer.
5. Legal Bases for Processing:
Depending on the circumstances, Rahat.fr may rely on one or more of the following legal bases under applicable data-protection law:
• Consent — where you have freely given consent for a specific processing activity.
• Performance of a contract — where processing is necessary to provide a service, fulfil an order or perform a contract with you.
• Pre-contractual measures — where processing is necessary to respond to a request before entering into a contract, such as preparing a quotation.
• Legal obligation — where processing is required to comply with applicable legal, accounting, tax or regulatory requirements.
• Legitimate interests — where processing is necessary for our legitimate business interests or those of a third party, provided that those interests are not overridden by your fundamental rights and freedoms.
Where processing is based on consent, you may withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
6. Cookies and Similar Technologies:
Rahat.fr may use cookies and similar technologies for purposes including:
• Essential website functionality.
• Security and session management.
• Remembering user preferences.
• Website analytics and performance measurement.
• Marketing or advertising where applicable and subject to the required consent.
Non-essential cookies requiring consent should not be activated until the appropriate consent has been obtained.
You can accept, decline or manage applicable cookie preferences through our cookie-consent interface.
Further information is available in our Cookie Policy.
7. Account and Authentication Data:
If you create an account, we may process information required to create, authenticate, secure and manage that account.
Users are responsible for keeping their login credentials confidential and should notify Rahat.fr promptly if they suspect unauthorized access to their account.
Passwords should be stored using appropriate security mechanisms rather than in readable form where the relevant service is controlled by Rahat.fr.
8. Payment Information:
Where paid services are offered, payments may be processed through third-party payment service providers.
Depending on the payment method, the payment provider may collect information such as card details, bank information, billing details or transaction identifiers.
Rahat.fr does not necessarily receive or store complete payment-card information when payments are processed directly by an independent payment provider.
Payment providers process information according to their own terms, privacy policies and applicable legal obligations.
9. Artificial Intelligence and Automated Services:
Some Rahat.fr services may use artificial intelligence, automation, APIs or third-party AI technology providers.
When you intentionally submit information, prompts, files or other content to an AI-enabled service, relevant information may need to be processed to provide the requested functionality.
Depending on the service configuration, certain information may be transmitted to technology providers acting as processors, subprocessors or independent controllers.
Users and business customers should avoid submitting unnecessary sensitive or confidential personal data to AI tools unless the relevant service is specifically designed and authorized to process such information.
Where appropriate, additional information concerning AI-related processing may be provided within the relevant service, contractual documentation or our AI transparency information.
10. Third-Party Services and Integrations:
Rahat.fr may use third-party service providers for functions such as:
• Website hosting and infrastructure.
• Email delivery.
• Cloud storage.
• Analytics.
• Customer support.
• Payment processing.
• Authentication.
• Communications.
• Cybersecurity and fraud prevention.
• Artificial intelligence and automation.
• Social media and API integrations.
• Other technical services necessary to operate our business.
These providers may process personal data only to the extent necessary for their respective services and according to the applicable contractual and legal framework.
11. Data Recipients:
Personal data may be accessible, where necessary, to:
• Authorized Rahat.fr personnel.
• Contractors and service providers supporting our operations.
• Hosting, cloud and infrastructure providers.
• Payment and financial service providers.
• IT, cybersecurity and technical support providers.
• Communication and email service providers.
• AI and automation providers where applicable.
• Professional advisers, such as accountants or legal advisers, where necessary.
• Public authorities or courts where disclosure is legally required.
We do not sell personal data to third parties.
12. International Data Transfers:
Some service providers or technical infrastructure used by Rahat.fr may be located outside France or the European Economic Area (EEA), or may process data from such locations.
Where personal data is transferred outside the EEA, Rahat.fr seeks to use appropriate safeguards where required by applicable law, which may include:
• An adequacy decision adopted by the European Commission.
• Standard Contractual Clauses (SCCs).
• Other legally recognized transfer mechanisms or safeguards.
Additional measures may be implemented where appropriate considering the nature of the transfer and associated risks.
13. Data Retention:
Rahat.fr retains personal data only for as long as reasonably necessary for the purpose for which it was collected and to comply with applicable contractual, accounting, tax, security and legal obligations.
Retention periods may vary depending on the category of information and the relevant processing purpose.
For example:
• Contact and inquiry information may be retained for the period necessary to respond and manage subsequent communications.
• Customer and contractual information may be retained throughout the business relationship and for applicable legal limitation periods afterward.
• Accounting and invoicing documents may be retained for periods required by applicable law.
• Account data may be retained while an account remains active and for an appropriate period after closure where necessary.
• Security logs may be retained for a limited period appropriate to security and fraud-prevention purposes.
• Marketing information may be retained until consent is withdrawn, an objection is made or the applicable retention period expires.
Data may be retained for a longer period where necessary to establish, exercise or defend legal claims or comply with a legal obligation.
14. Data Security:
Rahat.fr implements reasonable technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, loss, destruction or misuse.
Depending on the relevant system, measures may include access controls, authentication mechanisms, encryption, backups, security monitoring, software updates and restricted administrative access.
However, no internet-based system or method of electronic storage can guarantee absolute security.
15. Personal Data Breaches:
If a personal data breach occurs, Rahat.fr will assess the incident and take appropriate measures in accordance with applicable data-protection requirements.
Where legally required, the competent supervisory authority and affected individuals will be notified within the applicable legal framework.
16. Your GDPR Rights:
Subject to applicable conditions and exceptions, you may have the following rights concerning your personal data:
• Right of access — to obtain information about whether and how your personal data is processed and to receive a copy where applicable.
• Right to rectification — to request correction of inaccurate or incomplete personal data.
• Right to erasure — to request deletion of personal data where the legal requirements are satisfied.
• Right to restriction of processing — to request that processing be restricted in certain circumstances.
• Right to data portability — to receive certain personal data in a structured, commonly used and machine-readable format where applicable.
• Right to object — to object to certain processing based on legitimate interests and to object to direct marketing.
• Right to withdraw consent — where processing is based on consent.
• Rights relating to certain automated decisions — where applicable under data-protection law.
The exercise of these rights may be subject to verification of identity and applicable legal limitations.
17. Exercising Your Rights:
To exercise your data-protection rights or ask a privacy-related question, contact:
Rahat.fr
Email: info@rahat.fr
Website: www.rahat.fr
Please clearly describe your request and provide the information reasonably necessary for us to identify the relevant data.
We may request additional information where reasonably necessary to verify your identity and protect personal data against unauthorized disclosure.
18. Right to Lodge a Complaint:
If you believe that the processing of your personal data infringes applicable data-protection law, you have the right to lodge a complaint with the competent supervisory authority.
In France, the competent data-protection supervisory authority is the Commission Nationale de l'Informatique et des Libertés (CNIL).
You may also contact Rahat.fr first so that we can review and, where appropriate, address your concern.
19. Marketing Communications:
Where permitted, Rahat.fr may send information about services, products, updates or offers.
Where consent is legally required, marketing communications will be sent only after the appropriate consent has been obtained.
You may withdraw your consent or object to direct marketing at any time using the unsubscribe mechanism provided in the communication or by contacting us.
20. Children's Privacy:
Rahat.fr services are primarily intended for businesses, professionals and users capable of entering into the relevant services or agreements.
We do not intentionally seek to collect personal data from children through services that are not intended for them.
Where a specific service is intended for younger users, appropriate information, consent and safeguards will be implemented where required by applicable law.
21. Third-Party Links:
Our website may contain links to third-party websites, social networks, applications or services.
Rahat.fr is not responsible for the privacy practices of independent third parties. Users should review the privacy policies of those services before providing personal information.
22. Changes to this Privacy Policy:
Rahat.fr may update this Privacy Policy to reflect changes to our services, technologies, processing activities, business practices or applicable legal requirements.
The latest version will be published on this page.
Where a change materially affects the way personal data is processed, additional notice may be provided where appropriate or legally required.
23. Contact:
For questions, requests or concerns relating to this Privacy Policy or the processing of personal data, please contact:
Rahat.fr
Caen, France
Email: info@rahat.fr
Website: www.rahat.fr
Last updated: 9 August 2026