Data protection

Privacy Policy

This privacy policy describes how Nankuru, as data controller, collects, uses and protects your personal data in the context of the Yuimaru platform, in accordance with the General Data Protection Regulation (GDPR).

Data controller

The data controller for data collected on Yuimaru is:

  • Nankuru SARL
  • 65 avenue Lac du Bourget
  • 73370 Le Bourget-du-Lac, France
  • SIRET : 942 754 326 00018
  • Email : contact@nankuru.fr

Data collected

Yuimaru only collects data necessary for the operation of the platform and for connecting professionals:

  • Identification and contact data: first name, last name, professional email, phone number (optional), job title.
  • Professional data: company, role, skills, certifications, areas of operation, languages.
  • Connection and security data: IP address, connection logs, language preferences.
  • User-generated content: company profiles, opportunities, messages, help requests, attachments.

Purposes and legal basis

Data is processed for the following purposes, based on distinct legal grounds:

  • Performance of the contract (ToS): account creation and management, profile display, networking, messaging, mutual aid and opportunities.
  • Legitimate interest of Nankuru: manual verification of companies, fraud prevention, service security, platform improvement.
  • Legal obligation: retention of accounting and tax data, response to judicial requests.
  • Consent: marketing communications or non-essential cookies, where applicable.

Recipients of data

Data is intended for the following recipients:

  • Nankuru teams responsible for validation, support and technical supervision.
  • Other Yuimaru members, within the limits of the visibility rules defined by the user and the Trust Charter.
  • Technical subcontractors (hosting, authentication, email delivery) bound by contractual guarantees.

Nankuru does not sell or rent your personal data to third parties. Data is not used for advertising purposes outside the service.

Retention period

Data is retained for as long as necessary for the purposes pursued:

  • Active account data: retained as long as the account is active.
  • Deleted account data: retained for 13 months after deletion, unless a longer legal retention obligation applies.
  • Connection data and logs: retained for up to 12 months, unless security or legal requirements dictate otherwise.
  • Supporting documents (certifications): retained for the displayed validity period, then deleted or renewed.

Your rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access: obtain a copy of the data concerning you.
  • Right to rectification: correct inaccurate or incomplete data.
  • Right to erasure ('right to be forgotten'): request deletion of your data, subject to legal retention obligations.
  • Right to restriction of processing: restrict the use of your data in certain cases.
  • Right to data portability: retrieve your data in a structured, commonly used format.
  • Right to object: object to processing based on legitimate interest, including for marketing purposes.
  • Right to withdraw your consent at any time, for processing based on consent.

To exercise these rights, please contact Nankuru at contact@nankuru.fr. Proof of identity may be requested to prevent impersonation.

Security

Nankuru implements appropriate technical and organizational measures to protect your data: secure authentication, encrypted communications (HTTPS), access controls, subcontractor security policies and regular backups.

In the event of a personal data breach likely to result in a high risk to your rights and freedoms, Nankuru will inform you as soon as possible in accordance with applicable regulations.

Cookies and trackers

Yuimaru uses cookies strictly necessary for the technical operation of the platform (authentication, security, language preferences). No advertising or analytics cookies are placed without your prior consent.

You may configure your browser to refuse cookies; some platform services may then be degraded.

Subcontractors and transfers

Nankuru uses subcontractors located in the European Union or offering equivalent guarantees. Data is not transferred outside the European Economic Area without an appropriate protection mechanism.

The list of main subcontractors is available upon request from Nankuru.

Changes to this policy

Nankuru may update this privacy policy to reflect changes to the platform or applicable regulations. Users will be notified by email or via the platform.

GDPR / DPO contact

For any questions regarding the protection of your personal data or to exercise your rights, please contact Nankuru at contact@nankuru.fr. You may also lodge a complaint with the CNIL (www.cnil.fr).