Last updated: August 2025
Akyras attaches particular importance to the protection of the personal data of its Customers and Users. This Policy describes the processing carried out in accordance with the General Data Protection Regulation (GDPR – EU 2016/679).
1. Data Controller
- Akyras
- Email: contact@akyras.fr
2. Data collected
Akyras may collect and process the following categories:
- Identification data : surname, first name, company, position.
- Contact details : email, telephone.
- Billing data : VAT, payment information (via Stripe or PayPal).
- Synced bank data : via GoCardless (bank reconciliation only).
- Usage data: connection logs , preferences, navigation.
- Technical data : IP address, server logs, device information.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Account creation and management | Performance of the contract |
| Service delivery (Dolibarr ERP + Akyras modules) | Performance of the contract |
| Invoicing and accounting management | Legal obligation |
| Payment (Stripe, PayPal) | Performance of the contract |
| Bank Sync (GoCardless) | Legitimate Interest / Contract |
| Support and technical assistance | Performance of the contract |
| Security and supervision | Legitimate interest |
| Marketing communication (newsletter) | Consent |
4. Data retention
- Account data: duration of the relationship + 3 years after termination.
- Invoices: 10 years (legal obligation).
- Technical logs: 180 days.
- Marketing data: 3 years from the last contact.
5. Recipients
- Akyras in-house team.
- Hosting providers (Hetzner – EU).
- Payment providers: Stripe and PayPal.
- Bank synchronization provider: GoCardless.
- Technical subcontractors (maintenance, transactional emails).
6. Transfers outside the EU
Some providers (e.g. Stripe, PayPal) may transfer data outside the EU. In this case, guarantees in accordance with the GDPR (Standard Contractual Clauses, Privacy Shield if reactivated) are put in place.
7. Data Security
Akyras implements technical and organisational measures:
- Systematic encryption (LUKS, rclone crypt).
- Enhanced authentication (2FA).
- Logical customer silos.
- Automatic monitoring and backups.
8. Rights of individuals
In accordance with the GDPR, every user has the following rights:
- Access to your data.
- Correction.
- Erasure (“right to be forgotten”).
- Restriction of processing.
- Portability.
- Objection to processing (including marketing).
Exercising rights by email: contact@akyras.fr.
9. Cookies
- Technical cookies that are essential for the operation of the site.
- Analytical cookies (Google Analytics or equivalent) subject to the explicit consent of the user via a cookie banner.
10. Data Breach
In the event of a personal data breach (loss, intrusion, disclosure), Akyras will notify the CNIL within 72 hours and inform the persons concerned when required.
11. Amendments
Akyras reserves the right to modify this Policy. Users will be informed via the website or by email in the event of substantial changes.
12. Contact
Any questions regarding this Policy may be directed to: contact@akyras.fr