Privacy policy – Authenk
This Authenk privacy policy explains clearly how Authenk collects, uses, protects and stores your personal data in connection with its certification services. The controller of personal data is Authenk, a French simplified joint-stock company (SAS), whose legal details appear in the site’s Legal notice.
1. Data collected – Authenk privacy policy
We may collect:
- Information supplied when contacting us (email).
- Technical data (logs, IP address, browser) for security.
- Information relating to file certification (fingerprints and technical metadata).
Authenk never stores the files themselves, only their cryptographic fingerprints.
2. Purposes of collection
Data is collected to:
- provide certification services
- enable certificate verification
- protect the platform against abuse
- improve the service
This Authenk privacy policy explains how this data is used.
3. Cookies
Authenk uses technical cookies necessary for the website to operate.
No advertising cookies are used. Users can configure their browsers to refuse all or some cookies. However, refusing strictly necessary cookies may affect the normal operation of the website or some features.
4. Data sharing
Data is never sold.
It may be shared with:
- technical service providers (OVH hosting)
- authorities, only where required by law
5. Retention period
- Technical logs: 12 months
- Emails/contact: for the time needed to process the request
- Certification data (cryptographic fingerprints and technical metadata): kept for as long as necessary to provide the verification service and while the Authenk service is maintained, so the integrity of certified files can be checked.
6. Your rights (GDPR)
You can request:
- access to your data
- rectification
- erasure
- objection to processing
- restriction of processing
- data portability
To exercise your rights:
contact@authenk.com
To learn more about your rights, visit the website of the CNIL.
7. Security
We use technical measures (cryptographic hashes, HTTPS and service isolation) to protect data.
8. GDPR contact
For any question:
contact@authenk.com
This information is handled with a continuing commitment to transparency.
This Authenk privacy policy also describes the processing practices used by the service.
Legal basis for processing
Authenk processes data on several legal bases defined by the General Data Protection Regulation (GDPR).
When a user creates an account or uses the certification service, processing is based on performance of a contract. Some technical data is processed under Authenk’s legitimate interests, particularly to secure the service, prevent abuse and ensure the platform works properly.
In specific cases, such as sending service-related communications, the legal basis may be a legal obligation or legitimate interest.
Personal data is not processed on the basis of consent unless explicitly stated, particularly for certain optional cookies.
Transfers outside the European Union
By default, Authenk does not transfer personal data outside the European Union.
The platform’s technical services are hosted in data centers in France managed by OVH.
In the exceptional event that a provider outside the EU contributes to maintenance or an additional service, Authenk undertakes to verify that appropriate safeguards are in place:
standard contractual clauses, a level of protection considered adequate by the European Commission or GDPR-recognized mechanisms.
In all cases, no transfer will take place without a strict legal framework.
Procedures in the event of a data breach
Authenk applies internal procedures to detect and address security incidents promptly.
In the event of a personal data breach (unauthorized access, loss or disclosure), affected users would be informed as soon as possible in accordance with regulatory requirements.
An internal incident log is maintained to document events and corrective measures.
Authenk also takes preventive measures, including system monitoring, access restrictions, separation of technical environments and modern encryption protocols.
These measures reduce risks and provide protection appropriate to the data processed.
To get started with Authenk, create an account on the Sign up page, explore our Pricing or learn more about the service on the About Authenk page.
9. Minimum age
Access to the service and minimum age
Authenk services are intended for adults or, alternatively, people aged at least fifteen (15) who have the authorization of a legal representative, in accordance with applicable regulations.
