Last updated: March 2026.
Who we are
Our website address is: https://isibaniformation.com.
This website is operated by Isibani, a business based in France and trading as Isibani Formation.
Data Controller
Isibani
Dijon, FRANCE
info@isibaniformation.com
Isibaniformation.com
For any questions about this Privacy Policy or the processing of your personal data, you may contact us at: info@isibaniformation.com
Scope of this policy
This Privacy Policy explains how Isibani Formation collects, uses, stores, and protects personal data when you:
- visit our website;
- contact us by form, email, or phone;
- request information about our services;
- register for training or communications;
- use our website and interact with cookies or analytics tools.
We process personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and applicable French rules.
Personal data we may collect
Depending on your interaction with us, we may collect:
Information you provide directly
- full name;
- email address;
- phone number;
- company or organization name;
- job title;
- training request details;
- any information you include in your message.
Information collected automatically
When you browse our website, we may collect certain technical data, such as:
- IP address;
- browser type and version;
- device type;
- operating system;
- pages visited;
- date and time of visit;
- referring website;
- cookie-related or analytics data.
Information related to service delivery
If you request or attend training, we may also process data needed to manage the relationship, such as:
- registration details;
- billing information;
- training participation records;
- service-related communications.
Why we use your data
We may use your personal data to:
- respond to your inquiries;
- provide information about our services;
- manage registrations and deliver training;
- communicate with you about your requests or services;
- improve our website and user experience;
- ensure website security and prevent misuse;
- comply with legal and regulatory obligations;
- establish, exercise, or defend legal claims where necessary.
Legal bases for processing
Under the GDPR, personal data processing must rely on a valid legal basis, such as consent, contract, legal obligation, or legitimate interests. CNIL also highlights that the legal basis must be clearly stated in the information notice.
At Isibani Formation, we generally rely on:
- Consent — for example, when you subscribe to optional communications or accept non-essential cookies;
- Pre-contractual measures — when you contact us to request information, a quote, or details before entering into an agreement;
- Performance of a contract — when processing is necessary to provide training or related services;
- Legal obligation — when we must retain or disclose information to comply with the law;
- Legitimate interests — when necessary to improve services, manage the website, or secure our business activities, provided your rights do not override those interests.
Who may receive your data
Your personal data is shared only where necessary and may be accessed by:
- authorized members of our team;
- website hosting providers;
- email and communication service providers;
- IT maintenance or security providers;
- analytics providers;
- invoicing or payment providers, where applicable;
- competent public authorities where required by law.
We require service providers acting on our behalf to process personal data only on documented instructions and with appropriate safeguards.
International transfers
If some of our service providers process data outside the European Economic Area (EEA), we will ensure that appropriate safeguards are in place, such as an adequacy decision or approved contractual safeguards where required. The GDPR requires transparency about transfers outside the EEA and the safeguards used.
Data retention
We keep personal data only for as long as necessary for the purposes for which it was collected, and to meet legal, accounting, or administrative obligations. CNIL states that the privacy notice should specify the retention period, or at least the criteria used to determine it.
As a general rule:
- contact requests: 12 months
- client and training administration data: 12 months
- billing and accounting data: 12 months
- newsletter data: until you unsubscribe or withdraw consent
- cookie choices: for the duration applicable to the cookie or consent mechanism
Once retention is no longer necessary, the data is deleted or anonymized, where appropriate.
Your rights
Under the GDPR, you may have the right to:
- access your personal data;
- rectify inaccurate or incomplete data;
- request erasure in certain cases;
- request restriction of processing in certain cases;
- object to certain processing;
- withdraw your consent at any time where processing is based on consent;
- request data portability where applicable.
CNIL also explains that individuals must be informed about these rights and how to exercise them.
To exercise your rights, please contact us at: info@isibaniformation.com.
We may request proof of identity where necessary to verify your request and protect your data.
You also have the right to lodge a complaint with the CNIL, the French data protection authority, if you believe your personal data has been processed unlawfully.
Cookies and similar technologies
Our website may use cookies or similar technologies to ensure proper operation, improve performance, analyze traffic, and enhance your experience.
Some cookies are strictly necessary for the website to function and do not require prior consent. Other cookies, especially non-essential cookies used for analytics, personalization, or advertising, may require your consent before they are placed on your device. CNIL states that consent is generally required for non-essential trackers, subject to limited exceptions.
Where required, our cookie banner allows you to:
- accept cookies;
- refuse cookies;
- customize your preferences.
You may also change your preferences at any time through: info@isibaniformation.com.
Types of cookies we may use
- Strictly necessary cookies
- Analytics cookies
- Functional cookies
- Third-party cookies, where applicable
- Google Analytics
Data security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, loss, or destruction. The GDPR requires security measures appropriate to the risk, and CNIL publishes practical guidance on personal-data security for organizations.
However, no system can guarantee absolute security.
Third-party websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to read their privacy policies before submitting personal data.
Children
Our website and services are not intended for children unless expressly stated. We do not knowingly collect personal data from children without an appropriate legal basis and, where required, the involvement of a parent or legal guardian.
Changes to this policy
We may update this Privacy Policy from time to time to reflect legal, technical, or operational changes. Any update will be posted on this page with a revised Last updated date.
Contact
For any questions about this Privacy Policy or your personal data, please contact:
Isibani
Trading as: Isibani Formation
Dijon, FRANCE
info@isibaniformation.com
Isibaniformation.com