Privacy Policy

1. Data Controller

IMBT Consulting is the entity responsible for processing personal information in accordance with Tunisian Law No. 2004-63 and the EU GDPR.

2. Data Collection

We collect necessary information including:

• Identification details (name, company, position)
• Contact information (email, phone, address)
• Technical data (IP address, browser, cookies)
• Professional information (consulting needs, contact history)
• Digital diagnostic answers, if you take it from your account (industry, size, how the company is organised)
• Applications to our job offers (name, contact details, link to your CV or profile, message)

3. Purposes of Processing

Data is used to:

• Respond to contact requests and quotes
• Compute your digital diagnostic, keep it in your client space and suggest suitable advice
• Review the applications received for our job offers and answer them
• Provide consulting, development, and digital marketing services
• Administrative and commercial management
• Service-related communications (with consent)
• Improvement of the website and services

4. Legal Basis

Processing is based on: consent for marketing communications, contract execution, legal obligations, and legitimate business interests.

5. Data Retention

Information is kept for the duration of the contractual relationship, up to 5 years after contact, or longer if legally required. Applications to our job offers are deleted automatically 2 years after their last update.

6. Data Recipients

Information may be shared with personnel, technical partners, and legal authorities if necessary. Our team also uses an internal voice assistant (Google Gemini): it receives no personal data of our clients (no names, contact details or message content), only figures and times without names.

7. Individual Rights

Users can access, correct, object to, delete, port, or withdraw their consent regarding their data.

8. Security Measures

We implement technical and organizational protections including encryption and restricted access.

9. International Data Transfer

Transfers outside Tunisia/EU include appropriate safeguards via contractual clauses and country adequacy assessments.

10. Cookies

The site only uses audience measurement cookies (Google Analytics), set only if you accept them in the cookie banner, and kept for up to 13 months. Your choice is remembered for 6 months. If you refuse, no audience cookie is set: only anonymous, cookieless data is sent to Google. You can change your choice at any time via the "Cookie settings" link at the bottom of every page. No advertising cookies are used.

11. Complaints

Disputes can be filed with the INPDP of Tunisia or respective EU data protection authorities.

12. Policy Updates

Changes will be communicated via the website or email.