Last updated: June 2026

 

1.    Data Controller

The person in charge of processing the personal data collected on the website karulink-caribbean.com is: Transport Expansion Promotion (STEP), SAS, whose registered office is located at Impasse Gustave Eiffel, Guadeloupe, France, acting as the lead of the KARULINK project.

Email : contact@karulink-caribbean.com

The data controller for personal data collected on karulink-caribbean.com is:

Société Transport Expansion Promotion (STEP) — Lead partner of the KARULINK project

Guadeloupe, France | Email: contact@karulink-caribbean.com

 

2.    Data Collected

2.1 Contact Form

When using the contact form, the following data may be collected: first name, last name, email address, organization, profile, subject of the message, and message content.

 

2.2 Network Registration Form (Newsletter)

When signing up for the KARULINK network and/or the newsletter, the following data may be collected: first name, last name, email address, organization, and profile.

 

2.3 Mandatory or Optional Nature of Data

Fields marked with an asterisk (*) in contact and registration forms are mandatory.

They are necessary for processing your request or for your registration in the KARULINK network.

If you do not provide this information, we may be unable to process your request or complete your registration. Other requested information is optional and is only intended to better meet your needs or to get to know the members of the network better.

 

2.4 Browsing Data

Technical data can be collected automatically during your visit (IP address, browser type, pages viewed, visit duration…). This data can be collected through cookies or other trackers. 

The ways cookies are used, their purposes, how long they are kept, and how to accept or refuse them are detailed in our Cookie Policy.

 

3.    Processing Purposes

The personal data collected is processed for the following purposes:

• To handle your contact requests and reply to your messages ;

• To manage your registration on the KARULINK network and send you information about the progress of the KARULINK project, when you have consented;

• To improve the website’s functionality and carry out audience measurements, subject to your consent when required;

• To comply with applicable legal and regulatory obligations.

 

4. Legal Basis

The processing carried out is based on the following legal grounds :

• Contact form: KARULINK’s legitimate interest in responding to inquiries sent via the website. The checkbox associated with the form allows users to confirm that they have read this Privacy Policy ;

• Newsletter / KARULINK network : the consent of the person concerned, given through a specific checkbox, freely and not pre-checked;

• Audience analysis and non-essential cookies : the user’s consent, collected and managed via the cookie banner ;

Compliance with legal obligations : compliance with a legal obligation to which KARULINK or STEP is subject.

 

5. Retention Periods

The personal data collected is kept only as long as necessary for the purposes for which it is processed, unless a legal requirement says otherwise:

• Data from the contact form: 3 years from the last exchange with the person concerned;

• Data related to newsletter / KARULINK network subscription: until unsubscribing, then for a maximum of one year for proof of unsubscribing and managing objections ;

• Cookies and trackers : for a maximum of 13 months from when they are placed on the device;

Audience measurement data from cookies : for a maximum of 25 months if this data is stored separately from trackers.

 

6. Data Recipients

Your personal data is neither sold, nor rented, nor transferred to third parties for commercial purposes. They may be shared, strictly as needed for the purposes described in this policy, with partners of the KARULINK project, including ABCC, DAIC, SKNCIC, CARL, and the City of Bouillante, when this sharing is necessary for managing the KARULINK project, processing your request, or implementing local cooperation.

They may also be accessible to technical service providers working on behalf of the data controller, such as the website host and the emailing tool. These providers act as processors under the GDPR and are subject to contractual obligations of confidentiality, security, and personal data protection.

 

7. Transfers Outside the EU

Some technical providers used for the website or related services may be located outside the European Union or process data from a third country. 

In this case, KARULINK makes sure that any personal data transfers are handled according to Articles 44 and following of the GDPR, for example through a European Commission adequacy decision, the signing of standard contractual clauses, or any other suitable safeguards required by the applicable regulations. 

When needed, additional measures can be put in place to ensure a level of personal data protection that’s basically equivalent to what’s guaranteed within the European Union.

 

8. Your Rights

In accordance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679), and under the conditions and limits set by it, you have the following rights:

• Right to access your personal data;

• Right to correct inaccurate or incomplete data;

• Right to have your personal data erased (“right to be forgotten”);

• Right to restrict processing;

• Right to data portability, where applicable;

• Right to object to processing, where applicable;

• Right to withdraw your consent at any time, when processing is based on your consent, without affecting the lawfulness of processing carried out before withdrawal.

To exercise your rights, you can contact us at the following address: contact@karulink.eu.

If, after contacting us, you feel that your rights are not being respected or that the processing of your personal data does not comply with applicable regulations, you can file a complaint with the CNIL: https://www.cnil.fr. The ways to manage your cookie consent are explained in our Cookie Policy.

 

9. Security

KARULINK implements appropriate technical and organizational measures to ensure the security, integrity, and confidentiality of personal data processed, and to protect it against any unauthorized access, loss, alteration, disclosure, or destruction. These measures can include limiting access to authorized personnel only, using secure authentication methods, protecting information systems, backing up data, and raising awareness among people who handle personal data.KARULINK implements appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure.

 

10. DPO Contact

For any questions regarding the protection of your personal data or the exercise of your rights, you can contact us at the following address: contact@karulink-caribbean.com.