Privacy Policy
Pulse Web - XR Administration Platform
Last updated: February 25, 2026
1. Introduction
This Privacy Policy describes how TKORP (hereinafter "we", "our", or "TKORP"), the publisher of the Pulse Web platform, collects, uses, stores, and protects the personal data of its users (hereinafter "you" or the "User").
Pulse Web is an online administration interface for managing fleets of XR headsets (mixed and virtual reality), real-time device monitoring, content management, and user management within organizations.
We are committed to protecting your privacy in compliance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the French Data Protection Act of January 6, 1978 ("Loi Informatique et Libertés"), as amended.
2. Data Controller
The data controller for personal data collected through Pulse Web is:
| Company name | TKORP |
|---|---|
| Legal form | SAS (French simplified joint-stock company) |
| Registered address | 14 rue Beffroy, 92200 Neuilly-Sur-Seine, France |
| Contact email | tarik@tkorp.com |
| Legal representative | Tarik GHOMARI |
3. Personal Data Collected
In the course of using Pulse Web, we collect the following categories of personal data:
3.1 Identification Data
- First name and last name of the User
- Professional email address
- Name of the affiliated organization
- Role assigned within the platform (administrator, technician, etc.)
3.2 Connection Data
- IP address
- Date and time of connection
- Browser type and operating system
- Session identifier (Keycloak authentication token)
4. Purposes of Processing
Your personal data is processed for the following purposes:
| Purpose | Legal Basis (GDPR) |
|---|---|
| User account management and authentication | Performance of a contract (Art. 6(1)(b)) |
| XR headset fleet administration | Performance of a contract (Art. 6(1)(b)) |
| Access rights and role management | Legitimate interest (Art. 6(1)(f)) |
| Platform security and prevention of unauthorized access | Legitimate interest (Art. 6(1)(f)) |
| Technical support and incident resolution | Performance of a contract (Art. 6(1)(b)) |
| Platform improvement and bug fixes | Legitimate interest (Art. 6(1)(f)) |
| Compliance with legal obligations | Legal obligation (Art. 6(1)(c)) |
5. Data Recipients
Your personal data may be shared with the following recipients, strictly to the extent necessary for the purposes described above:
- Authorized TKORP personnel (support, development, administration)
- Administrators of your organization within Pulse Web
- Our technical subcontractors (hosting, authentication) acting on our instructions and bound by contractual confidentiality obligations
- Competent authorities, upon legal request (CNIL, judicial authorities)
We do not sell or rent your personal data to third parties.
6. Data Hosting and Security
Data collected through Pulse Web is hosted on servers located within the European Union, ensuring a level of protection compliant with the GDPR.
We implement appropriate technical and organizational measures to ensure the security of your data, including:
- Secure authentication via Keycloak (OAuth 2.0 / OpenID Connect protocols)
- Encrypted communications via HTTPS/TLS
- Strict access rights management based on the principle of least privilege
- Access logging for intrusion detection
- Regular backups and business continuity plan
7. Data Retention
Your personal data is retained for the period strictly necessary for the purposes for which it was collected:
| Data Type | Retention Period |
|---|---|
| User account data | Duration of the contract + 3 years after account deletion |
| Connection data (logs) | 12 rolling months |
| Billing data | 10 years (accounting obligation) |
8. Your Rights
In accordance with the GDPR and the French Data Protection Act, you have the following rights regarding your personal data:
- Right of access: obtain confirmation that your data is being processed and receive a copy thereof.
- Right to rectification: request the correction of inaccurate or incomplete data.
- Right to erasure: request the deletion of your data in the cases provided for by the GDPR.
- Right to restriction: request the suspension of processing in certain circumstances.
- Right to data portability: receive your data in a structured, machine-readable format.
- Right to object: object to processing based on legitimate interest.
To exercise your rights, please contact us at tarik@tkorp.com. We undertake to respond within one month of receiving your request.
In case of disagreement, you also have the right to lodge a complaint with the French Data Protection Authority (CNIL): www.cnil.fr.
9. Cookies
Pulse Web uses strictly necessary cookies for the proper functioning of the platform, in particular for managing your authentication session. These cookies do not require your prior consent in accordance with applicable regulations.
No advertising or commercial tracking cookies are used on Pulse Web.
10. International Data Transfers
As a general rule, your personal data is not transferred outside the European Union. Should such a transfer become necessary, it would be governed by appropriate safeguards (European Commission standard contractual clauses, adequacy decision, etc.).
11. Subcontractors
We use the following subcontractors in the operation of Pulse Web:
| Subcontractor | Function | Location |
|---|---|---|
| Keycloak (self-hosted) | SSO Authentication | EU |
| MongoDB Atlas / Self-hosted | Database | EU |
| OVHcloud | Server infrastructure | EU (France) |
12. Protection of Minors
Pulse Web is intended for professional use. We do not knowingly collect personal data from minors under the age of 16. If we discover that a minor has provided us with personal data, we will delete it as soon as possible.
13. Data Breach Notification
In the event of a personal data breach likely to result in a risk to your rights and freedoms, we undertake to notify the CNIL within 72 hours in accordance with Article 33 of the GDPR. If the breach presents a high risk, you will also be informed directly.
14. Changes to This Policy
We reserve the right to amend this Privacy Policy at any time. Any material changes will be notified to you by email or through the Pulse Web platform. The date of the last update is indicated at the top of this document.
15. Contact
For any questions regarding this Privacy Policy or the management of your personal data, you may contact us:
- By email: tarik@tkorp.com
- By mail: TKORP - 14 rue Beffroy, 92200 Neuilly-Sur-Seine, France
TKORP - Pulse Web - All rights reserved © 2026