last updated: 6 february 2026
FEF COMPANY places great importance on the protection and respect of personal data.
This privacy policy (the Privacy Policy) has been designed to help you understand how FEF COMPANY, in its capacity as publisher of the Online Service CV Lite, collects and processes your personal data, and what your rights are.
This Privacy Policy applies to:
Visitors to our Online Service accessible at https://cv-lite.com (the Online Service), and
Users of our CV creation, cover letter drafting, and online application preparation Features (the Features).
In this Privacy Policy, the term “Personal Data” refers to any information that enables or may legitimately be used to identify a natural person.
1. WHO IS RESPONSIBLE FOR PROCESSING YOUR PERSONAL DATA?
FEF COMPANY, a simplified joint-stock company (SAS) with a share capital of 500.00 euros, registered with the Paris Trade and Companies Register under number 917 540 171 RCS PARIS, whose registered office is located at 1/3 rue d'Enghien 75010 Paris France (hereinafter the “Company” or “we”), is responsible for processing your Personal Data collected via the Online Service and the Features.
Intracommunity VAT number: FR18917540171
2. WHAT PERSONAL DATA DO WE COLLECT, FOR WHAT PURPOSES, AND FOR HOW LONG?
We process your Personal Data in compliance with applicable data protection regulations, in particular:
Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR);
Law No. 78-17 of 6 January 1978 as amended relating to information technology, data files, and civil liberties (French Data Protection Act).
The data processing operations implemented by the Company pursue specific, explicit, and legitimate purposes. For each of these processing activities, the Company undertakes to process only Personal Data that are adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.
We process your personal data only when we have a legal basis for doing so:
| Purpose | Personal Data | Legal Basis | Source |
|---|---|---|---|
| 1. Provision of the Online Service and the Features Management of our contractual relationship with you (providing our Features, processing your payments, enabling you to personalize your User Area, your customized documents, and your profile) | • Identity, contact details • Photograph • Information contained in your CVs and cover letters • User Area login credentials • Payment-related data | Performance of our contract with you | Data provided by the data subject or automatically collected during their use of the Features |
| Management of our Online Service, including to ensure its security and to resolve issues, and for purposes of access, data analysis, assessments, research, surveys, and analyses | • Identity, contact details • Information contained in your CVs and cover letters • User Area login credentials • Data relating to your device (type, operating system, settings) | Legitimate interest of the Company in managing its Online Service | Data provided by the data subject or automatically collected during their use of the Online Service and/or the Features |
| Improving our Online Service so that content is presented in the most effective manner possible | • Identity, contact details • Photograph • Information contained in your CVs and cover letters • User Area login credentials • Data relating to your device (type, operating system, settings) | Legitimate interest of the Company in managing its Online Service | Data provided by the data subject or automatically collected during their use of the Online Service and/or the Features |
| 2. Communication and marketing Management of contact requests (contact form on the Online Service, telephone, and email) | • Identity and contact details • Subject of your request • Any information or document you share with us | Consent | Data provided by the data subject |
| Sending marketing communications to our Subscribed Users | • Identity and contact details • Data relating to the user journey | Legitimate interest of the Company in developing its business | Data provided by the data subject or automatically collected during their use of the Features |
| 3. Compliance with data subject rights and regulations defending our interests in the event of a dispute | • Identity and contact details • Any information necessary for handling the dispute | Legitimate interest of the Company in defending its interests in the event of a dispute | Data provided by the data subject, data automatically collected during their use of the Online Service and/or the Features, and data collected from third parties |
| Management of requests to exercise data subject rights | • Identity and contact details • Any information necessary to process your request to exercise your rights | Legal obligation | Data provided by the data subject or automatically collected during their use of the Online Service and/or the Features |
| Compliance with applicable legal or regulatory requirements (accounting, taxation, data protection) | • Any information necessary to comply with legal or regulatory requirements | Legal obligation | Data provided by the data subject or automatically collected during their use of the Online Service and/or the Features |
The data required to respond to your requests are marked with an asterisk or an equivalent method on the collection forms, or specified as such orally at the time of collection. If these fields are not completed, we will not be able to respond to your requests or provide certain Features.
You must provide us with accurate information that does not infringe the rights of third parties. If you provide us with Personal Data relating to another person, you undertake to communicate the link to this Privacy Policy to the data subject. In this way, the data subject will be informed of the processing of their Personal Data by the Company.
3. HOW DO WE SHARE YOUR PERSONAL DATA?
We share the various categories of Personal Data mentioned above with:
Our authorized staff, who need access to it in the performance of their duties;
Our subcontractors and service providers who perform various services on our behalf (for example, in the areas of payment processing, hosting, audience measurement, customer service management, or data analysis), to the extent necessary for the performance of their assignments;
Where applicable, certain of our technical or commercial partners involved in the provision, improvement, or promotion of the Features, where such sharing is necessary and contractually governed;
Our external advisers (lawyers, auditors, etc.) and debt collection agencies, where necessary for the purposes of our legitimate interests;
Public or judicial authorities, where required by law or where we believe in good faith that transparency is legitimate in order to respond to a claim against us, to comply with legal proceedings, as part of an investigation, or to protect the property or personal safety of the Company, its partners, or its Users.
We may also share your Personal Data with third parties in the context of a potential or actual sale or restructuring of our company or of certain of our assets, in which case your data may form part of the transferred assets.
4. HOW DO WE TRANSFER YOUR PERSONAL DATA?
We may transfer your Personal Data to third-party service providers located outside the European Economic Area, in particular to countries that do not benefit from an adequacy decision of the European Commission (Article 45 of the GDPR).
In such cases, we ensure that these transfers are carried out in accordance with applicable regulations and are secured by appropriate mechanisms, such as:
The standard contractual clauses of the European Commission (Articles 46 et seq. of the GDPR);
Any other appropriate safeguard provided for by applicable regulations.
You may request a copy of these mechanisms (excluding confidential clauses) by contacting us using the contact details provided in the section “How to contact us?” below.
5. HOW LONG ARE YOUR DATA RETAINED?
We retain your Personal Data only for as long as necessary for the purposes described and in compliance with the law.
The following retention periods apply:
Data associated with your User Area:
When you create a User Area, your Personal Data are retained for as long as you use our Features via your User Area. Your data and your User Area will be deleted:
If you close your User Area;
If your User Area is inactive, meaning that you have not used any of our Features for a period of two consecutive years and you have ceased interacting with us during that second year (in particular, you have not opened our emails, you have not logged in to your User Area, etc.).
Data relating to your subscription to our Features:
When you subscribe to a Subscription to our Features, your Personal Data (billing address, type of Subscription, payment terms, etc.) are retained for five (5) years from the end of the contractual relationship, in accordance with statutory accounting retention obligations.
Data for marketing purposes:
We send marketing communications until you unsubscribe or for three (3) years after your last interaction with our emails.
In addition, we may retain your Personal Data for a longer period, limited to what is strictly necessary for the purposes for which they are processed, in order to assert our rights or to comply with a legal obligation. When your data are no longer necessary, we will ensure that they are deleted or anonymized.
6. HOW DO WE PROTECT YOUR PERSONAL DATA?
We take appropriate technical and organizational measures to prevent unauthorized or unlawful processing of your Personal Data and to avoid any accidental loss, destruction, or damage to your Personal Data.
These measures include in particular:
Internal security procedures relating to the storage and destruction of your Personal Data;
Data access management based on the need-to-know principle;
Encryption of sensitive data during transmission;
Secure payment processing via SSL/TLS protocols and PCI-DSS–compliant service providers.
7. WHAT ARE YOUR RIGHTS REGARDING YOUR PERSONAL DATA?
In accordance with the GDPR and the French Data Protection Act (Loi Informatique et Libertés), you have several rights regarding your Personal Data. The table below presents the different rights you benefit from, the conditions for exercising them, and the exceptions applicable to each of these rights.
| Right | Conditions and exceptions |
|---|---|
| You may withdraw your consent at any time | This right may only be exercised where the processing is based on your consent. Withdrawal of consent has no retroactive effect on processing carried out prior to the withdrawal. |
| You may ask whether we process your Personal Data, access them, and obtain a copy (right of access) | Access may be refused or limited if the request is manifestly unfounded or excessive, or if it infringes the rights of a third party (e.g., trade secrets, third-party confidentiality, copyright). We may require proof of identity if we have reasonable doubt as to the identity of the requester. |
| You may request the correction of inaccurate or incomplete data (right to rectification) | This right may be exercised regardless of the legal basis of the processing. |
| You may request the erasure of your data (right to be forgotten) | Cases in which erasure may be exercised include:• The data are no longer necessary for the purposes for which they were collected or processed.• You withdraw your consent where the processing was based exclusively on that legal basis.• You object to processing based on our legitimate interest and there is no overriding legitimate ground justifying continued processing.• Your data have been processed unlawfully.• Your data must be erased to comply with a legal obligation.The right to erasure does not apply in particular where processing is necessary:• to comply with a legal obligation (e.g., accounting retention, tax obligations);• for the establishment, exercise, or defense of legal claims;• for the exercise of the right to freedom of expression and information. |
| You may request the restriction of the processing of your data | This right may be exercised in particular where you contest the accuracy of the data, where the processing is unlawful but you prefer restriction rather than erasure, or where we no longer need the data but they are required by you for the establishment, exercise, or defense of legal claims. |
| You may request the portability of your data in a structured, commonly used, and machine-readable format, or their transfer to another data controller | This right applies only to data processed by automated means and on the basis of your consent or the performance of a contract concluded with you. It applies only to data that you have provided directly (excluding derived or inferred data). Direct transfer to another data controller will be possible only where technically feasible. |
| You may object to any processing based on our legitimate interest (right to object) | This right does not apply where we can demonstrate compelling legitimate grounds justifying the continuation of the processing (e.g., necessity of processing for security or fraud prevention). Where processing is based on a legal or contractual obligation, objection is not possible. For commercial prospecting, objection applies without justification and must be taken into account immediately. |
| You may define instructions regarding the fate of your data after your death | You may designate a person responsible for carrying out these instructions or request the deletion of your data after your death. In the absence of specific instructions, heirs may exercise certain rights (access, rectification, deletion) insofar as necessary for the organization of the estate. |
To exercise your rights, please contact us using the information provided in the section “How to contact us?”.
You may also lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL), the French data protection authority:
Website: www.cnil.fr
Address: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
8. COOKIES
A cookie is a small file stored by your browser when you visit a website.
Cookies are placed on our Online Service. To learn more about the conditions under which these cookies are placed and used, we invite you to consult our Cookies Policy, accessible on the Online Service.
9. HOW TO CONTACT US?
We invite you to submit any requests, questions, or comments relating to this Privacy Policy or to the processing of your Personal Data:
By e-mail: [email protected]
Via the “Contact Us” section available on the Online Service
By postal mail: FEF COMPANY, 1/3 rue d'Enghien 75010 Paris France
10. UPDATES
We reserve the right to amend or update this Privacy Policy at any time in light of changes in legal requirements or our data processing practices.
We will inform you of any substantial changes by any appropriate means (notice on the Online Service, notification by email, etc.).
date of last update 6 february 2026