GDPR policy

Personal data: a strategic business issue

Digital uses now occupy a central place in how companies operate. Internal communications, commercial relationships, employee management, partner interactions — many activities rely on the collection and use of information that can identify individuals.

This data may relate to customers, employees, suppliers or various business contacts. Its use must therefore be governed to limit risks and ensure respect for the privacy of those concerned.

For Trybu.io, control over personal data is part of a broader approach that combines security, responsibility and quality professional practices.

The General Data Protection Regulation (GDPR) came into effect on 25 May 2018, and governs the collection and use of personal data within the European Union. Its objective is clear: give citizens back control over their personal information and ensure respect for their fundamental rights.

The GDPR provides several rights for data subjects:

Right to be informed about the collection and use of their data.
Right of access to their personal data.
Right to rectification of inaccurate data.
Right to object to the processing of their data.
Right to erasure (“right to be forgotten”).
Right to data portability.

This regulation also introduces increased accountability for organisations and strengthens the powers of supervisory authorities, such as the CNIL in France. Particular attention is paid to the protection of vulnerable populations, including the elderly, minors, and people with disabilities.

The GDPR applies to any organisation that processes personal data of European citizens, whether a company, association, or public institution. Its scope is broad and not limited to digital tools or websites.

Paper files, administrative records, employment contracts, client documents and contractual relationships with partners are also covered. Each organisation must implement appropriate measures to prevent risks of loss, alteration or unauthorised access to data.

An organisation dedicated to privacy protection

To ensure GDPR compliance, we have appointed a Data Protection Officer (DPO) and a GDPR Officer. Working closely with management, they play a central role in driving and monitoring compliance.

The DPO, registered with the CNIL, intervenes to:

Support and advise the company and its teams on GDPR obligations.
Monitor compliance with European regulations and national legal provisions.
Respond to requests and questions from data subjects regarding their personal data.
Maintain the relationship with the supervisory authority, particularly in case of incident or audit.

We are also supported by FCN Data, a French company specialised in data protection, to consolidate our practices and tools.

Security adapted to uses and risks

The confidentiality of information also depends on the measures put in place to prevent inappropriate access, data loss or security incidents.

Trybu.io deploys various measures to protect the information it manages. Key actions include:

Defining access rights based on each user’s responsibilities;
Implementing security solutions adapted to identified risks;
Regularly raising staff awareness of confidentiality rules;
Monitoring processing activities and associated compliance measures;
Incorporating personal data requirements into relationships with service providers and partners.

The combination of these technical, organisational and human measures enables better control of data at every stage of its use.

Ongoing support from FCN Data

GDPR compliance requires regular monitoring and the ability to adapt practices as the company and regulatory framework evolve.

To pursue this approach, Trybu.io benefits from the support of FCN Data, a firm specialised in data protection and GDPR compliance for organisations.

This support helps identify areas for improvement, update existing frameworks, and guide the company in implementing best practices suited to its needs.

Exercise your rights

For any question concerning your personal data or to exercise your rights (access, rectification, erasure, objection, portability), contact our Data Protection Officer:

Email: dpo@trybu.io
By post: Trÿbu, DPO · 87 rue du Fontenoy, 59100 Roubaix, France
Supervisory authority: CNIL, www.cnil.fr

Building trust around data

Personal data protection goes beyond regulatory compliance. It also contributes to the quality of the company’s relationships with its employees, clients and partners.

By paying close attention to information security, transparency in processing, and respect for individual rights, Trybu.io approaches data management as a matter of lasting responsibility.

Data protection thus becomes an integral part of the company’s governance and helps build professional relationships founded on trust, transparency and commitment.