GDPR Compliance and Personal Data Management

🔐 GDPR & IQUALIF: what you need to know to stay compliant

Introduction

Since the implementation of the General Data Protection Regulation (GDPR), any company using data for professional purposes must ensure compliant processing. As an IQUALIF user, you are concerned as soon as you operate with information sourced from publicly accessible sources.

IQUALIF is a software for aggregating and structuring publicly accessible data. This positioning determines your obligations and those of IQUALIF as the publisher.

🔐 GDPR & CNIL Compliance

IQUALIF is a software designed to facilitate access, extraction, and structuring of data from publicly accessible sources: directories, professional registers, legal publications, open sources.

⚠️ The user is solely responsible for the use they make of the data collected using the software.

As the publisher of a technical solution, IQUALIF does not intervene at any point in:

• the processing of data extracted by the user,
• prospecting or communication actions resulting from it,
• the intended use purpose chosen by the end user.

Each user commits to comply with current legislation, notably:

• the General Data Protection Regulation (GDPR),
• the recommendations and guidelines of the CNIL,
• the obligations of information, purpose, minimization, and respect for the right to object,
• the rules governing commercial prospecting, including provisions related to prior consent.

💬 For any questions related to the compliance of your processing, we recommend consulting your DPO or a specialized legal advisor.

⚠️ Major Regulatory Evolution - Law of June 30, 2025

Starting from August 11, 2026, law n° 2025-594 of June 30, 2025 (known as the "Lecamp Law") significantly modifies the framework of telephone prospecting in France:

• End of the Bloctel system. The service ceases its activities on this date.
• Transition to an explicit prior consent regime (opt-in). Any telemarketing to an individual now requires prior, free, specific, informed, and revocable consent.
• Reversed burden of proof. It is the professional's responsibility to demonstrate that they have valid consent from the prospect at the time of the call.
• Three strictly prohibited sectors, even with consent in some cases: energy renovation, adaptation of housing for loss of autonomy or disability (MaPrimeAdapt), and the Personal Training Account (CPF).
• Enhanced sanctions: up to €75,000 fine for individuals and €375,000 for legal entities.

IQUALIF reminds all its users of the importance of updating their practices to remain compliant with this new legal framework.

💡 Note: prospecting between professionals (B2B) remains permitted, subject to respect for legitimate interest, opposition rights, and applicable GDPR rules. The use of IQUALIF in a B2B context remains fully compatible with upcoming regulations.

🛠️ What IQUALIF does

IQUALIF is a technical tool:

• It allows collecting data from public sources (professional directories, company registers, public sites, legal publications).
• It helps structure, filter, and organize extracted information to facilitate analysis.
• It provides a neutral technical interface, whose usage purposes are entirely defined by the user.

👤 Who is responsible for GDPR processing?

It is you, the end user, who is responsible for the processing of data you collect with IQUALIF.

Specifically, this means you must:

• determine the purposes of processing (B2B prospecting, updating internal database, CRM enrichment, market research, etc.),
• verify compliance with GDPR rules when data concerns identifiable individuals,
• ensure information of concerned persons and respect their right to object,
• collect, if necessary, explicit prior consent when the purpose requires it (notably for telemarketing to individuals starting August 11, 2026),
• maintain traceability of obtained consents, timestamped and documented.

IQUALIF, as a software publisher, provides a technical tool. Data processing carried out by the user is solely their responsibility under GDPR.

📂 Public data ≠ copyright-free data

GDPR does not oppose the use of data from public sources, provided several principles are respected:

• the legitimate purpose of processing,
• the minimization of collected data,
• the information of concerned persons when required,
• absence of excessive or diverted processing from their initial purpose,
• respect for the right to object at any time.

💡 A phone number or address extracted from a professional directory can be used for B2B prospecting, subject to legal compliance. However, using data of individuals for commercial solicitation is strictly regulated—and restrictions are reinforced starting August 11, 2026.

💬 How to present your use of IQUALIF

Whether in your internal documents, legal notices, or commercial discourse, adopt clear and compliant communication:

🔹 "We use IQUALIF, a data structuring tool from public sources, to identify and organize information referenced in official registers and directories accessible to the public. The processing of this data is solely our responsibility, in compliance with GDPR and applicable regulations."

✅ In summary

• IQUALIF is a tool for accessing public data provided to professionals.
• You are fully responsible for how you use it, especially when data concerns individuals.
• GDPR does not oppose the use of public information but strictly regulates processing.
• Starting from August 11, 2026, the Lecamp Law imposes an explicit prior consent for telemarketing to individuals, with completely prohibited sectors (energy renovation, MaPrimeAdapt, CPF).
• B2B prospecting remains permitted, under conditions, and is a privileged framework for using IQUALIF.
• Adopt a transparent approach, control your purposes, and respect the rights of concerned persons.

💡 Need help integrating IQUALIF into your compliance process or drafting your notices? Consider consulting a legal expert or a specialized DPO.