HRC Consulting (publisher of CHR Solution) respects user privacy and processes personal data in compliance with the EU General Data Protection Regulation (GDPR, Regulation 2016/679) for residents of the European Union, and with Moroccan Law no. 09-08 for individuals based in Morocco.
The data controller for personal data collected via the website chrsolution.fr, the web applications (chrsolution.app, stock.chrsolution.app, purchase.chrsolution.app) and the mobile applications (CHR POS, CHR Stock, CHR Pocket) is:
HRC Consulting — SARL AU with share capital of MAD 10,000
Marrakech Trade Register 109389 · ICE 002634498000012
Registered office: Appartement n° 10, n° 7, Rue de la Liberté, Gueliz, 40000 Marrakech, Morocco
Contact: privacy@chrsolution.fr
HRC Consulting being established outside the EU, it has designated a representative within the Union pursuant to Article 27 of the GDPR. If you reside in the EU and have questions about your personal data, you may contact our GDPR representative:
EU Representative — Euverify Ltd (Ireland)
Unit 3D North Point House
North Point Business Park
New Mallow Road, Cork
T23 AT2P, Ireland
Email: gdpr@euverify.com
To submit a data subject access request (DSAR), a deletion request, or any other GDPR request, use our secure portal:
https://gdpr.euverify.com/verify/caa2e205-820e-412d-99a3-7b313858e74c
This link lets you verify our designated representative and submit your GDPR requests directly. Requests submitted via this portal are logged and tracked to ensure a response within the required timeframe.
Depending on your interaction with our services, the following categories of data may be processed:
Your data is collected and processed for the following purposes:
Your data may be shared with:
No personal data is sold or rented to third parties for commercial purposes.
HRC Consulting, the publisher, is established in Morocco; data processed at the registered office may transit through or be accessed from Morocco. The primary hosting of the service remains located in France (OVH, Roubaix), within the European Union.
Where a processor located outside the EU is involved (e.g. Anthropic in the United States), HRC Consulting ensures the existence of appropriate safeguards within the meaning of Articles 44 et seq. of the GDPR: Standard Contractual Clauses issued by the European Commission, or an adequacy decision where one exists (e.g. the EU-US Data Privacy Framework).
In accordance with the GDPR (EU residents) and Moroccan Law 09-08 (Morocco residents), you have the following rights:
Any request can be addressed to: privacy@chrsolution.fr, specifying your identity and the nature of your request. A response will be provided within one month of receipt of the request, in accordance with Article 12 of the GDPR. This period may be extended by two months for particularly complex requests, with prior notice.
To verify your identity, we may request supporting documents. Exercising your rights is free of charge, except for manifestly unfounded or excessive requests.
If, after contacting us, you consider that your rights are not respected, you may lodge a complaint with the competent authority:
The chrsolution.fr website does not use any advertising cookies or audience trackers. Only cookies strictly necessary for the proper functioning of the site (language preference, session persistence) may be deposited. These cookies do not require your prior consent under CNIL and CNDP recommendations.
The professional applications (POS, stock, purchasing) use local storage (localStorage, IndexedDB) strictly necessary for their offline operation. No information is shared with third parties for profiling purposes.
The mobile applications published by HRC Consulting (CHR POS, CHR Stock, CHR Pocket) may request the following technical permissions on your smartphone or tablet, depending on usage:
No location data is collected. No advertising is embedded. No third-party tracking SDK is included. Permissions are requested at the time of first use and can be revoked at any time in the operating system settings.
HRC Consulting implements appropriate technical and organisational measures to protect your data: TLS 1.3 encryption for communications, bcrypt password hashing, ECDSA P-256 cryptographic signing for the fiscal event chain, regular backups, per-tenant database isolation (multi-tenant), role-based access control. Security incidents affecting your data would be notified to you without undue delay, in accordance with Article 33 of the GDPR.
This policy may evolve. Any substantial change will be notified to you by email or via a banner on the affected services, with reasonable advance notice. The date of the last update is indicated below.
Last updated: 23 May 2026.