Privacy policy

Purpose of this policy

This policy explains how Tech 4 Team SAS, operating under the Arenametrix brand, processes the personal data of visitors to the arenametrix.com website, of people who contact us and of users of the Arenametrix platform.

It supplements the legal notice and the terms and conditions. Processing carried out on behalf of our clients within the platform is covered by a separate data processing agreement appended to the contract.

Who is responsible for your data

For the website and the business relationship

Tech 4 Team SAS, a simplified joint-stock company with a share capital of EUR 27,493, registered in Paris under number 794 062 497, 157 boulevard Macdonald, Le Cargo, 75019 Paris, France, acts as data controller.

For the data hosted in the platform

When a client organisation uses Arenametrix to manage its own audiences, it decides on the purposes and means of the processing: it is the data controller, and Tech 4 Team SAS acts as a processor within the limits set by the contract. Requests about this data should be sent to the organisation concerned, which remains your point of contact.

Data processed

Data you give us

• Contact, demo and download forms: first name, last name, business email address, phone number, organisation, job title, country, content of the message
• Registrations for webinars, the newsletter and events
• Exchanges by email, phone or in meetings

Data collected automatically

• IP address, browser and device type, language
• Pages viewed, date and length of the visit, referring page
• Cookie and tracker identifiers, under the conditions described below

Platform account data

For platform users: login credentials, connection and activity logs, display preferences.

Purposes and legal bases

• Answering your requests (demo, documentation, contact): pre-contractual measures taken at your request
• Managing the contractual relationship with client organisations: performance of the contract
• Sending marketing communications and invitations: consent, or legitimate interest when the prospecting targets professionals about similar offers
• Measuring audience and improving the website: consent for the trackers that require it, legitimate interest for exempt measurements
• Securing access and systems: legitimate interest
• Complying with our legal obligations, in particular accounting: legal obligation

Where processing is based on your consent, you can withdraw it at any time, without affecting processing already carried out.

Retention periods

• Prospects: 3 years from your last contact
• Clients: for the duration of the contractual relationship, then archived for the applicable legal periods, in particular 10 years for accounting records
• Audience measurement and cookies: 13 months maximum for trackers, 25 months for the data they produce
• Connection logs: 12 months
• Data processed on behalf of a client organisation: the period set by that organisation in its contract, followed by deletion or return

Recipients and processors

Your data can be accessed by the Tech 4 Team SAS teams who need it: sales, marketing, support, administration. It is also processed by service providers acting on our instructions:

• HubSpot, Inc.: website hosting, forms, email delivery and customer relationship management
• Google Ireland Limited: tag management and website audience measurement
• Infrastructure and tooling providers needed to run the platform, listed in the data processing agreement provided to clients

Each provider is bound by a contract that complies with Article 28 of the GDPR. No data is sold or passed on to third parties for advertising purposes.

Transfers outside the European Union

Some providers are based in the United States or host part of the processing there. These transfers are covered by the safeguards provided for in Chapter V of the GDPR: the European Commission standard contractual clauses and, where applicable, certification under the EU-US Data Privacy Framework.

You can obtain a copy of the applicable safeguards by writing to the address given in the Contact section.

Security

We implement technical and organisational measures appropriate to the risk: HTTPS encryption, access rights management, authentication, logging, backups, staff awareness and contractual safeguards with our providers.

In the event of a data breach likely to result in a high risk to your rights, you will be informed in accordance with Article 34 of the GDPR.

Cookies and trackers

On your first visit, a banner lets you accept or refuse the trackers that are not strictly necessary. Your choices are saved and can be changed at any time from the same banner.

Necessary trackers

Website operation, security, load balancing and remembering your consent choices. They do not require your consent.

Audience measurement

Visit and usage statistics, used to improve the website content.

Marketing trackers

Measuring the effectiveness of our campaigns and personalising the content offered to you. They are only set with your explicit consent.

You can also set your browser to block all or some cookies. Refusing necessary trackers may prevent access to some features.

Your rights

You have the right to access, rectify and erase your data, to restrict or object to its processing, to data portability, and to give instructions about what happens to your data after your death. You can also withdraw your consent at any time.

To exercise these rights, write to the address given in the Contact section, stating the purpose of your request. Proof of identity may be requested if there is reasonable doubt about your identity. You will receive an answer within one month, which may be extended by two months for complex requests.

If the data concerned is processed on behalf of a client organisation, your request will be passed on to it, or you will be asked to send it to that organisation directly.

Contact and complaints

Tech 4 Team SAS
157 boulevard Macdonald, Le Cargo, 75019 Paris, France
Phone: +33 1 42 81 41 85
Email: compta@arenametrix.com

You can lodge a complaint with the French data protection authority: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr.

Updates

This policy may be updated to reflect changes to the website, the services or the regulations. The date of the last update is shown at the top of the page. If a significant change is made, you will be informed by appropriate means.