Why do we have a Privacy Policy?
PYSAE SAS, which operates the website pysae.com, attaches great importance to protecting the confidentiality of your personal data, which we regard as a matter of professionalism and trust.
This Privacy Policy reflects our commitment to complying with applicable data protection rules, in particular the General Data Protection Regulation ("GDPR").
Its purpose is to explain how and why we process your personal data in connection with the services we provide to you.
Who is this Privacy Policy for?
If you are under the legal age of digital consent, you are not authorised to use our services without the prior and explicit consent of a parent or legal guardian, who must contact us by email at dpo@pysae.com.
If you believe we hold personal data about your children without your consent, please contact us at the address above.
Why do we process your personal data, and on what legal basis?
We process your personal data mainly for the following reasons:
- To let you browse our website and use our services, and to respond to your requests (e.g. information requests, complaints), on the basis of our terms of use and our legitimate interest in providing you with the best possible service.
- To manage our customer service, on the basis of contract performance and our legitimate interest in responding to your requests and complaints.
- To keep you informed of our latest offers and events by email, on the basis of your consent or, where the law of your country allows it for professional contacts and existing customers, our legitimate interest. You can unsubscribe at any time with the link in each email.
- To keep you informed of our latest offers and events by phone, on the basis of our legitimate interest where the law of your country allows it for professional contacts, otherwise your consent. You can object at any time.
- To manage billing and any unpaid invoices, on the basis of our terms and conditions and our legitimate interest in being paid for our services.
- To let you follow and comment on our social media posts, on the basis of our legitimate interest in maintaining our own social media pages.
- To send you our newsletter with news about our services, on the basis of your consent, which you can withdraw at any time with the unsubscribe link.
- To record our conversations with you to improve our customer service, on the basis of your prior consent and our legitimate interest in improving service quality and training our staff.
- To send satisfaction surveys, on the basis of our legitimate interest in improving our services.
What personal data do we process, and for how long?
We have summarised below the categories of personal data we process and their respective retention periods:
- Professional identification data (e.g. first name, surname, job title, company) and contact details (e.g. professional email address and phone number): kept for the entire duration of the service, plus the applicable statutory limitation periods, generally 5 years.
- Where your business name is the same as your personal name (e.g. sole traders, micro-businesses), financial and banking data (e.g. bank account number): kept for as long as necessary to manage the transaction, billing and payments, plus the applicable statutory limitation periods, generally 5 to 10 years.
- Phone number, used for our telephone marketing campaigns: kept for a maximum of 3 years from our last contact with you.
- Email address, used for our email marketing campaigns: kept for a maximum of 3 years from our last contact with you and, for our newsletter, until you unsubscribe.
- Connection data (e.g. logs, IP address): kept for 1 year.
- Voice recordings from phone conversations: kept for a maximum of 6 months, except recordings of calls that evidence the conclusion of a contract, which are kept for the applicable statutory limitation period, generally 5 years.
When the applicable retention periods expire, your personal data is permanently deleted and we will no longer be able to provide it to you. We may, however, retain anonymised data for statistical purposes only.
Please note that in the event of a dispute, we are required to retain all personal data concerning you for the entire duration of the proceedings, even after the retention periods described above have expired.
How did we obtain your personal data?
Your data is collected directly from you, whether you are a customer or simply a visitor to our website pysae.com, and we undertake to process it only for the purposes described above.
We may also obtain your personal data indirectly, for example at trade shows or through social media (e.g. LinkedIn). However, if you voluntarily publish content on our social media pages, you acknowledge that you bear full responsibility for any personal information you may disclose, regardless of its nature or origin.
What rights do you have over your personal data?
Applicable data protection law gives you specific rights, which you may exercise at any time and free of charge, to control how we use your data:
- Right of access to your personal data and to obtain a copy of it, provided the request does not infringe trade secrets, confidentiality or the secrecy of correspondence.
- Right to rectification of personal data that is inaccurate, outdated or incomplete.
- Right to object to the processing of your personal data carried out for direct marketing purposes, and to processing based on our legitimate interest, unless legitimate and compelling grounds justify such processing and override your interests, rights and freedoms.
- Right to request the erasure ("right to be forgotten") of your personal data that is not essential to the proper functioning of our services.
- Right to restriction of processing, allowing you to freeze the use of your data if you contest the lawfulness of a processing activity.
- Right to data portability, allowing you to receive some of your personal data so that you can store it or easily transfer it from one IT system to another.
- Right to withdraw your consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before the withdrawal.
- Where the law of your country provides for it (as French law does), right to give instructions on what happens to your data after your death.
Who can access your personal data?
Your personal data is processed by our teams and our technical service providers solely for the purpose of operating our service. We carefully vet all our technical service providers before engaging them, to ensure they strictly comply with the rules applicable to personal data protection.
Some of these providers are located outside the European Union, for example our website host, Vercel Inc., in the United States. These transfers are covered by the European Commission adequacy decision for the EU-US Data Privacy Framework or by the European Commission Standard Contractual Clauses.
We never sell or rent your data to third parties or commercial partners.
How do we protect your personal data?
We implement all the technical and organisational measures required to ensure the security of your personal data at all times, in particular to protect against any risk of destruction, loss, alteration or unauthorised disclosure.
Do we use cookies when you browse our website?
We measure the audience of our website with Matomo Cloud, provided by InnoCraft. Matomo sets two cookies on our domain: _pk_id (13 months), which recognises a returning browser, and _pk_ses (30 minutes), which groups the pages of a single visit. IP addresses are truncated before storage (the last two bytes are removed), raw visit data is deleted after 24 months, and this data is neither shared with third parties nor used for advertising.
You can refuse this measurement at any time with the "Refuse" button of the banner shown on your first visit, or with the "Manage cookies" link at the bottom of every page. Your choice is kept for 6 months in a pysae_consent cookie; once you refuse, Matomo is no longer loaded.
When you fill in one of our forms, we also send the first page you visited and the campaign parameters of the link you followed (utm_source, utm_medium, utm_campaign), kept in your browser session storage until you close the tab, so that we know how you found us.
Webinar replays are played by YouTube (Google), which may set its own cookies when the video loads.
You can also delete cookies at any time in your browser settings.
Who can you contact for more information about the use of your personal data?
To ensure the protection and integrity of your data, we have formally appointed an independent Data Protection Officer ("DPO"), declared to our supervisory authority (CNIL). You may contact our DPO at any time, free of charge, at dpo@pysae.com for further information on how we process your data.
How can you lodge a complaint?
You may lodge a complaint with the data protection authority of the EU country where you live or work, or where an alleged infringement took place (Article 77 GDPR). Our lead supervisory authority is the French "Commission Nationale de l'Informatique et des Libertés" ("CNIL"). You may contact the French data protection authority at any time: Service des plaintes de la CNIL, 3 place de Fontenoy, TSA 80751, 75334 Paris Cedex 07, France, or by phone at +33 1 53 73 22 22.
Can this Privacy Policy be changed?
We may amend our Privacy Policy at any time to reflect new legal requirements or any new processing activities we may introduce in the future.
Certified compliant by Dipeeo®