PRIVACY POLICY
At GISKARD AI, protecting your
personal data is our priority.
When you use the website https://www.giskard.ai and/or https://docs.giskard.ai and/or https://llmon.giskard.ai (the "Website"),
we may collect personal data about you.
The purpose of this policy is
to inform you about how we process your personal data in compliance with
Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the
free movement of such data (the "GDPR").
1. Who is the data controller?
The data controller is GISKARD AI, a joint stock company, registered with
the Registry of Trade and Companies of Pantin, under the number 904 773 421 and whose head
office is located at 24 rue de
la paix, 93 500 Pantin
(“Us” or “We”).
2. What personal data we collect?
Personal data is a data that identifies an individual
directly or indirectly, in particular by reference to
an identifier such as a name.
We may collect the following
personal data:
·
Identification data (full name, email address,
phone number);
·
Data relating to your professional life (name of company, CV,
position/function, LinkedIn URL);
·
Browsing data (IP address, pages viewed, date
and time of connection, browser used, operating system, user ID, IFA);
·
Any information you wish to send us as part of your
contact request.
We inform you, when collecting
your personal data, whether some of these data are mandatory or optional.
Mandatory data are indicated with an asterisk.
3. On what legal basis, for what purposes and
for how long do we keep your personal data?
|
Purposes |
Legal basis |
Data retention period |
|
To
perform operations related to contracts, orders, invoices and customer
relationship management |
Performance
of a contract to which you or your company are party |
Personal
data are retained for the duration of our business relationship. In
addition, the data relating to your transactions (with the
exception of your banking data) are archived for probationary purposes
for a period of 5 years. |
|
To create
a database of customers and prospects |
Our
legitimate interest in developing and promoting our business |
For
customers: data is kept for the duration of the contractual relationship. For
prospects: data is kept for a period of 3 years from your last contact with
us, for prospecting purposes. |
|
To send
newsletters, requests and direct marketing mailings |
Our
legitimate interest in winning customer loyalty and informing our customers
of our latest news |
Data is
kept for a period of 3 years from your last contact with us, for prospecting
purposes. |
|
To answer
to your information request and other inquiries |
Our
legitime interest in responding to your inquiries |
Personal
data are retained during the processing of your request. |
To comply
with our legal and regulatory obligations
|
Legal and regulatory obligations |
Invoices are archived for a period of 10 years. In
addition, the data relating to your transactions (with the
exception of your banking data) are archived for probationary purposes
for a period of 5 years. |
To process your applications
|
Taking
steps at your request prior to entering into a
contract |
The data are retained for the necessary time to process
your application. In the
event of a negative outcome to your application, we may retain your data. If
you consent to such storage of your data, we keep the data for a maximum of 2
years, from your last contact. |
To
elaborate analytics of navigation, audience of the Website and the use of our
product.
|
Your
consent |
The
personal data are retained for 25 months. |
|
To
process data subjects’ requests to exercise their rights |
Our
legitimate interest in responding to your requests and keeping records of
them |
If we
ask you a proof of identity: we only retain it for the necessary time to
verify your identity. Once the verification has been carried out, the proof
is deleted. If you
exercise your right to object to direct marketing: we keep this information
for 3 years. |
4. Who are the recipients of your personal
data?
Will have access to your personal data:
(i)
The staff of our company;
(ii)
Our processors: hosting provider, newsletter sending provider, audience
analysis provider, Customer Relationship Management (CRM) tool, recruitment
management tool, user review collection tool, email provider, instant messaging
tool, accounting provider;
(iii)
If applicable: public and private organisations,
exclusively to comply with our legal obligations.
5. Are your personal data likely to be
transferred outside the European Union?
Your personal data is hosted for the duration of the
processing on the servers of the company Amazon Web Services (AWS), located in the European Union.
As part of the tools, we use (see article on the
recipients of your personal data, especially our processors), your personal
data may be transferred outside the European Union. The transfer of your personal
data in this context is secured with the use of following safeguards:
·
Either personal data are transferred to a country that has been
recognized as ensuring an adequate level of protection by a decision of the
European Commission, in accordance with article 45 of the GDPR
: in this case, this country ensures a level of protection deemed
sufficient and adequate to the provisions of the GDPR; or
·
The personal data are transferred to a country whose level of data
protection has not been recognized as adequate to the GDPR :
in this case these transfers are based on appropriate safeguards indicated in
article 46 of the GDPR, adapted to each provider, including but not limited to
the execution of Standard Contractual Clauses approved by the European
Commission, the application of Binding Corporate Rules or under an approved
certification mechanism; or
·
The personal data are transferred under the any appropriate safeguards
described in Chapter V of the GDPR.
6. What rights do you have regarding your
personal data?
You have the following rights with
regard to your personal data:
-
Right to be informed: this is precisely why we have drafted this privacy policy as defined by
articles 13 and 14 of the GDPR.
-
Right of access: you have the right to access all your personal data at any time as
defined by article 15 of the GDPR.
-
Right to rectification: you have the right to rectify your inaccurate, incomplete or obsolete
personal data at any time as defined by article 16 of the GDPR.
-
Right to restriction of processing: you have the right to restrict the processing of
your personal data in certain cases defined in article 18 of the GDPR.
-
Right to erasure (“right to be forgotten”): you have the right to request that your
personal data be deleted and to prohibit any future collection as defined by
article 17 of the GDPR.
-
Right to file a complaint to a competent supervisory authority (in France, the CNIL), under GDPR article
77, if you consider that the processing of your personal data constitutes a
breach of applicable regulations.
-
Right to define instructions related to the retention, deletion and
communication of your personal data after your death.
-
Right to withdraw your consent at any time: for purposes
based on consent, Article 7 of the GDPR provides that you may withdraw your
consent at any time. Such withdrawal will not affect the lawfulness of the
processing carried out before the withdrawal.
-
Right to data portability: under specific conditions defined in article 20 of the GDPR, you have
the right to receive the personal data you have provided us in a standard
machine-readable format and to require their transfer to the recipient of your
choice.
-
Right to
object: You have
the right to object to the processing of your personal data as defined by
article 21 of the GDPR. Please note that we may continue to process your
personal data despite this opposition for legitimate reasons or for the defense
of legal claims.
You can exercise these rights by writing us using the
contact details below. For this matter we may ask you to provide us with
additional information or documents to prove your identity.
7. What cookies do we use?
For more information on cookies management, please
consult our Cookies Policy[MOU1] .
8. Contact information for data privacy
matters
Contact email: privacy@giskard.ai
Contact address:
GISKARD AI, 24 rue de la paix, 93500 Pantin (France)
9. Modifications
We may modify this privacy policy at any time, in particular in order to comply with any regulatory,
jurisprudential, editorial or technical change. These modifications will apply
on the date of entry into force of the modified version. Please regularly
consult the latest version of this privacy policy. You will be kept posted of
any significant change of the privacy policy.
Entry into force: September 2022
[MOU1]Lien vers la Politique de cookie du site internet