Politiques de confidentialité

We place great importance on the confidentiality and security of your personal data. This privacy policy explains how we may process your data when you use the Opendatasoft website (hereinafter referred to as “the Site”) or in the context of our activities.

I. Who Are We?

This policy applies to any individual concerned by the processing of their personal data and OPENDATASOFT SAS (hereinafter referred to as “Opendatasoft”, “We”), a French simplified joint-stock company with a share capital of €399,509, registered with the Paris Trade and Companies Register under number 538 168 329, and whose registered office is located at 32 Avenue de l’Opéra, 75002 Paris (France).

II. How Is Opendatasoft Committed to Data Protection?

Overview of the GDPR and the objectives of this privacy policy

Opendatasoft is committed to data protection and ensures the respect and safeguarding of personal data. We place the protection of the personal data of our clients and users — as well as the data they may entrust to us through the use of our website or in the context of our activities — at the heart of our commitments. Accordingly, we comply with French Law No. 78-17 of January 6, 1978, as amended (known as the “Data Protection Act”), and with the European General Data Protection Regulation No. 2016/679 (“GDPR”), which came into effect on May 25, 2018 (hereinafter the “Regulation”).

This Privacy Policy aims to help you understand how and why we may collect and process personal data and how you can exercise your rights.

For any questions regarding this document, feel free to contact our Data Protection Officer at the following address: dpo@opendatasoft.com.

Who is concerned by this Privacy Policy?

This Privacy Policy applies to anyone who provides or entrusts personal data to us.

It may be updated, particularly to reflect changes in our services, technologies, or applicable regulations. Any updates will be effective upon being made available on our website.

What is meant by “personal data”?

Under the Regulation, “personal data” refers to any information relating to an identified or identifiable natural person, such as a person’s name, surname, email and postal addresses, image, IP address, location data, etc.

III. Does Opendatasoft Process Personal Data?

Opendatasoft may collect personal data when you visit the website, contact us, or in connection with our business activities. This personal data is processed by Opendatasoft as the data controller.

What types of personal data may be processed by Opendatasoft as a data controller?

When you browse or interact on our website, we may collect various categories of personal data. This may include, but is not limited to:

Data relating to your identity and professional status (name, first name, job title, employer name, industry sector, professional contact details, etc.);
Data relating to your browsing on the website (logs, IP address, technical data about the device and browser used, cookies, etc.) and your interactions with our communications (cookies and other trackers);
Data relating to your job application (e.g., CV).

How is your data used?

We process personal data for the following purposes, depending on the case:

To respond to and handle your messages, including any questions, requests for information, or demo requests;
To manage your registration for newsletters and/or events, and to invite you to events organized by Opendatasoft or its partners;
To communicate new features, commercial offers, or the latest news related to Opendatasoft’s activities, especially for marketing purposes;
To manage candidates or potential candidates and the recruitment process for a job opening at Opendatasoft;
To manage the relationship with clients who have subscribed to Opendatasoft’s services;
To ensure the proper functioning and continuous improvement of the website;
To ensure the security of our website;
To understand how users navigate our website, in a non-personalized manner.

Opendatasoft also uses cookies while you browse its website. You can learn more about our use of cookies by clicking [here].

What are the legal bases for processing personal data?

Depending on the situation, the legal basis for our data processing may include:

Your consent;
Compliance with a legal obligation;
Opendatasoft’s legitimate interest;
The performance of a contract.

What are the applicable retention periods?

We retain your data only for as long as necessary to fulfill the intended purposes, and at most within the limits established by the Regulation, which are:

For newsletters: until you unsubscribe (via the link included in the emails);
For customer relationship management: 3 years from the end of the commercial relationship;
For marketing purposes: 3 years from our last contact;
For handling job applications and recruitment processes: 2 years from our last contact;
For website functionality and continuous improvement: see the durations specified in our Cookie Policy.

Who will receive my data?

Your personal data will only be accessible to authorized Opendatasoft personnel who need to know such information. It will be handled confidentially and will not be sold or transferred to third parties without your consent.

Opendatasoft may also use trusted third-party providers to perform certain functions and deliver services. If any such third parties are located outside the European Economic Area (EEA), Opendatasoft will ensure that appropriate safeguards are in place in accordance with the Regulation.

What rights do I have regarding my personal data? How can I exercise them?

You have the right to access, modify, and delete your data, as well as the right to restrict processing, data portability, erasure, withdrawal of consent, and to object to processing. You also have the right not to be subject to a decision based solely on automated processing, including profiling, and to define directives regarding the handling of your data after your death.

You may exercise these rights at any time by contacting Opendatasoft’s Data Protection Officer at: dpo@opendatasoft.com or by postal mail.

You also have the right to lodge a complaint with the French Data Protection Authority (CNIL), particularly via its website: www.cnil.fr.