Legal information
Privacy policy
How personal data collected from this site is processed, by whom, for how long, and how to exercise your rights.
This is a translation provided for convenience. The French version is the legally binding text.
See also the legal notice.
01 Scope of this document
This policy concerns the data collected by this site: the requests sent through the contact form and, if you accept it, audience measurement data.
Data processed inside the EPMind platform falls under the service agreement entered into with each client, which sets out the conditions for its processing and retention.
02 Data controller
Personal data collected on this site is processed by EPMind as data controller. Any question concerning this processing may be sent to contact@epmind.com.
- Controller
- EPMind, SASU with share capital of EUR 5,000.00
- Registered office
- 16 avenue Matignon, 75008 Paris, France
- Contact
- contact@epmind.com
03 GDPR compliance
In accordance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679) and the French Data Protection Act of January 6, 1978 as amended, EPMind undertakes to protect the personal data of this site’s users.
04 Data collected and purposes
Apart from audience measurement, described below, personal data is collected solely through the site’s forms. The contact form collects your name and role, your company, your work email address, the range for the number of entities in your scope, and, where applicable, your message. The IP address from which the form is submitted is also recorded, for security purposes and to prevent abusive submissions. This data is used to handle your request and to carry out the related commercial follow-up.
The reporting self-assessment is the subject of a separate processing operation, described in the following section.
With your consent, and only with it, this site measures its audience using Contentsquare: pages viewed, browsing paths, interactions with the pages (clicks, scrolling, mouse movements), and technical information about your device and browser. This data is used to understand how the site is used in order to improve it; it is used neither for advertising nor for commercial follow-up.
05 Reporting self-assessment
The self-assessment offered on this site can be used without transmitting any data: the questions and the calculation of the result run in your browser, and nothing is sent to EPMind unless you decide otherwise.
At the end, you may choose to send us your results so that we can discuss them. In that case only, the following information is sent to us:
— your business contact details: name, role, company, work email address, and the message you write where applicable;
— your answers to the self-assessment questions and the resulting score.
Purpose — to answer your request and carry out the related commercial follow-up.
Legal basis — a pre-contractual measure taken at your request, within the meaning of Article 6.1.b of the General Data Protection Regulation.
Recipients — only the EPMind teams in charge of the commercial relationship. Your answers are neither sold, nor published, nor used for statistical purposes outside your own file.
Retention — five years from the last contact, as for any request sent through this site.
If you do not send your results, no data from the self-assessment is retained by EPMind.
06 Legal basis
The processing carried out from this site rests on three distinct legal bases, depending on its nature.
- Contact request
- Pre-contractual measure — Article 6.1.b of the GDPR. The processing is necessary for the performance of pre-contractual measures taken at the request of the data subject.
- General contact and commercial follow-up
- Legitimate interest — Article 6.1.f of the GDPR, consisting in answering the inquiries received and maintaining the commercial relationship.
- Audience measurement
- Consent — Article 6.1.a of the GDPR and Article 82 of the French Data Protection Act. It may be withdrawn at any time, as easily as it was given.
07 Processors
Data collected through this site is hosted by Infomaniak Network SA, in its data centers located in Switzerland. It is not passed on to any third party for commercial or advertising purposes.
Audience measurement is entrusted to Contentsquare SAS, based in Paris, acting as EPMind’s processor. It receives data only if you have accepted audience measurement.
Data processed inside the EPMind platform is hosted on Microsoft Azure, in data centers located in Europe. The applicable conditions are set out in the service agreement.
08 Retention period
Data is retained for five years from the last contact, a period corresponding to the decision cycle of finance transformation projects.
Audience measurement data is retained for no more than thirteen months.
09 Security
Access to the platform is protected by multi-factor authentication, communications are encrypted, and access rights are granular by functional, geographic, and analytical scope.
The platform’s hosting infrastructure is ISO 27001 and SOC 2 certified: these are the hosting provider’s certifications, not certifications held by EPMind.
11 Your rights
You have rights of access, rectification, erasure, portability, restriction of processing, and objection over data concerning you. You can exercise these rights by writing to contact@epmind.com.
Where the processing rests on EPMind’s legitimate interest, you may object to it at any time, without having to give reasons. It will be brought to an end, save on compelling grounds relating to the establishment, exercise, or defense of a legal claim.
12 Supervisory authority
If you consider that the processing of your personal data constitutes a breach of the GDPR, you have the right to lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL), the French data protection authority.
- CNIL
- www.cnil.fr