Updated on January 4, 2025

Privacy Policy

When you browse our website https://sairen.io/ (the "Site") or in the context of managing our contractual relationships with our clients, we may collect personal data about you.

This policy aims to inform you about how we process your personal data, in accordance with Regulation (EU) 2016/679 of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the "GDPR") and Law No. 78-17 of January 6, 1978, on information technology, files, and freedoms (hereinafter "Applicable Regulation").

When you browse our website https://sairen.io/ (the "Site") or in the context of managing our contractual relationships with our clients, we may collect personal data about you.

Who is the data controller?

When you browse our website or in the course of managing our contractual relationships with our clients, the data controller is SAIREN, a simplified joint-stock company registered in the Trade and Companies Register of Nanterre under number 949 641 633, with its registered office located at 5, Allée d’Orléans, 92200 Neuilly-sur-Seine ("We"). However, when we provide our services to our clients, we process personal data on their behalf and for their own purposes. Our clients therefore act as data controllers in accordance with Article 4 of the GDPR, while we act as data processors.

What personal data do we collect?

Personal data is data that can identify a person directly or indirectly, in particular by reference to an identifier such as a name.

We may collect the following personal data:

Identification data: Full name Email address
Professional data: Company name Industry sector
Browsing data: (IP address, pages visited, date and time of connection, browser used, operating system, user ID, MAID, user behavior (mouse tracking).
Any information you wish to provide us as part of your contact request.

Personal data is data that can identify a person directly or indirectly, in particular by reference to an identifier such as a name.

We may collect the following personal data:

Identification data: Full name Email address
Professional data: Company name Industry sector
Browsing data: (IP address, pages visited, date and time of connection, browser used, operating system, user ID, MAID, user behavior (mouse tracking).
Any information you wish to provide us as part of your contact request.

We inform you, during the collection of your personal data, about the mandatory or optional nature.

On what legal basis, for what purposes, and for how long do we keep your personal data?

Objectives

Perform operations related to contracts and customer relationship management
Create a database of clients and prospects
To send newsletters, requests, and direct marketing mailings
To respond to your information request and other inquiries
To establish statistics (on browsing site audience, etc.) and improve site functionality by depositing measurement cookies
Process requests for the exercise of rights of concerned persons and prospects

Legal basis

Execution of a contract to which you are a party
Our legitimate interest in developing and promoting our activities
Our legitimate interest in retaining our customers and informing our customers of our latest news
Our legitimate interest in responding to your requests
Our legitimate interest in analyzing the composition of our customer database and improving our services
Our legitimate interest in responding to your requests and recording them

Data conservation

Personal data is retained for the duration of our business relationship
Our legitimate interest in developing and promoting our activities
Personal data is retained for a period of 3 years from the last contact with us (e.g. communication, action)
Personal data is retained for a period of 3 years from the date of your last contact
Personal data is retained for 25 months
Proof of identity: If requested, we retain it only for the time necessary for verification, after which it is deleted
Opting out of direct marketing: If you exercise this right, we retain this information for 3 years.

Who are the recipients of your personal data?

The following categories of recipients will have access to your personal data:

(i) Our company staff;
(ii) Our subcontractors: hosting provider, feedback platform, monitoring platform, communication provider, newsletter provider, CRM tool, mailing provider, audience measurement tool, billing tool, cookie management tool; the freelancers we work with.
(iii) Where applicable: public and private organizations, solely to comply with our legal obligations.

The following categories of recipients will have access to your personal data:

(i) Our company staff;
(ii) Our subcontractors: hosting provider, feedback platform, monitoring platform, communication provider, newsletter provider, CRM tool, mailing provider, audience measurement tool, billing tool, cookie management tool; the freelancers we work with.
(iii) Where applicable: public and private organizations, solely to comply with our legal obligations.

Is your personal data likely to be transferred outside of the European Union?

Your personal data is hosted for the entire duration of its processing on the servers of the company Google, located in the European Union. As part of the tools we use and the freelancers we collaborate with (see the article on the recipients of your personal data, including our subcontractors), your personal data may be transferred outside the European Union. The transfer of your personal data in this context is secured by using the following guarantees:

Either the personal data is transferred to a country recognized as providing an adequate level of protection by decision of the European Commission, in accordance with Article 45 of the GDPR: in this case, this country provides a level of protection deemed sufficient and adequate with regard to the provisions of the GDPR; or
The personal data is transferred to a country whose level of data protection has not been recognized as adequate under the GDPR: in this case, these transfers are based on appropriate safeguards, such as those indicated in Article 46 of the GDPR, tailored to each service provider, including, but not limited to, the application of standard contractual clauses approved by the European Commission, the application of binding corporate rules or an approved certification mechanism; or
The personal data is transferred in accordance with the appropriate safeguards described in Chapter V of the GDPR. 6. What rights can you exercise regarding your personal data?

Either the personal data is transferred to a country recognized as providing an adequate level of protection by decision of the European Commission, in accordance with Article 45 of the GDPR: in this case, this country provides a level of protection deemed sufficient and adequate with regard to the provisions of the GDPR; or
The personal data is transferred to a country whose level of data protection has not been recognized as adequate under the GDPR: in this case, these transfers are based on appropriate safeguards, such as those indicated in Article 46 of the GDPR, tailored to each service provider, including, but not limited to, the application of standard contractual clauses approved by the European Commission, the application of binding corporate rules or an approved certification mechanism; or
The personal data is transferred in accordance with the appropriate safeguards described in Chapter V of the GDPR. 6. What rights can you exercise regarding your personal data?

You have the following rights regarding your personal data:

The right to be informed: this is precisely the reason we have drafted this privacy policy, in accordance with Articles 13 and 14 of the GDPR.
The right of access: you have the right to access all your personal data at any time, in accordance with Article 15 of the GDPR.
The right to rectification: you have the right to rectify any inaccurate, incomplete, or outdated personal data at any time, in accordance with Article 15 of the GDPR.
The right to restrict processing: you have the right to limit the processing of your data in certain specific cases defined in Article 18 of the GDPR.
The right to erasure (“right to be forgotten”): you have the right to request the erasure of your personal data and to prohibit its use. To request the erasure of your personal data and to prohibit any future collection, in accordance with Article 17 of the GDPR.
The right to lodge a complaint with a competent supervisory authority (in France, the CNIL), under Article 77 of the GDPR, if you believe that the processing of your personal data constitutes a violation of applicable regulations.
The right to give directives regarding the retention, erasure, and communication of your personal data after your death.
The right to withdraw your consent at any time: for purposes based on consent, Article 7 of the GDPR provides that you can withdraw your consent at any time. This withdrawal will not affect the lawfulness of the processing carried out before the withdrawal.
The right to data portability: under specific conditions defined in Article 20 of the GDPR, you have the right to receive the personal data you have provided to us in a standard machine-readable format and to request its transfer to the recipient of your choice.
The right to object: you have the right to object to the processing of your personal data as defined by Article 21 of the GDPR. Please note that we may continue to process your personal data despite this objection for legitimate reasons or for the defense of legal rights.

You can exercise these rights by writing to us at the contact details below. In this regard, we may ask you to provide us with additional information or documents to prove your identity.

You have the following rights regarding your personal data:

The right to be informed: this is precisely the reason we have drafted this privacy policy, in accordance with Articles 13 and 14 of the GDPR.
The right of access: you have the right to access all your personal data at any time, in accordance with Article 15 of the GDPR.
The right to rectification: you have the right to rectify any inaccurate, incomplete, or outdated personal data at any time, in accordance with Article 15 of the GDPR.
The right to restrict processing: you have the right to limit the processing of your data in certain specific cases defined in Article 18 of the GDPR.
The right to erasure (“right to be forgotten”): you have the right to request the erasure of your personal data and to prohibit its use. To request the erasure of your personal data and to prohibit any future collection, in accordance with Article 17 of the GDPR.
The right to lodge a complaint with a competent supervisory authority (in France, the CNIL), under Article 77 of the GDPR, if you believe that the processing of your personal data constitutes a violation of applicable regulations.
The right to give directives regarding the retention, erasure, and communication of your personal data after your death.
The right to withdraw your consent at any time: for purposes based on consent, Article 7 of the GDPR provides that you can withdraw your consent at any time. This withdrawal will not affect the lawfulness of the processing carried out before the withdrawal.
The right to data portability: under specific conditions defined in Article 20 of the GDPR, you have the right to receive the personal data you have provided to us in a standard machine-readable format and to request its transfer to the recipient of your choice.
The right to object: you have the right to object to the processing of your personal data as defined by Article 21 of the GDPR. Please note that we may continue to process your personal data despite this objection for legitimate reasons or for the defense of legal rights.

You can exercise these rights by writing to us at the contact details below. In this regard, we may ask you to provide us with additional information or documents to prove your identity.

What cookies do we use?

For more information about managing cookies,

Changes

We may modify this privacy policy at any time, particularly to comply with any regulatory, case law, editorial, or technical changes.

These changes will apply from the effective date of the modified version.

Please regularly review the latest version of this privacy policy.

You will be informed of any significant changes to the privacy policy.

Effective date: 04/01/2025