Updated on January 4, 2025

Privacy Policy

When you browse our website https://sairen.io/ (the "Site") or in the context of managing our contractual relationships with our clients, we may collect personal data about you.

This policy aims to inform you about how we process your personal data, in accordance with Regulation (EU) 2016/679 of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the "GDPR") and Law No. 78-17 of January 6, 1978, on information technology, files, and freedoms (hereinafter "Applicable Regulation").

When you browse our website https://sairen.io/ (the "Site") or in the context of managing our contractual relationships with our clients, we may collect personal data about you.

Who is the data controller?

When you browse our website or in the course of managing our contractual relationships with our clients, the data controller is SAIREN, a simplified joint-stock company registered in the Trade and Companies Register of Nanterre under number 949 641 633, with its registered office located at 5, Allée d’Orléans, 92200 Neuilly-sur-Seine ("We"). However, when we provide our services to our clients, we process personal data on their behalf and for their own purposes. Our clients therefore act as data controllers in accordance with Article 4 of the GDPR, while we act as data processors.

What personal data do we collect?

Personal data is data that can identify a person directly or indirectly, in particular by reference to an identifier such as a name.

We may collect the following personal data:

Identification data: Full name Email address
Professional data: Company name Industry sector
Browsing data: (IP address, pages visited, date and time of connection, browser used, operating system, user ID, MAID, user behavior (mouse tracking).
Any information you wish to provide us as part of your contact request.

Personal data is data that can identify a person directly or indirectly, in particular by reference to an identifier such as a name.

We may collect the following personal data:

Identification data: Full name Email address
Professional data: Company name Industry sector
Browsing data: (IP address, pages visited, date and time of connection, browser used, operating system, user ID, MAID, user behavior (mouse tracking).
Any information you wish to provide us as part of your contact request.

We inform you, during the collection of your personal data, about the mandatory or optional nature.

On what legal basis, for what purposes, and for how long do we keep your personal data?

Objectives

Perform operations related to contracts and customer relationship management
Create a database of clients and prospects
To send newsletters, requests, and direct marketing mailings
To respond to your information request and other inquiries
To establish statistics (on browsing site audience, etc.) and improve site functionality by depositing measurement cookies
Process requests for the exercise of rights of concerned persons and prospects

Legal basis

Execution of a contract to which you are a party
Our legitimate interest in developing and promoting our activities
Our legitimate interest in retaining our customers and informing our customers of our latest news
Our legitimate interest in responding to your requests
Our legitimate interest in analyzing the composition of our customer database and improving our services
Our legitimate interest in responding to your requests and recording them

Data conservation

Personal data is retained for the duration of our business relationship
Our legitimate interest in developing and promoting our activities
Personal data is retained for a period of 3 years from the last contact with us (e.g. communication, action)
Personal data is retained for a period of 3 years from the date of your last contact
Personal data is retained for 25 months
Proof of identity: If requested, we retain it only for the time necessary for verification, after which it is deleted
Opting out of direct marketing: If you exercise this right, we retain this information for 3 years.

Who are the recipients of your personal data?

The following categories of recipients will have access to your personal data:

(i) Our company staff;
(ii) Our subcontractors: hosting provider, feedback platform, monitoring platform, communication provider, newsletter provider, CRM tool, mailing provider, audience measurement tool, billing tool, cookie management tool; the freelancers we work with.
(iii) Where applicable: public and private organizations, solely to comply with our legal obligations.

The following categories of recipients will have access to your personal data:

(i) Our company staff;
(ii) Our subcontractors: hosting provider, feedback platform, monitoring platform, communication provider, newsletter provider, CRM tool, mailing provider, audience measurement tool, billing tool, cookie management tool; the freelancers we work with.
(iii) Where applicable: public and private organizations, solely to comply with our legal obligations.

Is your personal data likely to be transferred outside of the European Union?

Your personal data is hosted for the entire duration of its processing on the servers of the company Google, located in the European Union. As part of the tools we use and the freelancers we collaborate with (see the article on the recipients of your personal data, including our subcontractors), your personal data may be transferred outside the European Union. The transfer of your personal data in this context is secured by using the following guarantees:

Either the personal data is transferred to a country recognized as providing an adequate level of protection by decision of the European Commission, in accordance with Article 45 of the GDPR: in this case, this country provides a level of protection deemed sufficient and adequate with regard to the provisions of the GDPR; or
The personal data is transferred to a country whose level of data protection has not been recognized as adequate under the GDPR: in this case, these transfers are based on appropriate safeguards, such as those indicated in Article 46 of the GDPR, tailored to each service provider, including, but not limited to, the application of standard contractual clauses approved by the European Commission, the application of binding corporate rules or an approved certification mechanism; or
The personal data is transferred in accordance with the appropriate safeguards described in Chapter V of the GDPR. 6. What rights can you exercise regarding your personal data?

Either the personal data is transferred to a country recognized as providing an adequate level of protection by decision of the European Commission, in accordance with Article 45 of the GDPR: in this case, this country provides a level of protection deemed sufficient and adequate with regard to the provisions of the GDPR; or
The personal data is transferred to a country whose level of data protection has not been recognized as adequate under the GDPR: in this case, these transfers are based on appropriate safeguards, such as those indicated in Article 46 of the GDPR, tailored to each service provider, including, but not limited to, the application of standard contractual clauses approved by the European Commission, the application of binding corporate rules or an approved certification mechanism; or
The personal data is transferred in accordance with the appropriate safeguards described in Chapter V of the GDPR. 6. What rights can you exercise regarding your personal data?

You have the following rights regarding your personal data:

The right to be informed: this is precisely the reason we have drafted this privacy policy, in accordance with Articles 13 and 14 of the GDPR.
The right of access: you have the right to access all your personal data at any time, in accordance with Article 15 of the GDPR.
The right to rectification: you have the right to rectify any inaccurate, incomplete, or outdated personal data at any time, in accordance with Article 15 of the GDPR.
The right to restrict processing: you have the right to limit the processing of your data in certain specific cases defined in Article 18 of the GDPR.
The right to erasure (“right to be forgotten”): you have the right to request the erasure of your personal data and to prohibit its use. To request the erasure of your personal data and to prohibit any future collection, in accordance with Article 17 of the GDPR.
The right to lodge a complaint with a competent supervisory authority (in France, the CNIL), under Article 77 of the GDPR, if you believe that the processing of your personal data constitutes a violation of applicable regulations.
The right to give directives regarding the retention, erasure, and communication of your personal data after your death.
The right to withdraw your consent at any time: for purposes based on consent, Article 7 of the GDPR provides that you can withdraw your consent at any time. This withdrawal will not affect the lawfulness of the processing carried out before the withdrawal.
The right to data portability: under specific conditions defined in Article 20 of the GDPR, you have the right to receive the personal data you have provided to us in a standard machine-readable format and to request its transfer to the recipient of your choice.
The right to object: you have the right to object to the processing of your personal data as defined by Article 21 of the GDPR. Please note that we may continue to process your personal data despite this objection for legitimate reasons or for the defense of legal rights.

You can exercise these rights by writing to us at the contact details below. In this regard, we may ask you to provide us with additional information or documents to prove your identity.

You have the following rights regarding your personal data:

The right to be informed: this is precisely the reason we have drafted this privacy policy, in accordance with Articles 13 and 14 of the GDPR.
The right of access: you have the right to access all your personal data at any time, in accordance with Article 15 of the GDPR.
The right to rectification: you have the right to rectify any inaccurate, incomplete, or outdated personal data at any time, in accordance with Article 15 of the GDPR.
The right to restrict processing: you have the right to limit the processing of your data in certain specific cases defined in Article 18 of the GDPR.
The right to erasure (“right to be forgotten”): you have the right to request the erasure of your personal data and to prohibit its use. To request the erasure of your personal data and to prohibit any future collection, in accordance with Article 17 of the GDPR.
The right to lodge a complaint with a competent supervisory authority (in France, the CNIL), under Article 77 of the GDPR, if you believe that the processing of your personal data constitutes a violation of applicable regulations.
The right to give directives regarding the retention, erasure, and communication of your personal data after your death.
The right to withdraw your consent at any time: for purposes based on consent, Article 7 of the GDPR provides that you can withdraw your consent at any time. This withdrawal will not affect the lawfulness of the processing carried out before the withdrawal.
The right to data portability: under specific conditions defined in Article 20 of the GDPR, you have the right to receive the personal data you have provided to us in a standard machine-readable format and to request its transfer to the recipient of your choice.
The right to object: you have the right to object to the processing of your personal data as defined by Article 21 of the GDPR. Please note that we may continue to process your personal data despite this objection for legitimate reasons or for the defense of legal rights.

You can exercise these rights by writing to us at the contact details below. In this regard, we may ask you to provide us with additional information or documents to prove your identity.

Données traitées via Meta et Instagram

Lorsque vous connectez un compte Instagram ou utilisez des fonctionnalités reposant sur les services Meta, nous pouvons traiter les informations accessibles par l’intermédiaire des API Meta/Instagram, telles que les identifiants de compte, informations de profil, messages, contenus, statistiques et données techniques strictement nécessaires au fonctionnement du service. Ces données sont traitées afin de fournir les fonctionnalités demandées, gérer les échanges avec votre audience, assurer la sécurité du service et répondre à nos obligations légales. Elles sont conservées uniquement pendant la durée nécessaire à ces finalités, puis supprimées ou anonymisées, sous réserve des obligations légales applicables. Vous pouvez demander l’accès, la rectification ou la suppression des données concernées en nous contactant à gdpr@sairen.io. Vous pouvez également gérer ou retirer les autorisations accordées à Sairen depuis les paramètres de votre compte Meta ou Instagram.

Données traitées via les API Google

Lorsque vous connectez un compte Google à Sairen, nous traitons les informations strictement nécessaires au fonctionnement de la fonctionnalité demandée.

Pour la messagerie Gmail : votre adresse électronique principale, afin d’identifier le compte connecté et de vous permettre de le distinguer des autres comptes reliés ; le contenu des messages reçus et envoyés sur cette boîte, leurs destinataires et leurs pièces jointes, afin de les afficher dans votre espace de travail Sairen, de vous permettre d’y répondre depuis Sairen, et de vous proposer des réponses rédigées par notre assistant ; ainsi que l’état de lecture et les libellés des messages, que nous mettons à jour dans votre boîte lorsque vous traitez une conversation depuis Sairen, afin que les deux restent cohérents.

Nous n’accédons jamais aux messages sans rapport avec les conversations que vous avez choisi de centraliser dans Sairen, et nous ne supprimons jamais aucun message.

Pour Google Business Profile : les informations de vos fiches d’établissement et les avis qui leur sont associés, afin de vous permettre de les consulter et d’y répondre depuis Sairen.

L’utilisation par Sairen des informations reçues des API Google, qu’elles soient brutes, agrégées ou dérivées, respecte la Google API Services User Data Policy, y compris ses exigences d’utilisation limitée (Limited Use). En particulier, ces informations ne sont jamais utilisées, transférées ni vendues pour créer, entraîner ou améliorer des modèles d’intelligence artificielle généralistes ou fondationnels, et ne sont jamais cédées à des tiers à des fins publicitaires.

Sairen’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Ces données sont conservées uniquement pendant la durée nécessaire à ces finalités, puis supprimées ou anonymisées, sous réserve des obligations légales applicables. La déconnexion du compte Google depuis Sairen entraîne la suppression des données de messagerie associées. Vous pouvez à tout moment retirer les autorisations accordées à Sairen depuis les paramètres de votre compte Google (https://myaccount.google.com/permissions), ou demander l’accès, la rectification ou la suppression des données concernées en nous écrivant à gdpr@sairen.io.

Les informations reçues des API Google sont utilisées exclusivement pour fournir et améliorer les fonctionnalités de Sairen visibles par l’utilisateur. Les finalités de prospection, de marketing direct et de constitution d’une base de prospects décrites ailleurs dans la présente politique ne s’appliquent pas à ces informations.

Protection de ces données. Ces informations sont chiffrées en transit (TLS 1.2 ou supérieur) et au repos. Les jetons d’accès Google sont conservés chiffrés côté serveur et ne sont jamais exposés au navigateur. L’accès est restreint aux membres autorisés de votre organisation et aux personnels Sairen habilités, selon le principe du moindre privilège. Les données sont hébergées dans l’Union européenne, chez un hébergeur certifié HDS.

What cookies do we use?

For more information about managing cookies,

Changes

We may modify this privacy policy at any time, particularly to comply with any regulatory, case law, editorial, or technical changes.

These changes will apply from the effective date of the modified version.

Please regularly review the latest version of this privacy policy.

You will be informed of any significant changes to the privacy policy.

Effective date: 04/01/2025