Privacy Policy

The privacy and security of your personal data is important to us. This Privacy Policy explains how we may process your data when you use the Opendatasoft website (hereinafter referred to as “the Site”) or in the course of our business.

I. Who are we ?

This Policy applies between any person concerned by the processing of their personal data and OPENDATASOFT SAS (hereinafter referred to as “Opendatasoft”, “We” or “Us”), a simplified joint stock company incorporated under French law with a capital of 399,509 euros, registered in the Paris Trade and Companies Register under number 538 168 329 and having its registered office at 50 Boulevard Haussmann, 75009 Paris (France).

II. What is Opendatasoft’s commitment to privacy?

1. Presentation of the GDPR and the objectives of this Privacy Policy

Opendatasoft is committed to privacy and ensures that personal data is respected and protected. We have placed at the center of our commitments the protection of the personal data of our customers and users, as well as the personal data that they may entrust to us when using the Site or in the context of our activities, and therefore comply with Law No. 78-17 of 6 January 1978 known as “Informatique et Libertés”, as amended, and the European Data Protection Regulation No. 2016/679 (“GDPR”), which came into force on 25 May 2018 (hereinafter the “Regulation”).

This Privacy Policy is designed to help you understand how and why we may collect and process personal data and how you can exercise your rights.

If you have any questions about this document, please contact our Data Protection Officer at dpo@opendatasoft.com.

2. Who is subject to this Privacy Policy?

This Privacy Policy applies to anyone who provides or entrusts us with personal data.

It may be updated, in particular to take account of changes to our services, technology or legislation. These updates will be effective as soon as they are made available on our website.

3. What is meant by “personal data”?

For the purposes of the Regulations, “personal data” or “personal information” means any information relating to a natural person who can be identified, directly or indirectly, such as the surname, first name, e-mail and postal addresses of a natural person, his/her picture, an IP address, location data, etc.

III. Does Opendatasoft process personal data?

Opendatasoft may collect personal data when you visit the website, when you contact us or in the course of our activities. This personal data is processed by Opendatasoft as the data controller.

1. What types of personal data may be processed by Opendatasoft as data controller?

When you browse or interact on our website, we may collect various categories of personal data. This may include, but is not limited to :

• Data relating to your identity and professional situation (name, first name, job title, name of employer, sector of activity, professional contact details, etc.).
• Data relating to your browsing on the Site (logs, IP address, technical data relating to the equipment and browser used, cookies, etc.) and to your following of our communications (cookies and other tracers);
• Data relating to your job application (CV, etc.).

2. How is your data used?

We may process personal data for the following purposes :

• Answering and processing your messages, in particular for any questions or requests for information and your demo requests;
• Processing your newsletter and/or event subscriptions, inviting you to events organized by Opendatasoft or its partners;
• To inform you about new features, commercial offers or the latest information on Opendatasoft’s activities, in particular for prospecting purposes;
• To manage candidates or potential candidates and the recruitment process for one of Opendatasoft’s job offers;
• To manage the relationship with clients who have subscribed to Opendatasoft’s services;
• To ensure the proper functioning and continuous improvement of the website;
• To guarantee the security of our site;
• To understand how users navigate our website, but in a non-personalised way.

Opendatasoft also uses cookies while you are browsing its website. You can find out more about Opendatasoft’s use of cookies by clicking here.

Depending on the case, the legal basis for the processing of personal data may be one of those provided for in the Regulations, in particular :

• your consent
• the fulfilment of a legal obligation
• the legitimate interest of Opendatasoft
• the performance of a contract.

3. How is your data used?

We keep your data only as long as necessary for the purposes for which they were collected and at most within the limits provided for by the regulations, i.e. as the case may be:

• To send you our newsletters: until you unsubscribe (via the link included in the newsletters).
• For customer management: 3 years from the end of the commercial relationship.
• For commercial prospecting: 3 years from the date of our last contact.
• For processing your applications and managing a recruitment process: 2 years from the date of our last contact.
• For the proper operation and continuous improvement of the site: see the time periods indicated in the Cookie Policy.

4. Who will receive my data?

Your personal data will only be sent to authorized Opendatasoft personnel with a need to know, will be kept confidential and will not be sold or shared with third parties without your permission.Opendatasoft also uses certain trusted third parties to perform certain functions and provide services to you. In the event that any of the above third parties are located outside the European Economic Area (EEA), Opendatasoft will ensure that the transfer of personal data is subject to appropriate safeguards in accordance with the regulations.

5. What rights do I have regarding my personal data? How can I exercise them?

You have the right to access, modify and delete your personal data, the right to restrict, transfer, delete, revoke and oppose your consent, the right not to be subject to a decision based exclusively on automated processing, including profiling, and the right to determine the fate of your data in the event of your death, which you can exercise at any time by sending an e-mail to the Data Protection Officer of Opendatasoft at the following address: dpo@opendatasoft.com or by post. You also have the right to lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL), in particular at its website www.cnil.fr.