Privacy policy

Two different situations

When you visit this website or open an account, EMENDO is the data controller: we decide what data is collected and how it is used.

When your company uses Profiles Flow to publish its employees' profiles and receive contact requests, your company is the data controller, and EMENDO acts as a processor, within the meaning of article 28 of the GDPR. To exercise your rights over this data (your employee profile, the contact details you left on an employee's page), contact the company concerned. We will help it respond to you.

Data we process as controller

Website visits

• Audience measurement: we use Matomo, configured without cookies. The data collected (pages viewed, device type, referrer) is used only to improve the website and is never combined with other data. IP addresses are anonymized. This measurement applies only to this website: the Profiles Flow application does not use Matomo. This measurement is exempt from consent under the recommendations of the CNIL (French data protection authority): no banner is therefore shown to you.
• Technical logs of the web server (IP address, date, page requested), kept for 15 days for website security.

This website sets no advertising or social network cookies.

Opening and managing an account

• Data collected: company name, SIRET, last name, first name and business email address of the person signing up; then, for the subscription, billing information.
• Purposes: create and secure the account, send login codes, manage the subscription and billing, inform you of changes to the service and the terms.
• Legal basis: performance of the contract (the general terms and conditions of sale accepted at sign-up) and our legal obligations, particularly accounting obligations.
• Retention period: for the entire duration of the subscription, then 30 days after it ends so you can retrieve your data; accounting records are kept for 10 years, as required by law.

Payment

Payments are processed by Stripe. We never have access to your full credit card number or your bank details.

Data we process on behalf of our customers

To provide the service, we host the data our customers put into it: identity, job title, photo and business contact details of their employees; contact details and consent of the people who leave their contact details from a profile page.

We process this data only to provide the service and on our customers' instructions. We do not sell it, do not use it for advertising and share it only with the subprocessors required for the service.

Profile page analytics: views are measured without cookies and without storing IP addresses. A visitor is recognized for one day by an anonymous fingerprint that cannot be used the next day. Event details are kept for 90 days; only daily totals are kept beyond that.

Where the data is

Service data is hosted by Scaleway, a French hosting provider, in data centers located in France. Some subprocessors are US-law companies: their list, their role and the location of the data are published on our Subprocessors page. When a transfer outside the European Union takes place, it is governed by the safeguards provided for by the GDPR (adequacy decision or the European Commission's standard contractual clauses).

Security

Passwordless login (one-time code or passkey), encrypted HTTPS exchanges, role-based access, separate private links for Wallet cards and signatures, encrypted connector secrets. In the event of a data breach, we notify our customers as soon as possible.

Your rights

You have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to set instructions for what happens to it after your death.

To exercise them with EMENDO: by mail at 32 rue de Tournenfils, 91540 Mennecy, France, or by phone at 01 60 88 89 35. We will respond within one month.

If, after contacting us, you believe your rights are not being respected, you can file a complaint with the CNIL (www.cnil.fr).

Changes

We may update this policy. The date of the last update appears at the top of the page; in the event of a significant change, our customers are notified by email.