Privacy policy

Processing your Personal Data

Data controller

When you create your iObeya User Account and use our services, your personal data is electronically processed by iObeya.

Data controller: iObeya, 1 rue Galvani, Bâtiment D, 91300 MASSY, France

Data Protection Officer: Guillaume Beaudoin (dpo@iobeya.com)

Data collected, purpose and legal basis

The legal basis for processing your personal data is the consent you give by checking the box when you create your account.

The personal data collected by means of this form is identifying data, such as surname, forename, professional e-mail address, required to identify you when you connect to your account , allowing you to:

use our services when using Applications that you are authorized to use in accordance with our General Conditions of Use;
be kept informed of the improvement, the development, the latest innovation and, more generally, any information relating our software and services;
use others services attached to the iObeya solution (download of the solution, documentation, extensions, access to the FAQ, contacting the help desk).

You are informed that the absence of consent to the processing of your personal data, you will be not able to use our service.

This personal data is also used to provide you with general information about the iObeya solution in the newsletter, which you can subscribe to by checking the corresponding box.

When you access your account using your login, iObeya uses cookies to record your browsing data on the site in order to improve the quality of its services, the usefulness of the information provided, and the advertising offered to your company.

Data storage period

1. If you use our services under a license agreement granted to your company (“Authorized User”)

Your data will be stored for the duration of the contract to deliver the solution or the service contract between your company and iObeya, or until you or your company notifies iObeya that you are no longer authorised to use this service. Your data will be deleted after this period.

2. If you use our services for free as a guest (“Invited User”)

You use our services in accordance with our General Conditions of Use, that you accepted when creating your User Account.

Your data will be stored:

until you ask us to delete it; or
until the cessation of the provision of our services, in particular in the case of termination of the services;

For more information about Authorized Users and Invited User, see our General Conditions of Use.

Data security

iObeya undertakes to encrypt the flows between the User and our services (e.g. through HTTPS and TLS), as well as any data stored by these services (e.g. through AES), based on the recommendations of the National Cybersecurity Agency of France (ANSSI). These security measures are proposed by default and for all the services provided by iObeya, and are regularly updated to ensure an appropriate level of security for data protection and data processing purposes.

Recipients of your data and data transfer

Your personal data will never be communicated to third parties, with the exception of iObeya’s subcontractors.

Exercising your rights

In accordance with the French law no. 78-17 of January 6, 1978 relating to information technology, files and freedoms (the French Data Protection Act), in its version amended from the French law no. 2018-493 of June 20, 2018 on the protection of personal data, and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), you have a right of access to your personal data, a right to have your data corrected or deleted, a right to limit the processing of your data, a right to object to the processing of your data, and a right to the portability of your data.

When you give your consent to the processing of your personal data, you have the right to withdraw that consent at any time, without prejudice to the lawfulness of the processing based on the consent you gave before its withdrawal.

You can exercise these rights by sending an e-mail to iObeya, as data controller, at dpo@iobeya.com, indicating your full name, your e-mail address, and your postal address, and attaching a copy of a valid ID.

These rights may be exercised after your death by the person you have designated or by your heirs under the conditions described in Article 40-1 of the French law no. 78-17 of January 6, 1978.

You have the right to lodge a complaint with the competent supervisory authority. iObeya’s supervisory authority is CNIL, France’s National Commission for Data Protection (www.cnil.fr).