Logo of Mindmetrics
BlogContactPlanifier la démo →

Politique de confidentialité


PRIVACY POLICY – PERSONAL DATA

MINDMETRICS


  1. Scope

    Within the framework of the amended law No. 78-17 of January 6, 1978, relating to information technology, files, and freedoms and the Regulation (EU) 2016/679 of April 27, 2016, relating to the protection of individuals with regard to the processing of personal data and the free movement of such data (hereinafter referred to as the "Regulation(s)"), MINDMETRICS, a simplified joint-stock company with a capital of €10,000.00, registered with the RCS of Rennes under the number 985 350 610, with its registered office located at 90 B, Rue de Fougères, 35700 Rennes, France (hereinafter referred to as "MINDMETRICS"), has established a privacy policy regarding the processing of personal data.

    This privacy policy (hereinafter referred to as the "Policy") is intended to apply to the processing of data carried out from the website accessible via the following link: https://www.mindmetrics.ai (hereinafter referred to as the "Site").

    The Regulations stipulate that personal data (hereinafter referred to as "Personal Data") must be processed lawfully, fairly, and transparently. This Policy aims to provide users with simple and clear information regarding the processing of their Personal Data, carried out within the framework of the use of the Site.


  2. Data Controller

    In the context of operating its Site, MINDMETRICS collects and uses Personal Data. MINDMETRICS determines the means and purposes of processing as the data controller in accordance with the Regulations.

    For any questions or complaints concerning MINDMETRICS's compliance with this Policy, the person in charge of data within MINDMETRICS is available to respond, particularly to facilitate the exercise of rights relating to Personal Data, by sending an email to the following address: privacy@mindmetrics.ai.


  3. Data Collected

    In the context of operating the Site, MINDMETRICS may collect your Personal Data, in particular:

    • Identification Data (first name and/or last name);

    • Contact Data (email address);

    • Professional Data (name of your company);

    • Connection/Navigation Data (random and unique user identification number, IP address);

    • Other: comments submitted when scheduling a demo of the MINDMETRICS solution, subscription date to the newsletter.

    • Data from Google APIs (Drive, Sheets, Ads, Analytics):

      Mindmetrics uses certain Google APIs, including Google Drive, Google Sheets, Google Ads and Google Analytics, to allow users to connect their accounts and visualize their marketing performance within the platform.

      For Drive and Sheets connections, Mindmetrics uses the scope https://www.googleapis.com/auth/drive.file. This scope allows the application to access only the files that the user has explicitly selected or created through the application.

      Mindmetrics does not access or view any other files in the user's Google Drive account. Access is strictly limited to the files explicitly approved by the user for the purpose of generating marketing reports and dashboards.


  4. Purposes, legal basis, and retention periods

    Personal Data is collected and processed for specific purposes and on various legal grounds. Personal Data is also retained for determined periods.


    Purposes

    Personal Data collected

    Legal basis

    Retention period

    Schedule an appointment to present the MINDMETRICS solution

    First name and/or last name, email address, company name, user comments

    Legitimate interest of MINDMETRICS, i.e.: managing appointment scheduling for

    prospects

    3 years from the last contact of the user with MINDMETRICS.

    Manage the audience and traffic of the Site

    Random and unique user identification number

    Consent of the site users

    The retention period of the tracker is 13 months. MINDMETRICS retains the information collected via this

    tracker for 2 years.

    Manage subscriptions to the

    newsletter and the sending of related emails

    Email address, subscription date

    Consent of the recipients

    3 years from the last contact

    with the subscriber, or until consent is withdrawn


  5. Recipients of Personal Data processed by MINDMETRICS

The recipients of the Personal Data processed by MINDMETRICS are:

  • The internal services of MINDMETRICS, including employees who need to know this information due to their roles;

  • Third-party service providers, contractors, and more generally, subcontractors of MINDMETRICS, as defined by applicable data protection regulations, who are engaged to perform a range of operations and tasks on its behalf (for example: hosting providers), including:

    • Its cookie solution provider, namely Google Analytics,

    • Its meeting scheduling solution provider, namely Cal.com, to which the MINDMETRICS Site refers for appointment scheduling for demonstrations of its solution.

      However, these accesses occur only to the strict extent necessary for achieving the purposes described above. Furthermore, only the information necessary for the provision of the service is communicated to the partners. They are also required not to use the data for purposes other than those initially intended. MINDMETRICS takes all necessary measures to ensure that these third parties maintain the confidentiality and security of Personal Data.

  • Legal or regulatory authorities so that MINDMETRICS can comply with its legal obligations, as well as to its auditors and qualified individuals (lawyers, auditors, etc.) who may request access to this information in the context of their mission, potential audits, or litigation.


    MINDMETRICS does not sell the Personal Data collected in connection with the use of its services.


    Sharing and Disclosure of Google Data

    Data obtained from Google services (Drive, Sheets, Ads, Analytics) is not sold or shared with unauthorized third parties.

    It may be temporarily processed by our technical service providers (hosting, backup, infrastructure on Google Cloud Platform) only to ensure the proper functioning of the service.

    All such providers are bound by confidentiality and data protection agreements, and comply with the GDPR.


    1G. Source of Data Collection

    MINDMETRICS collects your Personal Data from you:

  • Directly through your consultation of its Site, as well as when you subscribe to its newsletter;

  • Indirectly when you provide your information in the Cal.com solution for the purpose of scheduling an appointment with MINDMETRICS for a demonstration of its solution.


  1. Transfer of Personal Data

    MINDMETRICS primarily retains Personal Data within French territory or, at the very least, within the European Economic Area (EEA).

    However, your data may be transmitted to service providers located outside the European Union, such as our cookie solution provider, Google Analytics, or our scheduling solution provider, Cal.com.

    MINDMETRICS ensures that this transfer is carried out legally, using the transfer tools provided by data protection regulations, and implements appropriate safeguards and protective measures. In this regard, either the providers are located in a country deemed to have an adequate level of protection by the European Commission, or standard contractual clauses approved by the European Commission have been signed with these recipients.

    International Data Transfers

    Data obtained through Google APIs may be hosted on Google Cloud Platform servers located within the European Union.

    If data is ever transferred outside the EU, such transfers are governed by the Standard Contractual Clauses (SCC) approved by the European Commission to ensure an equivalent level of protection.


  2. Retention Period of Personal Data

    MINDMETRICS retains the Personal Data processed in the context of its services only for the time necessary for the operations for which they were collected and in compliance with applicable Regulations. Retention periods may vary based on MINDMETRICS's legal obligations, particularly depending on:

    • Legal obligations;

    • Recommendations from supervisory authorities, including the CNIL. The retention periods are specified in section 4 of this Policy.


  3. Security of Personal Data

    MINDMETRICS is committed to protecting the Personal Data collected or processed against loss, destruction, alteration, unauthorized access, or disclosure.

    Thus, MINDMETRICS implements all appropriate technical and organizational measures, depending on the nature of the Personal Data and the risks associated with their processing, to ensure the security and confidentiality of such Data.

    These measures may include practices such as:

    • Limited access to Personal Data by MINDMETRICS employees based on their roles (Administrator);

    • Regular reviews of practices and procedures regarding MINDMETRICS's information systems, establishment of a virtual server to ensure service continuity;

    • Physical and/or logical security measures (secure access, VPS server, authentication processes, backups, antivirus software, firewalls, etc.).


    Security and Retention of Google API Data

    MINDMETRICS applies strict security measures (encryption, access control, and activity logging) to protect data retrieved via Google APIs.

    Data extracted from Google Drive or Sheets files is hosted on secure servers within Google Cloud Platform (EU region).

    Such data is retained only for as long as necessary to generate and display reports, and is automatically deleted within a maximum of 12 months after the last synchronization.


  4. User Rights of the MINDMETRICS Site

    Users of the MINDMETRICS online services have the following rights:

    • Right of Access: The right to request access to the Personal Data held by MINDMETRICS regarding the user; a copy of the collected Data may also be requested.

    • Right to Rectification: The right to request the correction of any inaccurate data regarding the user.

    • Right to Erasure: The right to request the deletion of their Personal Data under certain circumstances. MINDMETRICS may refuse this request if there are legitimate and compelling grounds that override the interests, rights, and freedoms of the data subject, if the data is necessary for the establishment, exercise, or defense of legal claims, if a contract binds the individual to MINDMETRICS, or if a legal obligation requires MINDMETRICS to retain this data.

    • Right to Data Portability: Under certain conditions, you may receive all your Personal Data that you have provided to MINDMETRICS in a structured format. You also have the right to request that MINDMETRICS transfer this data, where possible, to another data controller.

    • Right to Object: The right to object to processing based on legitimate interests.

    • Right to Withdraw Consent: The right to withdraw consent at any time.

    • Right to Restrict Processing: You have the right to impose restrictions on the processing of your data if:

      • You contest the accuracy of your data, until MINDMETRICS verifies its accuracy;

      • The processing is unlawful, but you do not wish for MINDMETRICS to delete your data;

      • MINDMETRICS no longer needs your Personal Data for processing purposes, but you require this data to establish, exercise, or defend against legal claims;

      • You object to processing based on legitimate grounds while awaiting verification of whether MINDMETRICS's legitimate and compelling grounds for continuing processing override these interests.

        If such Personal Data is subject to these types of restrictions, MINDMETRICS will only process your data with your consent or for the purpose of establishing, exercising its rights, or defending against legal claims.


    • Right Not to Be Subject to Automated Decision-Making: The right not to be subject to a decision based solely on automated processing.

    • Right to provide MINDMETRICS with instructions regarding the fate of your Personal Data after your death.


    Revoking Access to Google Data

    The user can revoke Mindmetrics' access to their Google Drive or Sheets files at any time through their Google Account settings: https://myaccount.google.com/permissions

    Once revoked, Mindmetrics immediately loses access to those files. Any data previously imported from Google can be deleted from the user's Mindmetrics workspace at any time, and is permanently removed from our servers within 30 days.


  5. Cookies


      1. Cookies are data files stored on the user's device (computer, tablet, smartphone) during their visit to a website or mobile application, intended to send information to the user's browser and return it to the originating site or mobile application.

        Cookies thus allow the retention of information, while the cookie is valid, when a browser accesses different pages of a website or mobile application, or when the browser is directed back to that site or mobile application. Only the issuer of a cookie can read or modify the information contained within it.

        There are different types of cookies:

        • Session cookies that disappear as soon as you leave the website or mobile application;

        • Permanent cookies that remain on your device until their lifespan expires or until you delete them using your browser's features or the settings of the mobile application.

          You are informed that cookies may be installed on your device during your visits to the Site.

      2. The cookies used on the MINDMETRICS Site are as follows:


        Cookie name

        Owner

        Details

        Duration

        _ga

        Google

        The "_ga" cookie allows a

        service to distinguish one user from another. It is used by all

        sites utilizing Google Analytics, including Google services. Each "ga" cookie is unique to a

        specific property and cannot be used to track a user or a given browser across unrelated

        websites.

        The duration of the tracker is 13 months.

        MINDMETRICS retains the information collected via this tracker for 2 years.

      3. When users navigate the MINDMETRICS Site, the placement and reading of cookies may allow for the analysis of Site traffic and measurement of its audience. Cookies are placed, subject to your specific consent where applicable, on your device during your visit to a website. These cookies can be blocked using your browser settings. Users of the platform have the option to freely oppose the placement of these cookies by changing the settings in one of four ways:

    1. - By configuring your browser to accept or reject cookies prior to your navigation or by regularly deleting them from your device (computer, tablet, smartphone) via the browser, specifically for the website mindmetrics.ai. For example:

    2. - By clicking on the secure padlock displayed in the request bar at https://mindmetrics.ai and then clicking on "cookies."

    3. - By configuring the website to accept or reject cookies prior to your navigation or by regularly deleting them from your device (computer, tablet, smartphone). However, by configuring your browser to refuse cookies, certain features—including security features—may not be accessible, for which MINDMETRICS cannot be held responsible.

    4. - By accessing the specific cookie management interface, available via a link at the bottom of the Site (CookieYes), which allows you to customize your cookie preferences, including accepting or disabling them, either entirely or partially, at any time.

  6. Governing Law

    This Policy is governed by French law.


  7. Modifications

MINDMETRICS keeps the right to modify the content of this Privacy Policy at any time and without prior notice. Users are encouraged to review it regularly.


For more information on Google's privacy practices, please visit the Google Privacy Policy.