Privacy Policy

Privacy Policy

Privacy Policy

1. Data controller

The controller of the personal data collected on the site is Piman Group, as well as, where applicable, its subsidiaries and affiliated companies involved in the relationship with you, including in particular PIMAN Consultants, Private Discuss and PIMAN AI, within the limits of their respective needs and in accordance with this policy.

Contact details: contact@piman-group.fr

Postal address: Piman Group, Celtic Parc Avalon 2, 304 D306, 69760 Limonest.

2. Purpose of the policy

This privacy policy is intended to inform you clearly, transparently and accessibly about how we collect, use, store and protect your personal data when you use our website, contact us, apply for a job offer, download content, register for an event or interact with us in a professional context.

3. Categories of data collected

  • Identification and contact data: surname, first name, email address, telephone number, company, job title.
  • Data voluntarily provided: content of your messages, information requests, responses to forms, information provided as part of an application, download or registration.
  • Data relating to the commercial or pre-contractual relationship: expressed needs, exchanges, contact history, professional interests, participation in events or webinars.
  • Technical and browsing data: IP address, browser type, operating system, date and time of connection, pages viewed, clicked links, downloads, configuration settings, technical logs.
  • Data from electronic communications: responses to our emails, opens, clicks, interactions with certain content when these features are activated.
  • Where applicable, data from social networks, third-party services or advertising campaigns when you interact with our content or forms published on third-party platforms.

4. Purposes of processing and legal bases

We process your personal data only for specific, explicit and legitimate purposes. The table below sets out, for each main purpose, the legal basis relied upon.

Purpose of processing Data concerned Legal basis Indicative retention period
Responding to your requests for contact, information, demonstrations or appointments Identity, contact details, company, content of the request Legitimate interest; or pre-contractual measures if your request is intended to lead to a contract 12 months from the last contact initiated by you
Managing applications and the recruitment process CV, cover letter, contact details, exchanges, professional information Pre-contractual measures at the candidate’s request; legitimate interest in organizing recruitment 12 months from the last contact with the candidate
Managing registrations for events, webinars, content downloads and publications Identity, contact details, company, job title, registration history Legitimate interest in administering the requested service; or performance of pre-contractual measures depending on the context 12 months from the last active contact
Sending newsletters, invitations and marketing communications Name, first name, email, company, interests, marketing history Consent where required; otherwise, legitimate interest in cases permitted by the applicable regulations 12 months from the last active contact or until consent is withdrawn if this occurs earlier
Personalizing content, measuring engagement and improving our communications Browsing data, clicks, opens, downloads, interactions Legitimate interest where no tracker subject to consent is used 12 months maximum
Ensuring the technical operation of the site, maintenance, security, logging and fraud prevention Logs, IP address, technical data, technical identifiers, security metadata Legitimate interest in securing the site, preventing misuse and ensuring service continuity 12 months maximum, subject to a shorter period where possible
Complying with our legal, regulatory, accounting or evidentiary obligations Any data strictly necessary for the relevant obligation Legal obligation For the period imposed by the applicable text or the statutory limitation period

Processing carried out on the site does not rely on non-essential cookies or other trackers. The legal bases indicated above are applied depending on the actual context of collection.

5. Mandatory or optional nature of data

Some fields in our forms are mandatory because they are necessary to process your request. Optional fields are identified as such. If you do not provide mandatory data, we may not be able to respond to your request or provide the relevant service.

6. Recipients of the data

  • authorized internal teams of Piman Group and, where applicable, group entities concerned by your request;
  • our technical, hosting, maintenance, marketing or event organization service providers, acting as processors;
  • administrative or judicial authorities, or authorized bodies, where the law requires or permits us to do so.

We do not sell your personal data to third parties.

7. Transfers outside the European Union

Personal data collected via the site is hosted and processed exclusively within the European Union. No transfer of data outside the European Union is carried out as part of the processing described in this policy.

8. Retention periods

We retain your personal data for no longer than is necessary for the purposes pursued. Unless a legal obligation requires otherwise or longer retention is necessary for the exercise or defense of our rights, data collected via the site is retained for a maximum period of 12 months from its collection or from the last contact initiated by you.

  • Contact requests and prospects: 12 months from the last contact initiated by you.
  • Applications: 12 months from the last contact with the candidate.
  • Data related to registrations, content downloads and professional exchanges: 12 months from the last contact.
  • Logs and technical data: 12 months maximum, subject to a shorter period where technically possible and appropriate.
  • Data necessary to comply with legal obligations or to defend our rights: for the period strictly necessary for the relevant obligation or applicable limitation period.

9. Security

We implement appropriate technical and organizational measures in order to preserve the confidentiality, integrity, availability and security of your personal data, and in particular to prevent its loss, alteration, disclosure or unauthorized access.

10. Your rights

In accordance with the applicable regulations, you have, depending on the circumstances, the following rights:

  • right of access to your personal data;
  • right to rectification of inaccurate or incomplete data;
  • right to erasure, within the limits provided by law;
  • right to restriction of processing;
  • right to object, in particular to direct marketing;
  • right to data portability where applicable;
  • right to withdraw your consent at any time where processing is based on consent;
  • right to define instructions concerning the fate of your data after your death.

You may exercise these rights by writing to: contact@piman-group.fr or dpo@bypiman.fr. In the event of reasonable doubt as to your identity, proof of identity may be requested.

You also have the right to lodge a complaint with the CNIL.

11. Cookies and other trackers

The site uses cookies and other trackers, the purposes and characteristics of which are detailed in our cookie policy available on our website.

To date, the cookies used are strictly necessary for the operation of the site or exempt from consent in accordance with the regulations in force.

12. Links to third-party sites

The site may contain links to third-party sites. We do not control these sites and are not responsible for their personal data protection practices. We invite you to consult their own privacy policies.

13. Policy updates

This policy may be modified at any time to reflect legal, regulatory, technical or organizational developments. The update date shown on the site shall prevail.

14. Contact us

If you have any questions regarding this privacy policy or the processing of your personal data, you may contact us: