Privacy Policy

1. Data Controller

2. Scope

This policy applies to the digital services operated by AUMERIAL, available at the following addresses:

• https://www.aumerial.com (corporate website)
• https://documentation.aumerial.com (technical documentation)

3. Personal Data Collected

a) Data you provide directly

When using a contact form or communicating directly with AUMERIAL, the following data may be collected:

• First and last name
• Email address
• Company or organisation and job title
• Phone number
• Message content

This data is only collected when you voluntarily provide it to us.

b) Automatically collected data (with consent)

Upon explicit acceptance of cookies through Axeptio, browsing data is collected via Google Analytics 4:

• Pages visited and navigation paths
• Session duration
• Device type, browser, and operating system
• Truncated IP address (automatically anonymised by Google Analytics)

4. Tools and Sub-processors

AUMERIAL uses the following tools in the context of data processing:

• Google Tag Manager - tag management and triggering
• Google Analytics 4 (GA4) - audience measurement and browsing analysis
• Axeptio - cookie consent management

Google acts as a sub-processor for AUMERIAL within the meaning of the GDPR. Analytical data may be transferred to servers located in the United States, under the EU–US Data Privacy Framework or the standard contractual clauses approved by the European Commission.

Google Privacy Policy: https://policies.google.com/privacy

5. Purposes of Processing

Data collected is used exclusively for the following purposes:

• Responding to requests submitted via forms or by email
• Ensuring the technical operation of the services
• Measuring audience and improving the usability of content (website and documentation)
• Detecting potential technical malfunctions

AUMERIAL does not carry out individual profiling, unsolicited commercial prospecting, or any automated decision-making with a legal effect on individuals.

6. Legal Basis for Processing

• Consent (Art. 6.1.a GDPR) - for the placement of audience measurement cookies
• Performance of pre-contractual measures (Art. 6.1.b GDPR) - for handling requests submitted via forms
• Legitimate interest (Art. 6.1.f GDPR) - for detecting technical malfunctions (server logs)

7. Retention Periods

• GA4 analytical data: 14 months (as configured in Google Analytics)
• Form submission data: retained for as long as necessary to handle the request, then deleted or archived in accordance with applicable legal obligations
• Technical logs (including technical data such as IP addresses): 12 months, in line with CNIL recommendations

8. Cookies

Cookie consent is collected and managed through Axeptio, in accordance with CNIL requirements. No non-essential cookie is placed without prior consent.

• Audience measurement cookies (Google Analytics 4) - subject to consent
• Consent management cookies (Axeptio) - required for the consent mechanism to function
• Strictly necessary technical cookies required for the website to operate - exempt from consent

You may update your preferences at any time via the cookie manager accessible at the bottom of the page.

9. Rights of Data Subjects

In accordance with the GDPR (EU Regulation 2016/679) and the amended French Data Protection Act, you have the following rights:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw your consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal

To exercise any of these rights, please contact the data controller (see contact details in section 1). You will receive a response within a maximum of 30 days.

You also have the right to lodge a complaint with the CNIL:

• Website: www.cnil.fr
• Post: CNIL - 3 place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07

10. Updates

This policy may be updated to reflect changes in our data processing practices or applicable legal requirements. The date of the last update is shown at the top of this document. In the event of a material change, a notice will be published on the relevant websites.