Confidentiality policy
Preamble - Scope of application
This privacy policy describes the commitments of EUNOIA, a simplified joint-stock company (SAS), regarding the protection of personal data within the framework of its non-contractual and non-commercial activities in the legal sense, including in particular:
-
the free provision of content, services, or resources (assessments, demonstrations, white papers, webinars, interviews, etc.);
-
communication, marketing, advertising, or business development activities aimed at professional audiences;
-
the organization or participation in professional events (trade shows, conferences, audiovisual recordings, round tables, etc.);
-
and the free offers provided by EUNOIA Security, including certain functionalities accessible via the Eunoia Security Hub platform.
-
​
Access to and use of EUNOIA Security’s free offers are governed by the General Terms and Conditions of Sale (GTCS) of EUNOIA, which define the contractual framework applicable to these services.
The processing carried out as part of the paid services offered through the EUNOIA Security Hub platform is excluded from the scope of this policy and is governed by the GTCS and their specific contractual annexes.
Identity of the data controller
EUNOIA
Société par actions simplifiée (SAS)
SIREN: 929 421 139
SIRET: 929 421 139 00015
TVA intracommunautaire: FR78929421139
Registered office: 25 rue Jean-Jacques Rousseau, 75001 Paris, France
APE Code: 7022Z - Business and other management consultancy
Legally represented by its current Chairman.
Governance and documentation
The data collected are processed for the following purposes:
-
provision of free services offered by EUNOIA (assessments, tools, demonstrations, downloadable resources, webinars, etc.);
-
organization and management of events, conferences, webinars, interviews, and audiovisual recordings;
-
commercial prospecting, corporate communication, marketing, or advertising;
-
monitoring of relationships with prospects and professional partners;
-
compilation of internal statistics on the effectiveness of campaigns and commercial activities.
​
Within a strictly professional (B2B) context, EUNOIA may base such processing on:
-
the explicit consent of the data subject where required;
-
its legitimate interest, particularly to promote its services and develop professional relationships, under Article 6-1-f of the GDPR and Article L.34-5 of the French Post and Electronic Communications Code;
-
compliance with legal obligations.
All processing activities are carried out in compliance with the GDPR and in accordance with EUNOIA’s internal governance measures.
Data collected
The data that may be collected include:
-
Identification data: surname, first name, position, company;
-
Professional contact details: email address, telephone number, postal address;
-
Activity-related data: downloaded resources, completed forms, event participation;
-
Audiovisual data: image or voice recordings made as part of interviews, webinars, or other broadcast content (with prior explicit consent);
-
Account data (EUNOIA free offers): identifier, encrypted password, or identifier associated with authentication through an identity provider.
​
No sensitive data (such as racial or ethnic origin, political opinions, health data, etc.) are collected in this context.
User Accounts and Authentication (EUNOIA free offers)
Access to the free offers provided by EUNOIA Security may require the creation of a user account.
The information required includes a professional email address, an identifier, and an encrypted password.
Authentication may also be carried out via third-party identity providers, in accordance with the privacy policies applicable to those services.
EUNOIA does not store any external passwords and does not access user credentials from third-party authentication services.
The use of these free offers is governed by the General Terms and Conditions of Sale (GTCS) of EUNOIA, which users are invited to consult before creating an account.
Confidentiality, sub-contracting and non-assignment
The data collected are never sold, exchanged, or shared with third parties.
They may only be transferred to service providers acting on behalf of EUNOIA, and solely for the purposes described (hosting, emailing, broadcasting, event management).
EUNOIA has implemented internal security and compliance measures to supervise its relationships with subcontractors and to ensure the protection of personal data processed on its behalf.
Re-use of data and commercial information
By accessing free content or registering for an event organized by EUNOIA, the user expressly authorizes:
-
the reuse of their data for prospecting or personalized follow-up purposes;
-
the sending of targeted communications (emails, invitations, service offers);
-
the mention of their company’s name in EUNOIA’s commercial or communication materials (website, presentations, brochures, written, oral, or video content), unless expressly objected to.
Right to image and interviews
Any recording of image or voice as part of an interview, webinar, or event is subject to the prior signing of an image rights authorization form.
No identifiable audiovisual capture or broadcast will be made without formal consent.
Intellectual property
All content provided free of charge by EUNOIA (documents, tools, videos, media, visual materials, etc.) is protected under intellectual property law.
Any reproduction, modification, extraction, or unauthorized dissemination constitutes an infringement subject to legal action.
Users expressly agree to respect these rights and to refrain from any misuse of the content provided.
Rights of the persons concerned
In accordance with Articles 12 to 23 of the GDPR, every individual has the following rights:
-
the right of access to their personal data;
-
the right to rectification, erasure, or restriction of processing;
-
the right to object, particularly to commercial prospecting;
-
the right to data portability;
-
the right to lodge a complaint with a supervisory authority (such as the CNIL in France);
-
the right to define instructions regarding the handling of their data after their death.
​
Requests may be addressed to:
📧 dpo@eunoia-security.com