PRIVACY POLICY
DATAGMA
LAST UPDATE: 10 march 2025
By browsing our websites, subscribing to our services, creating a user account, or downloading our extension, you may be required to provide Datagma (hereinafter referred to as “Datagma" or "we") with your personal data concerning you.
We kindly ask you to review this policy, which explains how we process and protect your personal data in compliance with the applicable regulations, including, in particular, the European General Data Protection Regulation (EU) 2016/679 (hereinafter the "GDPR").
- Data controller
Depending on the context, Datagma acts either as data controller or as data processor.
Datagma acts as data controller when collecting and using personal data of its prospects, clients and visitors of its websites.
For any question relating to your personal data, you may contact Datagma, as data controller, at the following addresses:
- By e-mail, at: [•]gdpr@datagma.com ; or
- By postal mail at: Informations, 3 bld de Sebastopol, 75001, Paris, France.
Datagma acts as data processor when collecting and using personal data on behalf of its clients, including with respect to the opt-out form provided by Datagma on its website. When Datagma’s clients use its B2B data enrichment services, they act as data controllers and are responsible for ensuring that personal information collected about data subjects is being processed lawfully, fairly and in a transparent manner.
When acting as data processor, Datagma processes identification data, contact data and professional data (for instance, organization, position, or seniority) of data subjects targeted by its clients. Such data is either directly provided by the data subject or collected from trusted business partners. Datagma does not seek to collect any non-business-related data and does not collect any sensitive personal data.
Opt-out data are retained for at least 3 years to ensure the effectivity of the opt-out, in compliance with the recommendations of the French data protection authority.
Datagma’s clients use Datagma’s B2B data enrichment services for marketing and recruitment purposes to serve their legitimate interest to obtain up-to-date and complete information about potential business partners, customers or employees.
- Categories of personal data, purposes, legal bases, and retention periods
- As an internet user browsing our website:
| USER ACTION | DATA COLLECTED | USE OF DATA | LEGAL BASIS | RETENTION PERIOD |
| Browsing our website | IP address, connection data, pages of our website you have visited, date, time, and duration of the visit, operating system, browser, referring website, selected language, country and city, screen resolution of your device. | Ensuring the proper functioning of the website, fixing bugs, generating statistics, preventing fraud, personalizing your experience, and optimizing our offers. | Depending on the case, either consent or our legitimate interest in ensuring the security and proper functioning of our websites. | The duration necessary to achieve the purpose of the stored cookies (e.g., one session for session cookies).
Generally, cookies are retained for up to 13 months, and information collected through cookies is retained for up to 25 months. |
- As a prospect or client:
| USER ACTION | DATA COLLECTED | USE OF DATA | LEGAL BASIS | RETENTION PERIOD |
| Requesting information about our services | First name, last name, email address, phone number, content of our exchanges. | Processing your request, responding to your questions, and, if necessary, contacting you again. | Execution of pre-contractual measures taken at your request. | Your data is retained for a period of 3 years from the last contact. |
| Free account registration | Professional email address, first name, last name, title, country, phone number, company name, password, login data, log files, time stamps, alerts. | Allowing you to create and use your customer account. | Performance of the sales contract. | As long as your account is active. The account is deleted after 2 years of inactivity. |
| Subscribing to our paid services | First name, last name, company name, job title, professional email address, professional phone number, subscription plan, order history, copy of the contract and invoice, commercial correspondence. | Providing our services, billing. | Performance of the sales contract. | Your data is retained for the duration of the contractual relationship and then archived for a period of 5 to 10 years, depending on the type of data, to comply with tax obligations or to defend our rights and interests in legal proceedings. |
| Downloading the Datagma plugin extension | IP address, connection data, operating system, browser, selected language, country and city, referring website, log files, time stamps, alerts. | Providing you with a plugin extension. | Performance of the requested service. | Your data is retained as long as the Datagma plugin in installed. |
| Subscribing to our newsletters | Professional email address, data allowing us to evaluate whether our emails are of interest to you (email opened or not, time, IP address, etc.). | In the context of our B2B relationship, sending you emails related to your profession about our latest updates and promotions, unless you object, and tailoring our content/offers to better match your interests. | Legitimate interest in developing and promoting our commercial activities in the context of our B2B relationship. | For customers: Data is retained for the duration of the commercial relationship, then for 3 years or until you unsubscribe.
For prospects: Data is retained for 3 years from the last contact or until you unsubscribe. |
- As a provider or supplier for Datagma:
| USER ACTION | DATA COLLECTED | USE OF DATA | LEGAL BASIS | RETENTION PERIOD |
|---|---|---|---|---|
| Providing products or services to Datagma | Title, name, surname, professional landline/mobile phone number, professional email/postal address, service-specific data (certifications, authorizations, etc.), quotes, contracts, correspondence. | Managing the commercial relationship and processing orders. | Performance of pre-contractual measures or of a contract. | Retained for the duration of the contractual relationship and archived for 5 to 10 years for tax obligations or legal defense. |
- Recipients of your personal data
Your personal data may be accessed by:
- Authorized personnel within Datagma or any of its subsidiaries in the scope of their duties;
- Service providers and subcontractors processing data on our behalf (e.g., hosting providers, security and maintenance teams, email and newsletter service providers);
- Public or private entities when required by law or necessary for the protection of our legal rights;
- Potential buyers and advisors in the context of a merger or acquisition transaction.
More specifically, we use the following subcontractors to store data processed via our website: Amazon Web Services, Inc. 410 Terry Avenue North Seattle WA 98109. United States
- International data transfers
In the context of our activities, your data may be transferred outside of the European Union in compliance with the applicable data protection regulations, including GDPR.
In any case, we will only transfer your personal data to entities:
- Which are established in a country that ensures an adequate level of data protection as recognized by the European Commission; or
- With which we have signed Standard Contractual Clauses (SCCs) as adopted by the European Commission; or
- Which adhere to a recognized compliance mechanism such as a code of conduct or certification scheme validated by the relevant European Union authorities.
- Your rights regarding your personal data
You have the following rights regarding your personal data:
- To access and obtain a copy of the personal data which we process concerning you;
- To request rectification or update of incomplete or incorrect personal data concerning you;
- To the extent applicable, to request a restriction of the processing of your personal data, or the erasure thereof;
- To object to our processing of your personal data on grounds relating to your particular situation;
- To request the portability of your data in a structured, commonly used and machine-readable format;
- To withdraw your consent, where it was collected, at any time without it affecting prior processing;
- (France only) To define how your data should be handled after your death;
- To file a complaint with a data protection authority, such as the CNIL in France, located 3 Place de Fontenoy, TSA 80715, 75334 Paris cedex 07 (https://www.cnil.fr/).
You can exercise these rights by contacting us at the provided contact details. We may request identity verification before processing your request, should we have reasonable doubts concerning your identity.
- Policy Updates
Datagma may update this Privacy Policy when necessary or required by law. You are invited to review the latest version regularly. Continued use of our services shall signify acceptance of any updates.