Privacy policy

1. INTRODUCTION

This Privacy Policy informs users of the irlia.fr website, the app.irlia.fr application, and the services offered by IRLIA about how personal data is collected, used, retained and protected.

IRLIA places particular importance on respecting privacy and protecting personal data in accordance with the General Data Protection Regulation (GDPR) and applicable French law.

2. DATA CONTROLLER

Data controller:

IRLIA

SASU in the process of incorporation

Chairwoman: Catheline JEAN-GEORGES

Email: contact@irlia.fr

3. DATA COLLECTED

3.1 Website

When using the irlia.fr website, the following data may be collected:

• First and last name

• Email address

• Organization name

• Phone number

• Message submitted via forms

• Browsing information

• Technical data required for the site to function

3.2 Application and IRLIA services

As part of the use of IRLIA services, the following may be processed:

• User identity

• Service or department

• Professional contact details

• Information related to support requests

• Text transcripts of exchanges

• Call metadata

• Information contained in support tickets

• Data required for integration with the client’s ITSM tools

3.3 Sensitive data

IRLIA does not intend to collect sensitive data within the meaning of the GDPR.

Clients agree not to voluntarily transmit sensitive data that is not necessary for the provision of the service.

4. PURPOSE OF PROCESSING

Data is collected in order to:

• Respond to contact and demo requests;

• Provide IRLIA services;

• Create, enrich and track support tickets;

• Improve service performance;

• Ensure system security;

• Comply with legal and regulatory obligations;

• Produce anonymized usage statistics.

5. LEGAL BASES

Processing is based on:

• Performance of a contract;

• IRLIA’s legitimate interest;

• Compliance with legal obligations;

• Consent, where required.

6. SUBPROCESSORS AND SERVICE PROVIDERS

IRLIA may use technical subprocessors to ensure the service functions properly.

As of the publication date of this policy, these providers may notably include:

• OVH (hosting)

• Artificial intelligence service providers

• Telephony and communication service providers

• Monitoring and security service providers

The list of subprocessors may change to ensure the service continues to function properly.

7. DATA LOCATION

Data is hosted primarily in France or within the European Union.

Depending on the configuration chosen by the client, certain processing may be carried out:

• On IRLIA’s cloud infrastructure;

• On the client’s infrastructure in On-Premise mode;

• Via certain technology subprocessors with GDPR-compliant safeguards.

8. DATA RETENTION

Data is retained only for as long as necessary for the purposes pursued.

As a guideline:

• Contact requests: maximum 3 years after the last exchange;

• Contractual data: duration of the contract plus legal obligations;

• Technical logs: up to 12 months;

• Cookies: maximum 13 months.

9. SECURITY

IRLIA implements appropriate technical and organizational measures to guarantee:

• The confidentiality of data;

• Its integrity;

• Its availability;

• Its protection against unauthorized access.

These measures notably include:

• Access control;

• Secure authentication;

• Encryption where applicable;

• Access logging;

• Regular backups.

10. RIGHTS OF DATA SUBJECTS

In accordance with the GDPR, every data subject has the following rights:

• Right of access;

• Right to rectification;

• Right to erasure;

• Right to restriction;

• Right to object;

• Right to data portability;

• Right to withdraw consent where consent is the legal basis for processing.

Any request may be sent to: contact@irlia.fr

11. COMPLAINTS

If you believe your rights are not being respected, you may file a complaint with the French Data Protection Authority (CNIL).

Website: www.cnil.fr

12. CHANGES TO THIS POLICY

IRLIA reserves the right to modify this Privacy Policy at any time to reflect legal, regulatory or technical developments.

The version in effect is the one published on the site at the time of consultation.