Privacy Policy

COMMODUM SAS, with registered office in Paris, France, is the controller of personal data collected via the site and in the course of providing its services.

Contact: vincent.talvas@commodum.ai

Identification data: first name, last name, role, company.

Contact data: business email, phone.

Browsing data: IP address, browser type, pages visited, visit duration.

HR data provided during the diagnostic: role titles, headcount, average salaries — all anonymized. No personally identifiable data is collected.

Responding to contact and information requests.

Planning and running AI diagnostics.

Improving the site and services offered.

Commercial communications (only with explicit consent).

Meeting legal and regulatory obligations.

Performance of a contract or pre-contractual measures requested by the data subject.

Legitimate interest of COMMODUM (audience measurement, security, service improvement).

Consent of the user (newsletter, non-essential cookies).

Compliance with legal obligations applicable to COMMODUM.

Authorised COMMODUM personnel, bound by a confidentiality obligation.

Technical processors (hosting, transactional email, audience measurement), under a GDPR-compliant data processing agreement.

Administrative or judicial authorities upon legal request.

Prospect data: 3 years from last contact.

Client data: duration of the contractual relationship + 5 years for legal obligations.

Browsing data: 13 months maximum.

HR data provided during a diagnostic: returned or deleted 30 days after report delivery, unless the client requests otherwise.

AES-256 encryption of data at rest and in transit.

Hosting on European sovereign infrastructure. On-premise option available for diagnostic engagements.

Access strictly limited to authorised personnel, on the principle of least privilege.

Regular audit of security mechanisms and penetration tests.

By default, all data is hosted within the European Union. In the event of an occasional transfer outside the EU, the appropriate safeguards required by the GDPR are implemented (European Commission standard contractual clauses, adequacy decisions).

In accordance with the General Data Protection Regulation (GDPR), you have the following rights: access, rectification, erasure, portability, objection and restriction of processing. You may also withdraw your consent at any time.

To exercise these rights, contact us at: vincent.talvas@commodum.ai

You also have the right to lodge a complaint with the French data protection authority (CNIL — www.cnil.fr) or with your own national authority.

The site uses strictly necessary cookies for its operation (language preference, session). Subject to your explicit consent, anonymised audience measurement cookies may be set. You can configure your preferences at any time via the cookie banner or by modifying your browser settings.

This privacy policy may be modified at any time to reflect changes to the site, services or regulations. The date of the last update appears at the top of the document. In the event of a substantial change, affected users will be notified by email.