1. General information about the processing of your personal data
Under the General Data Protection Regulation (EU 2016/679) and French Law No. 78-17 of 6 January 1978 as amended, Saveria, a simplified joint-stock company registered under number 101 692 374 R.C.S. Paris, whose registered office is at 103 rue Julien Lacroix, 75020 Paris, acts as controller for the purposes described in this policy.
This policy explains the processing we undertake when you visit our website and in our commercial and contractual relationships. Contact details for exercising your rights are set out below.
2. What categories of personal data do we collect?
- Identification data: name, address, date of birth, telephone, email, profession and firm name
- Bank details, such as bank account information
- Website visit data, such as technical identifiers and clicks
- Professional relationship data, such as needs, services subscribed to and billing status
3. Where does the data come from?
Personal data is collected directly from you or from publicly available sources, such as official websites and registers including INPI.
4. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Responding to a prospect’s enquiry | Performance of a contract (pre-contractual measures) |
| Managing the client relationship | Performance of a contract |
| Website audience analysis | Your consent |
| Customer due diligence (Know Your Customer) | Our legitimate interest in implementing our customer verification policy |
| Accounting records | Compliance with a legal obligation |
| Internal investigations and audits | Legal obligation for mandatory audits; legitimate interest for other audits and investigations |
| Responding to competent authorities | Our legitimate interest in responding to competent authorities |
| Legal defence | Our legitimate interest in defending or asserting our rights in litigation |
| Handling requests to exercise data subject rights | Compliance with our obligations under data protection law |
5. Recipients of your personal data
- Our service providers and processors, including IT providers and internal management tools
- Our external advisers or auditors
- Courts, supervisory bodies and competent authorities
6. How long do we retain your data?
| Purpose | Retention period |
|---|---|
| Responding to a prospect’s enquiry | For the time needed to respond, then for 2 years after the prospect’s last contact |
| Managing the client relationship | For the contractual relationship, then for applicable limitation periods |
| Website audience analysis | Up to 25 months after collection |
| Customer due diligence (Know Your Customer) | For the contractual relationship, then for applicable limitation periods |
| Accounting records | 10 years |
| Internal investigations and audits | Until the procedure is completed |
| Responding to competent authorities | Until the procedure and all appeals are exhausted |
| Legal defence | Until the procedure and all appeals are exhausted |
| Handling requests to exercise data subject rights | 5 years from the date information or a response is provided |
7. Transfers outside the European Economic Area
Some recipients are outside the EEA. We secure transfers using adequacy decisions under Article 45 GDPR, including Commission Implementing Decision (EU) 2023/1795 of 10 July 2023 for the United States, or European Commission standard contractual clauses under Article 46(2) GDPR.
8. Your rights and how to exercise them
In the circumstances provided by data protection law, you may:
- Receive a copy of your personal data and information about its processing
- Request correction of inaccurate data or completion of incomplete data
- Request deletion of your data
- Withdraw consent at any time
- Request restriction of processing
- Object to processing based on legitimate interests
- Receive your data in a structured, commonly used, machine-readable format and transmit it to another controller
- Give instructions concerning storage, deletion and disclosure of your data after death
You may lodge a complaint with the competent supervisory authority, particularly where you live, work or where an alleged infringement occurred. In France, contact CNIL: 3 place Fontenoy, 75007 Paris; +33 (0)1 53 73 22 22.
To exercise your rights or ask about personal data processing, email privacy@saveria.ai or write to 8 rue de Sofia, 75018 Paris. Please clearly identify the data or processing concerned.
9. Updates to this privacy policy
This policy may change over time. Updates will be available on our website or on request.
Privacy centre