← Back

Privacy Policy

This English text is a translation provided for convenience. In case of discrepancy, the French version prevails.

Data controller

The personal data collected on the medianestrategie.fr website is processed by:

MÉDIANE STRATÉGIE

SASU with share capital of €1,000
24 rue Georges Huchon, 94300 Vincennes – France

RCS Créteil: 101 819 332
SIRET: 101 819 332 00012

(hereinafter “MÉDIANE”)

President: Julien RICHARD
Contact: julien@medianestrategie.fr

Data collected

1. Data provided voluntarily

When a user wishes to be contacted or to get in touch with MÉDIANE, the following information may be collected:

  • first name
  • surname
  • email address
  • company
  • role (optional)
  • any message

This data may be transmitted in particular via:

  • the website's contact form
  • the form offered at the end of the strategic assessment

Providing this information is optional.

2. Data from the strategic assessment

When using the conversational assessment, the following information may be recorded:

  • technical session identifier (session_id)
  • answers provided during the assessment
  • conversation history
  • strategic analysis scores: vision, organisation, technology
  • generated strategic profile
  • identified organisational tension
  • associated strategic recommendation

This data is initially collected anonymously. It is only associated with an identity if the user chooses, at the end of the assessment, to complete the contact form and provide their details.

3. Appointment booking data

When a user books a time slot, the following information is collected:

  • name and email address (required)
  • additional notes, if the user enters any (optional)
  • email addresses of guests the user wishes to invite (optional)
  • reason for rescheduling, where applicable (optional)
  • selected time slot and time zone

Bookings are operated by Cal.com. The appointment is then added to MÉDIANE's professional calendar and the video call is provided by Microsoft Teams.

What we do not do with this data

To remove any ambiguity, MÉDIANE undertakes the following:

  • your answers are never sold, rented or transmitted to third parties for commercial or advertising purposes;
  • they are not used to train artificial intelligence models, whether internal or provided by our service providers;
  • the technical service providers that host the service or carry out its processing (hosting, conversational model) only access it for the sole operation of the assessment, without reuse for their own purposes;
  • the content of your assessment is neither made public, nor accessible to other users, nor used for any purpose other than those described above;
  • no cross-referencing intended to identify you is carried out as long as you have not yourself provided your details via the contact form.

Legal basis

  • the assessment and audience measurement rely on MÉDIANE's legitimate interest in offering its tool and monitoring its use;
  • providing contact details through a form relies on the user's consent;
  • handling a contact request and booking an appointment rely on pre-contractual steps taken at the user's request.

Audience measurement

The site uses the Umami Analytics tool to measure its audience. The service is operated by Umami Software, Inc., and the storage region of MÉDIANE's account is located in the European Union (Frankfurt).

This tool is configured as follows:

  • no cookies are placed on the user's device;
  • no identifier allows a user to be tracked from one site to another;
  • the IP address is processed transiently, for security, routing and approximate location purposes at country, region or city level;
  • the reports produced are aggregated statistics and are not intended to identify an individual;
  • the information is used solely for statistical purposes.

Recipients and processors

Within MÉDIANE, the data is accessible only to its President. It is processed by the following providers, acting on MÉDIANE's instructions:

  • Clever Cloud SAS, 4 rue Voltaire, 44000 Nantes, France: hosting of the website and database, in the Paris region;
  • Google: the conversational model powering the assessment. MÉDIANE uses a paid plan, whose terms exclude the use of content to improve models, and request storage is disabled;
  • Resend: delivery of the internal notifications sent to MÉDIANE when a form is submitted. Those messages repeat the information entered by the user;
  • Cal.com: online appointment booking;
  • Microsoft: email, professional calendar and video conferencing;
  • Umami: audience measurement.

No data is sold, rented or transmitted to third parties for commercial or advertising purposes.

Transfers outside the European Union

Hosting of the website and database remains in France. Some providers, however, are established in the United States or store data there:

  • Resend stores the content of internal notifications and delivery logs in the United States for 30 days. Transfers are governed by the European Commission's standard contractual clauses, the UK addendum and the provider's Data Privacy Framework certification;
  • Cal.com is a United States company and all of its subprocessors are located there. Transfers are governed by standard contractual clauses or an adequacy mechanism;
  • Google does not document the processing location for the interface used: processing outside the European Union cannot be ruled out. The contracting entity is established in France and transfers are governed by Google's data processing addendum;
  • Microsoft processes data within its EU Data Boundary, subject to documented exceptions, notably remote access by its support teams;
  • Umami stores audience measurement data in the European Union; any transfers to the provider are governed by standard contractual clauses.

Retention period

Data is retained for the following maximum periods:

  • assessment-related data: 3 years from the last contact
  • contact data: 3 years from the last contact
  • appointment booking data: 3 years from the appointment or the last contact
  • audience measurement data: 6 months
  • internal notifications retained by the email delivery provider: 30 days

Security

MÉDIANE implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration or loss.

User rights

In accordance with the GDPR, users have the following rights:

  • right of access
  • right of rectification
  • right to erasure
  • right to object
  • right to restriction of processing
  • right to data portability
  • right to withdraw consent at any time, where processing is based on it

To exercise these rights: julien@medianestrategie.fr

A response will be provided within a maximum of one month.

Users also have the right to lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.

Automated decision-making

The strategic assessment offered on this site constitutes a tool for analysis and reflection.

It produces no automated decision having a legal effect on the user.

The results are for informational and strategic purposes only.