Privacy Policy

2. What data do we collect?

2.1 Data you provide

When you use the website forms, you provide us with the following data:

• Professional identification: first name, last name, job title, company.
• Contact details: professional e-mail address; phone number if you provide one.
• Content of exchanges: subject and body of your message, demo request, topic of interest.
• Subscription to resources: preferences declared when registering for a webinar, a newsletter, or when downloading a resource.

No sensitive data within the meaning of Article 9 of the GDPR (origin, political opinions, religion, health, sexual orientation, biometric or genetic data) is requested or collected.

2.2 Data collected automatically

When you browse the website, some data is collected automatically:

• Technical connection data: IP address, browser type and version, operating system, device type, language, time zone.
• Browsing data: pages viewed, date and time of visit, referring page, visit duration, interaction events (clicks, scroll, form submissions).
• Data from cookies: see Section 7 below.

3. Why do we collect your data?

Each processing activity is based on a legal ground identified under Article 6 of the GDPR.

4. How long do we retain your data?

Your data is retained for the period strictly necessary for the purpose pursued, according to the following durations:

At the end of these durations, data is deleted or anonymised, unless a legal obligation requires extended retention.

5. Who is your data shared with?

Your data is accessible to Présent's staff authorised to process it, within the limits of their duties, and to a limited number of technical processors selected for their GDPR compliance.

5.1 Processors

Présent is bound to each of these processors by a contract compliant with Article 28 of the GDPR governing the processing of personal data.

5.2 Transfers outside the European Union

Some data is transferred to the United States, in the context of the processors mentioned above. These transfers are governed by:

• an adequacy decision issued by the European Commission, in particular the EU-US Data Privacy Framework where the processor is certified under it;
• or, failing that, the Standard Contractual Clauses adopted by the European Commission, supplemented by the additional measures necessary to ensure a level of protection substantially equivalent to that of the European Union.

You may request a copy of the applicable safeguards by writing to contact@grabbi.fr.

5.3 Communication to third parties

Your data is neither sold, rented, nor transferred to third parties for commercial purposes. Présent may be required to disclose your data to the competent authorities where required by law (judicial request, lawful administrative request).

6. Security of your data

Présent implements appropriate technical and organisational measures to protect your data against loss, destruction, alteration, and unauthorised access or disclosure:

• end-to-end TLS encryption for all communications with the website;
• access to data restricted to authorised personnel;
• regular backups and business continuity planning;
• selection of GDPR-compliant processors bound by a processing agreement;
• ongoing security awareness training for the teams.

In the event of a data breach likely to result in a risk to your rights and freedoms, Présent will notify the CNIL within 72 hours, and will notify you individually where the law requires.

7. Cookies

The grabbi.fr website uses two categories of cookies.

Strictly necessary cookies. They ensure the security of the website and the anti-spam protection of forms via the hCaptcha service. They are exempt from consent under Article 82 of the French Data Protection Act and remain active at all times.

Analytics cookies. They allow us to understand how the website is used and to improve its content. They are deposited by PostHog and by Vercel Analytics, and are only activated after your consent, expressed via the banner presented on your first visit and accessible at any time from the website. Their lifetime is thirteen (13) months maximum.

You may at any time withdraw your consent, refuse these cookies, or delete those already installed, via the preferences management banner or via your browser settings. Refusing analytics cookies has no impact on access to the website or to its content.

8. Your rights

Under the GDPR and the French Data Protection Act, you have the following rights over your personal data.

• Right of access (Art. 15 GDPR): obtain confirmation that your data is being processed and obtain a copy of it.
• Right of rectification (Art. 16 GDPR): correct any inaccurate or incomplete data concerning you.
• Right to erasure (Art. 17 GDPR), also known as "right to be forgotten": request the deletion of your data in the cases provided for by law.
• Right to restriction of processing (Art. 18 GDPR): suspend the use of your data in certain cases.
• Right to object (Art. 21 GDPR): object to processing for reasons relating to your particular situation; for commercial prospecting, you may object at any time and without giving any reason.
• Right to data portability (Art. 20 GDPR): receive your data in a structured, commonly used, machine-readable format, or request its transmission to another data controller.
• Right to withdraw your consent (Art. 7.3 GDPR): withdraw your consent at any time where consent is the legal ground for the processing, without affecting the lawfulness of processing carried out before the withdrawal.
• Post-mortem directives (Article 40-1 of the French Data Protection Act): determine what happens to your data after your death.

How to exercise your rights

To exercise any of these rights, write to contact@grabbi.fr specifying the subject of your request. Présent will reply within one month of receipt, extendable to three months in the case of complex or numerous requests.

If we have a reasonable doubt as to your identity, we may ask you for proof of identity. No additional information beyond what is strictly necessary to verify your identity will be requested.

Complaint to the CNIL

If, after contacting us, you consider that your rights have not been respected, you may lodge a complaint with the French Data Protection Authority (CNIL):

• online: www.cnil.fr;
• by post: CNIL, Service des Plaintes, 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.

9. Automated decision-making and profiling

Présent does not make decisions producing legal effects concerning you or significantly affecting you that are based solely on automated processing within the meaning of Article 22 of the GDPR. The analytics tools used on the website do not carry out user profiling for the purpose of automated decision-making.

10. Minors

The grabbi.fr website is aimed at professionals and is not intended for minors under the age of fifteen. Présent does not knowingly collect data concerning minors. If you believe that data concerning a minor has been collected by mistake, write to contact@grabbi.fr so that we can delete it.

11. Changes to this policy

This policy may evolve to reflect legal, technical, or organisational changes. The date of the last update appears at the top of the document. In the event of a substantial change, Présent will inform you by an appropriate means, in particular via the website or by e-mail if you are subscribed to one of our resources.

12. Contact

For any question relating to this policy or to the exercise of your rights, write to contact@grabbi.fr or by post to: Présent, 6 rue Saint Domingue, 44200 Nantes, France.