Privacy policy

The data controller is PALLAD, a French SARL registered under SIREN 930 667 688, with its registered office at Locaux sis Hôtel d'entreprises Cap Ome, Rond-point Benjamin Franklin, 34000 Montpellier, France.

Pallad's Data Protection Officer can be contacted at dpo@pallad.fr or by post sent to Pallad's registered office, for the attention of the DPO.

When you contact Pallad or book a demonstration, Pallad processes the information you provide: first name, last name, company, email address, phone number, message content, selected time slot, and information required to organize the meeting.

When using the portal, Pallad processes identification and authentication data, organization contact details, monitored domains, licensing and billing information, appointments, reports, findings, action plans, evidence, and compliance information required to provide the services.

Technical data is also processed for service security and operation: session identifiers, IP address, login and activity logs, administration events, browser information, and access attempts.

Contact and booking data is used to respond to requests, organize a demonstration, prepare a commercial proposal, and follow up a pre-contractual relationship. These processing activities are based on pre-contractual steps requested by the person and, for commercial follow-up, Pallad's legitimate interests.

Portal data is processed to create and administer accounts, provide subscribed services, monitor licenses, appointments and services, produce reports and action plans, communicate with authorized contacts, and secure the platform. These processing activities are primarily based on performance of the contract with the client organization and Pallad's legitimate interest in administering and securing its services.

Billing data and certain records are also processed to comply with Pallad's accounting, tax, security, and evidentiary obligations.

Data is accessible only to authorized Pallad personnel, within the limits of their duties, and to authorized contacts of the client organization.

Pallad notably uses Scaleway for hosting and storage, Brevo for sending transactional messages and contact requests, and Microsoft for calendar, meeting, licensing, or billing functions when they are used. These providers receive only the data required for their services.

Prospect and demonstration requests are retained while they are being processed, then for no longer than three years from the prospect's last contact.

Portal and appointment data is retained for the duration of the contractual relationship, then for up to five years in intermediate archives where required as evidence of contractual obligations. Accounting and billing documents are retained for ten years in accordance with applicable obligations.

Technical and security logs are retained for up to twelve months, unless they must be kept longer to investigate an incident, prevent fraud, or establish a legal claim.

Some providers may process data from countries outside the European Economic Area. In such cases, Pallad ensures that the transfer is based on an adequacy decision or appropriate safeguards, including the European Commission's standard contractual clauses. Further information may be requested from the DPO.

Subject to applicable conditions, you have rights of access, rectification, erasure, objection, restriction, and portability.

You can exercise these rights at dpo@pallad.fr or by writing to Pallad's registered office for the attention of the DPO. You may also lodge a complaint with the CNIL if you believe your rights are not respected.

Fields marked as mandatory are required to process your request, organize the meeting, or provide the relevant service. Without them, Pallad will be unable to process the request or provide the feature. Pallad does not use fully automated decision-making producing legal effects concerning you through the website or portal.