1. General provisions

In accordance with the RGPD regulation, "Processing" consists of any operation or set of operations carried out or not using automated processes and applied to data or sets of data of a personal nature.

Use of the Site by Users may result in the communication of personal data. The processing of data by Outmind, in its capacity as Data Controller, or by the service providers, acting in the name and on behalf of Outmind in accordance with the purposes set out below.

2. Processing of personal data

Regulation No 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation), which entered into force on 25 May 2018, is a mandatory European regulation that recasts and strengthens the rights and protection of personal data of natural persons.

Under the above-mentioned Regulation, "personal data" means any information relating to an identified or identifiable natural person. For the purposes of this Privacy Policy, capitalised terms have the same meaning as defined in the Terms and Conditions of Use of the Site.

3. Purpose of the processing of personal data

The purpose of the data processing carried out by Outmind on its website is in particular to :
- Respond to the request made by the User via the contact form and ensure its follow-up;

- Process an order or a request for quotation; - Establish a correspondence;
- Apply for a position;
- Measure the audience of the site and the rate of visits to the various pages.

4. Personal data that may be processed

a. Collection on the website www.outmind.fr

The Site Manager asks every User to communicate a certain amount of personal information (name, first name, e-mail address) in order to be able to identify him/her, to answer his/her questions concerning the functioning and use of the Outmind product and eventually to propose him/her a quote adapted to the use of the product. During your visits, we may collect information about the devices on which you use our services such as your IP addresses, connection data, types and versions of Internet browsers used... To collect this information, we use cookies, within the framework defined by our General Terms of Use.
Personal data is only accessible to authorized personnel.

b. Collection on the app.outmind.co.uk

You may register by allowing us to access your name and other profile information from existing accounts you may have on Google or Microsoft (collectively, "Associate Accounts" and each of your profiles on these websites, an "Associate Account").

When you create a new account to use Outmind, we will seek your consent to connect your Google or Microsoft account to your new Outmind account (using Google's or Microsoft's OAuth authentication method), which will allow us to access your Google or Microsoft account, including, but not limited to, your email and files. Although OAuth authentication provides broad access to your Google or Microsoft account, Outmind accesses and stores a subset of your Google or Microsoft account data, including name, email address, files and emails to provide our services to you.

Any information that can readily identify an individual is considered "personal information." It is your responsibility to provide us with current, complete, truthful and accurate information, including personal information, and to keep this information current. We will not be responsible for any problems or liabilities related to inaccurate or incomplete Personal Information. If you use an Associate Account, you will not be required to provide personal information directly to us because we use information that you have already provided to the associated (Google, Microsoft) website during registration and that you have authorized the associated (Google, Microsoft) website to share with us, including, but not limited to, your first name, user profile picture, and the networks to which you belong.

Outmind's use of information received from Google and Microsoft APIs will comply with the Google and Microsoft API services' user data policy, including limited use requirements.

5. Consent

By accessing the Site, the User declares that he/she has read and given his/her free, specific, informed and unambiguous consent to the processing of personal data concerning him/her.

Consent is given by the positive act by which the User has ticked the box proposing the Privacy Policy in the hypertext link. This consent is an indispensable condition to carry out certain operations on the Site or to allow the User to enter into a contractual relationship with Outmind.

The User consents that the Data Controller processes and collects, in accordance with the methods and principles included in this Privacy Policy, his/her personal data that he/she communicates on the Site or in the course of the services offered by Outmind, for the purposes indicated above.

Outmind is authorized to use the Data for its own account, in order to parameterize, improve, enrich its indexing and document search algorithms which are at the heart of the operation of the Outmind Services and the Solution, and to retain full ownership of the learning results of the algorithms, without the User being able to claim any right on the said results. In the context of this processing, the User's personal data is neither read nor kept, except in the context of the provisions set out in article 7.

6. How long the Users' personal data will be kept

In accordance with the provisions of Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, amending Article 32 of the Data Protection Act of 6 January 1978, personal data shall be kept in a form which permits identification only for a period which does not exceed the period necessary for the purposes for which it is collected and processed.
The User's personal data is kept on an active basis for the time necessary to achieve the purposes referred to above and for a period of 3 (three) years after the User's last contact. Personal data relating to Users who have become Customers are only kept for one year after the end of the contractual relationship.

7. Recipients of data and disclosure to third parties 

Outmind has put in place the necessary measures to ensure the protection of personal data, in terms of integrity, confidentiality and availability.
Outmind limits the use of personal data to the provision or improvement of functionalities for the user, in a way that is visible to the user.

Consequently, Outmind only transfers data to other persons if this is necessary to provide or improve user functionalities that occupy an important place in the interface. Outmind may also transfer data if necessary to comply with applicable law or in connection with a merger, acquisition or sale of assets, after notifying users. Any other transfer or sale of user data is excluded.

We do not use or transfer user personal data to serve advertisements, including targeted, personalized or interest-based advertisements.

Personal data may not be passed on to Outmind's employees, collaborators, subcontractors or suppliers, or other professional bodies, except in one of the following cases:
- With the user's consent for specific purposes;
- When necessary for security reasons (e.g. to investigate a bug or abuse);
- To comply with applicable law;
- For use limited to internal operations, only if the data (including derivations) have been previously aggregated and made anonymous.

8. User Rights 

In accordance with the law, the User has at any time the right to oppose, access and rectify data concerning him/her. In particular, the User is hereby informed: of the identity and contact details of the person responsible for the data collected and processed, of his/her rights (access, rectification, deletion, opposition, limitation, etc.) and of the nature of the data to be processed.) on personal data, the purpose and processing, the legitimate interests pursued, the recipients or categories of recipients of the data collected and processed, the storage period of the data collected and processed, the possible transfers of data to countries outside the EU, the right to withdraw consent at any time, the right to lodge a complaint with a supervisory authority, and whether replies are obligatory or voluntary.
‍
A. Right of access
In accordance with article 15 of the Regulation n°2016/679 of 27 April 2019, the User may access all data held by Outmind in the context of the performance of its tasks, and in particular information relating to the purpose of the processing, the recipients or categories of recipients to whom the data were transmitted, the period of conservation of the data, ... The User may exercise this right by writing to : Outmind, 73 Rue Léon Bourgeois, 91120 Palaiseau, France or by sending your request by e-mail to hello@outmind.fr

B. Right of rectification
In accordance with Article 16 of Regulation n°2016/679 of 27 April 2016 (RGPD), the User has the right to rectify, complete, update, block or delete information concerning him/her when an error or accuracy in his/her data has been detected or in the presence of data whose collection, use, communication or storage is prohibited. The User may exercise this right by writing to : Outmind, 73 Rue Léon Bourgeois, 91120 Palaiseau, France or by sending a request by e-mail to hello@outmind.fr

C. Right to erasure
The User has the right to withdraw his consent to the processing of his personal data in accordance with the provisions of the RGPD (French Data Protection Act) amending the Data Protection Act of 6 January 1978. The User may obtain the deletion of his/her personal data in the cases listed in article 17 of the Rules by written request addressed to Outmind. In accordance with Article 19 of the Regulation, the Data Controller shall notify each recipient to whom the personal data have been disclosed of any restrictions on the processing carried out, unless such disclosure proves impossible or involves a disproportionate effort. The controller shall provide the data subject with information on these recipients if so requested by the data subject.

D. Right of opposition
Pursuant to Article 21 of the GDPR, the User may object, on legitimate grounds, to being included in the file and to data concerning him being used for commercial prospecting purposes. In that case, Outmind will no longer process personal data, unless there are legitimate and compelling reasons for the processing, or for establishing, exercising or defending legal claims.

E. Filing a claim In
accordance with the provisions of the GDPR (French Data Protection Act) modifying the Data Protection Act of January 6, 1978, to exercise his rights or file a claim, the User may contact Outmind, 73 Rue Léon Bourgeois, 91120 Palaiseau, France, or send his request by e-mail to hello@outmind.fr.

The User may also at any time submit a complaint to the Commission Nationale Informatique et Libertés located at 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07. Tel: 01 53 73 73 22 22 (Monday to Thursday from 9am to 6.30pm / Friday from 9am to 6pm). Fax: +33 (0)1 53 73 73 22 00.

9. Cookies

In accordance with article 13 of Outmind's general conditions of use, our website uses cookies to help provide you with the best possible environment. Access to the Site by the user can only take place on condition that the user has expressed his or her agreement, after having received prior information on the purpose of cookies and the means available to him or her to oppose them by means of a consent collection banner.
Our cookies help us with the following:
- Not to forget the user parameters during and between visits
- To improve the speed/security of the website
- To continuously improve our website .

We do not use cookies for the following purposes:
- Collect any personally identifiable information (without your express permission)
- Collect any sensitive information (without your express permission)
- Communicate data to advertising networks
- Communicate personally identifiable data to third parties
- Pay sales commissions ...

10. Limitation of liability of the Data Controller

The Website may contain links to other websites owned by third parties not related to Outmind. Outmind is not responsible for the content of these sites and their compliance with the Law and Regulations.

In order to improve the user experience, the website may contain hyperlinks to other websites hosted by third parties. These hyperlinks do not imply that Outmind endorses, promotes or is affiliated with the sites concerned. All such sites have their own policies and practices regarding online content and Outmind has no control over or responsibility for their content. Therefore, Outmind disclaims any responsibility for these sites. These hyperlinks are posted solely for your information and ease of navigation.

11. Applicable law and jurisdiction 

This Privacy Policy is subject to French law. Any dispute, litigation or action between Outmind and a User relating to the interpretation or execution of the present Terms and Conditions will be submitted to the French courts.

12. Contact

For any question and/or complaint, in particular regarding the clear and accessible nature of this Privacy Policy, the User may contact the data controller:
- By email: hello@outmind.fr
- By post: Outmind, 73 Rue Léon Bourgeois, 91120 Palaiseau, France.