Privacy Policy

This Privacy Policy explains how Dedale Intelligence SAS ("Dedale", "we", "us" or "our") processes personal data when you visit www.dedale.com (the "Website"), contact us, subscribe to our communications, register for an event, or otherwise interact with us. Our use of cookies and similar technologies is described in our Cookie Policy.

1. Who is responsible for your personal data

Dedale Intelligence SAS, 7 rue de Madrid, 75008 Paris, France, registered with the Paris Trade and Companies Register under number 893 636 340, is the controller of the personal data described in this Privacy Policy.

For any question about this Privacy Policy, or to exercise your rights, write to privacy@dedale.com.

2. The data we collect, and where it comes from

Data you give us directly. We collect the personal data you provide when you complete a form on the Website, subscribe to our newsletter, register for or attend an event, request content or information about our services, write to us, or become a client or the representative of a client. This may include your name, professional email address, telephone number where you give one, company name, job title, the content of your message or request, event registration details, and the information needed to manage a client relationship.

Data we collect from public professional sources. We also collect limited professional contact information about individuals whose role is relevant to our research, from sources such as company websites and professional profiles published by the individual or their employer. This may include name, job title, company name, professional email address, and publicly available professional profile information. We record the source of each contact collected in this way.

Where we obtain your data from a source other than you, we tell you which source it came from no later than our first message to you, and in any event within one month of collecting it.

Data collected when you use the Website. When you visit the Website we may collect your IP address, your browser and device type, your operating system, the pages you view, your navigation path, the date and time of access, the referral source, and your interactions with the content. This is described in detail in our Cookie Policy.

3. Why we process personal data, and on what legal basis

• Sending our newsletter and event communications to people who have subscribed. Contact details, subscription and engagement data. Legal basis: your consent.
• Sending professional communications about our research to business contacts identified from public professional sources. Name, professional contact details, role, company, and the source of the information. Legal basis: our legitimate interest in making relevant research known to professionals whose role connects to it.
• Answering enquiries, requests for information or for a demonstration, content requests and event registrations. Contact details and the content of the exchange. Legal basis: steps taken at your request before entering into a contract, performance of a contract where one exists, or our legitimate interest in answering business enquiries.
• Managing client and prospect relationships. Contact details, role, company, correspondence and service history. Legal basis: performance of a contract, steps taken at your request before entering into one, or our legitimate interest in managing business relationships.
• Operating, maintaining and improving the Website, our communications and our services. Technical data, usage data and feedback. Legal basis: our legitimate interest.
• Measuring use of the Website and of our communications through non-essential technologies. Cookie and similar technology data, usage and interaction data. Legal basis: your consent.
• Measuring use of the Website anonymously, where you have refused non-essential technologies. A temporary identifier generated on our provider's servers from your IP address, your browser type and the page requested, using a secret value that is changed and deleted each day. This measurement covers visits, pages viewed and a limited number of named interactions, such as a download click or the submission of a form. Legal basis: our legitimate interest in knowing how our Website is used. It is limited to the Website, is not combined with any other processing, is not used to profile you and is not used for advertising. You can object to it at any time by writing to privacy@dedale.com.
• Protecting the Website, our systems and our users against fraud, abuse and security incidents. Technical and security data and logs. Legal basis: our legitimate interest in the security of our systems, and compliance with legal obligations where they apply.
• Meeting our legal, accounting, tax and record keeping obligations. The information relevant to the obligation concerned. Legal basis: compliance with a legal obligation.

Where we rely on a legitimate interest, we have assessed that it is not overridden by your rights and freedoms. You can object at any time, as explained in section 8.

4. Marketing, and your right to object

Newsletter and event communications. Where you subscribe, we rely on your consent. You can withdraw it at any time through the unsubscribe link in any message, or by writing to privacy@dedale.com.

Professional communications. We may write to business professionals at their professional contact details about research relevant to their role, on the basis of our legitimate interest. You can object at any time, without giving a reason, through the unsubscribe link in any message or by writing to privacy@dedale.com. If you object, we stop using your data for marketing, and we keep the minimum information needed to make sure we do not contact you again.

SMS messaging. We use SMS to contact professionals and subject matter experts about research interviews, and to arrange, confirm, reschedule or follow up on an interview. Message frequency varies. Message and data rates may apply. You can stop receiving messages at any time by replying STOP, and you can get help by replying HELP or by writing to contact@dedale.com. We do not share or sell the mobile phone numbers or SMS opt-in data we collect with third parties or affiliates for their own marketing or promotional purposes.

5. Who receives personal data

We do not sell personal data.

Personal data is accessible to the Dedale staff who need it for their work, and to the service providers we use, which act on our instructions:

• Webflow, for hosting the Website and its forms
• Brevo, for sending and measuring our email communications
• PostHog, for measuring use of the Website
• Google, for Google Analytics 4, Google Ads and YouTube, where these services are enabled
• Axeptio, for collecting and recording cookie consent
• Planhat, for customer relationship management and the record of our exchanges with you

We may also disclose personal data where this is necessary to comply with the law or a lawful request from a public authority, to establish, exercise or defend legal claims, to protect the rights, property or security of Dedale or of others, or in connection with a merger, acquisition, reorganisation or sale of assets.

6. Transfers outside the European Economic Area

Some of our providers may process personal data outside the European Economic Area, the United Kingdom or Switzerland. Where a transfer is made to a country that has not been recognised as offering an adequate level of protection, we rely on an appropriate transfer mechanism, in particular the European Commission's Standard Contractual Clauses, together with additional measures where these are required.

You can ask us which safeguards apply to a given transfer by writing to privacy@dedale.com.

7. How long we keep personal data

• Newsletter subscribers: for as long as you remain subscribed, then up to 3 years after you unsubscribe.
• Business contacts we have approached who do not respond: up to 3 years from the last meaningful contact.
• Enquiries, content requests and messages sent through the Website: up to 3 years from the last exchange, unless a longer period is needed to manage a contract or a legal claim.
• Client and contractual records: for the duration of the relationship, then for the periods required by the applicable accounting, tax and limitation rules.
• Records of cookie consent: 6 months, unless you change your choice before then.
• Website and communication measurement data: kept for the period applied by each measurement tool under our subscription with that provider, and no longer than is necessary for audience measurement. The secret value used to generate the anonymous identifier described in section 3 is deleted each day.
• Information kept to honour an objection or an unsubscribe request: for as long as is necessary to make sure we do not contact you again.

These periods may be extended where the law requires it, or where data has to be kept in connection with a legal claim, an investigation or an audit.

8. Your rights

Subject to the conditions set by the applicable law, you have the right to:

• obtain access to your personal data
• have inaccurate or incomplete data corrected
• ask for your data to be erased
• ask for processing to be restricted
• object to processing based on our legitimate interest
• object at any time to the use of your data for marketing
• receive the data you have provided in a portable format
• withdraw your consent at any time, where processing is based on consent
• give instructions about what happens to your data after your death
• lodge a complaint with a supervisory authority

To exercise these rights, write to privacy@dedale.com. We may ask for the information needed to confirm your identity. We answer within one month of receiving a valid request, a period that may be extended where the law allows it, in which case we tell you.

If you consider that we have not respected your rights, you can lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr. You can also contact the supervisory authority of the country where you live or work.

9. Whether you have to provide your data

Providing personal data is voluntary in most cases. Some information is however necessary for us to answer a request, register you for an event, send you content you have asked for, enter into or perform a contract, or meet a legal obligation. If you do not provide it, we may be unable to respond or to provide the service concerned.

10. Automated decisions

We do not take decisions based solely on automated processing, including profiling, that produce legal effects concerning you or significantly affect you in a similar way.

11. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our activities, our services or our legal obligations. The current version is always available on this page and shows the date of the latest update. Where the law requires it, we will inform you of material changes or obtain your consent before applying them.

12. Contact

Dedale Intelligence SAS, 7 rue de Madrid, 75008 Paris, France. privacy@dedale.com