Privacy policy

Data controller

Pending the incorporation of the dedicated management entity for Lelink, the processing of personal data through the Site is the responsibility of:

Leaid, a French simplified joint-stock company (société par actions simplifiée) with share capital of EUR 1,000 74 avenue Jean Jaurès 94200 Ivry-sur-Seine, France SIREN: 931 736 235 Créteil Trade and Companies Register: 931 736 235

Contact email for any data protection questions: contact@lelink.ai

Leaid assumes this responsibility on an interim basis, consistent with its current role as the Site’s publisher.

If the future management entity for Lelink were to take over some or all of this processing, this policy would be updated to identify the new data controller and specify the conditions of that change.

Data that may be processed

Contact form

When you use the contact form, the following data may be collected:

• first and last name;
• professional email address;
• organisation;
• subject of the enquiry;
• message content;
• telephone number, if you choose to provide it;
• job title, if you choose to provide it;
• technical data strictly necessary to transmit and secure the enquiry.

Fields marked with an asterisk are necessary to handle your enquiry. The form cannot be submitted without them.

Your telephone number and job title are optional.

Email exchanges

When you write directly to contact@lelink.ai, the data that may be processed includes your email address, identity, professional signature, message content, attachments and, more generally, any information you choose to share.

Technical data relating to browsing the Site

When you browse the Site, certain technical data may be generated or processed by the infrastructure required for it to operate, including:

• IP address;
• date and time of the request;
• technical information about the browser, device and request;
• technical logs needed for security, incident prevention and the operation of the Site.

Lelink does not use this information for advertising profiling.

Purposes and legal bases for processing

Data is processed solely for the purposes described below.

Where the direct purpose of your enquiry is to obtain information with a view to entering into a service agreement, the use of data necessary to prepare that service is based on taking pre-contractual steps at your initiative.

Lelink currently makes no decisions producing legal effects concerning you based solely on automated processing, and does not carry out profiling using data collected through the Site.

Sensitive data and confidential information

The contact form is not intended to collect special categories of personal data within the meaning of Article 9 of the GDPR, or confidential information that is not necessary to understand your enquiry.

In particular, you are advised not to submit documents or information covered by professional secrecy, trade secrets or a specific confidentiality obligation through the Site’s general contact form.

Where information of this nature is shared voluntarily, it is processed only to the extent necessary to handle the enquiry and may be deleted if it is not useful for that purpose.

Recipients of data

Data is accessible only to people who need to know it for the purposes described in this policy.

Depending on the nature of your enquiry, access may in particular be granted to:

• authorised people within Leaid responsible for administering the Site or handling enquiries;
• the Lelink member or partner, or members or partners, whose involvement is relevant to answering the enquiry;
• technical service providers acting on behalf of Leaid, to the extent necessary to provide their services.

Where your enquiry is forwarded to a professional or entity that is a member of Lelink and they subsequently process your data for their own professional activities, they may act as a separate data controller. That processing is then subject to their own data protection obligations and, where applicable, the information they provide to you.

If a contractual relationship is entered into, the entity or professional with whom you contract will inform you, where necessary, of the processing carried out in connection with that relationship.

Technical service providers

The Site currently relies in particular on the following services:

Vercel Inc. Vercel hosts and delivers the Site and provides certain technical functions necessary for it to operate. Certain technical data and, depending on the architecture used, certain data transmitted through the Site may be processed as part of these services.

Microsoft The professional mailbox used for contact@lelink.ai relies on Microsoft 365 services.

Brevo Brevo sends transactional notifications from the contact form to contact@lelink.ai. The completed form fields, including the email address and message content, are transmitted to Brevo for this purpose. This integration does not subscribe visitors to a mailing list or a prospecting system.

These providers are intended to process data only in connection with the services they provide and in accordance with the applicable contractual commitments.

No personal data collected through the Site is sold or rented to third parties.

As of the date of this policy, the Site does not use a CRM, newsletter or automated prospecting system directly connected to the contact form.

Transfers of data outside the European Economic Area

Some technical service providers used for the Site belong to groups established or operating in particular in the United States. Data may therefore be processed or accessed from countries outside the European Economic Area.

Where such transfers take place, they are governed in accordance with GDPR requirements by a legally recognised mechanism, including:

• an adequacy decision of the European Commission;
• the EU-US Data Privacy Framework, where applicable to the recipient concerned;
• standard contractual clauses adopted by the European Commission;
• or any other mechanism provided for in Articles 44 et seq. of the GDPR.

Vercel states that it participates in the EU-US Data Privacy Framework and also provides for the use of standard contractual clauses where necessary in its applicable contractual documentation.

Microsoft also governs international transfers relating to its professional services through mechanisms provided for by the applicable regulations, including standard contractual clauses.

Further information about the applicable safeguards may be requested at contact@lelink.ai, subject to information covered by confidentiality or security obligations.

Retention periods

Data is retained for a period proportionate to the purposes for which it was collected.

Contact enquiries and pre-contractual exchanges

Where an enquiry does not lead to a contractual relationship, the corresponding information may be retained for a maximum of twenty-four months from the last meaningful exchange, unless particular circumstances justify longer retention.

Contractual relationship

Where an enquiry leads to an engagement or contractual relationship, the data necessary for that relationship may be included in the file managed by the contracting entity or professional and retained for the legal, regulatory, professional or evidentiary periods applicable to them.

Technical data

Technical logs and data are retained for as long as necessary for security, incident diagnosis and service operation, within the retention periods configured or applied by the technical service providers concerned.

Litigation

Certain information may be retained beyond the periods indicated where it is necessary for the establishment, exercise or defence of legal claims, for the applicable limitation period.

At the end of the relevant periods, data is deleted, anonymised or, where legally necessary, kept in intermediate archives with restricted access.

Cookies and other storage mechanisms

The Site currently uses no advertising trackers or audience measurement tools intended to track visitors for marketing purposes.

Mechanisms strictly necessary for the operation or personalisation of the Site may nevertheless be used. These may include:

• mechanisms necessary for security or authentication in the administration area;
• local storage used to remember certain display preferences chosen by the user.

The administration area and its authentication mechanisms are reserved for authorised people and do not constitute a user area intended for visitors to the Site.

Detailed information about cookies and other trackers is provided in the Cookie policy.

If audience measurement, advertising, social media tools or other trackers requiring consent were added in the future, they would be activated only after the applicable information has been updated and, where required by regulation, the user’s prior consent has been obtained.

Security and confidentiality

Leaid implements technical and organisational measures intended to preserve the confidentiality, integrity and availability of data processed through the Site.

Depending on the processing concerned, these measures include:

• use of HTTPS for exchanges with the Site;
• restricting access to authorised people only;
• protecting administration interfaces with authentication mechanisms;
• using technical service providers with appropriate security measures;
• measures to prevent, monitor and address technical incidents.

As no information system can offer absolute security, the measures implemented are regularly adapted to the nature of the data, the risks identified and developments in technical practices.

Your rights

Subject to the conditions set by the applicable regulations, you may have the following rights:

• a right of access to your personal data;
• a right to rectification of inaccurate or incomplete data;
• a right to erasure, in the cases provided for by the GDPR;
• a right to restriction of processing;
• a right to object, where processing is based on legitimate interest;
• a right to data portability, where the conditions set by Article 20 of the GDPR are met.

The exercise of certain rights depends on the legal basis and circumstances of the processing. In particular, a request for erasure cannot result in the deletion of data whose retention remains necessary to comply with a legal obligation or for the establishment, exercise or defence of legal claims.

You can exercise your rights or ask any question about the use of your data at:

contact@lelink.ai

Proof of your identity will be requested only where necessary to avoid carrying out a request for an unauthorised person.

Leaid responds to requests within the time limits set by the applicable regulations.

You also have the right to lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL), the French data protection authority, if you consider that the processing of your personal data breaches the applicable regulations.

No automated prospecting

As of the date of this policy, information submitted through the Site is not used to feed a newsletter or an automated commercial prospecting system.

Subsequent exchanges directly related to your enquiry, a project discussed or an ongoing professional relationship may nevertheless take place within the purposes and legal bases described in this policy.

Any substantial change in the use of this data, including the introduction of a CRM connected to the Site, a newsletter or a structured prospecting system, will lead to a reassessment of the processing concerned and, where applicable, an update of this policy.

Changes to the privacy policy

This policy may be amended to reflect changes to the Site, the processing carried out, the providers used, Lelink’s organisation or the applicable regulations.

The date at the top of the policy is its last update date.

Where a substantial change affects the conditions under which previously collected data is used, specific information will be provided to the people concerned where required by regulation.