Privacy Policy
Introduction
This Privacy Notice is essential for the website visitors (‘you’) to understand how we may process your personal data obtained using this website or via other sources when applicable. We advise you to carefully read every section of this Notice to inform yourself about how we process your personal data.
Personal data is any information about you that can identify, or possibly identify you as a natural person. The owner of this website (‘we’, ‘us’, ‘our’) is:
Privanova SAS
34, avenue des Champs-Élysées
75008 Paris, France
Data Subject and Data Controller
As a visitor to our website, it is important for you to understand better your role under the relevant Data Protection Laws, namely the General Data Protection Regulation (‘GDPR’). Since personal data processing that might occur on this website involves your personal data, you are considered to be the Data Subject. Being the Data Subject, you are entitled to exercise certain human rights guaranteed by the relevant EU Data Protection Laws and explained in this Privacy Notice.
According to the GDPR, Data Controller is the entity that determines the purposes, and means of the processing of personal data. Taking into account that we have control over your personal data (we define the purpose and means of data processing), we are to be considered as Data Controllers. Being data controller provides us the opportunity to process your personal data, but also obliges us to protect them in the way regulated by the relevant data protection legislation.
Your data and reasons for processing
When you visit our website or we otherwise interact with each other, some of your personal data is (or may be) processed. You may disclose your data, or it may be done through the use of technology. The following data for the following purposes are processed (or could be processed):
Identification Data
Where we collaborate with you on a project or provide services to you or your organisation, we may also process your personal data where this is necessary for the performance of a contract or for taking steps before entering into a contract. This may include processing your name, role, organisation, contact details, project-related information, communication history, and any other information necessary to manage the collaboration, deliver our services, administer the project, and comply with related contractual obligations.
We process your name and email address to send you newsletters and/or targeted professional communications, thus informing you about our activities and projects, as well as about the projects and activities of our partners. Please note that you can unsubscribe from receiving our newsletters at any time. You can do this by using the unsubscribe link in each newsletter you receive from us.
If you collaborate with us (for example, you are our client, project partner, subcontractor, or a member of one of the clusters – LEA Projects Cluster, Energy Nexus Cluster, Synergy Health Cluster, and CBRNE Resilience Cluster Europe), we invoke our legitimate interest in sending you the newsletters and/or targeted professional communications. If you are not our collaborator but wish to receive our newsletters/communications, you can subscribe to it by providing your email address. In this case, the processing of your data is necessary for performing our obligation towards you occurring when you subscribe to the newsletter.
If you are not our collaborator but wish to receive our newsletters or communications, you can subscribe by providing your email address. In this case, the processing of your data is necessary for performing our obligations towards you arising from your subscription.
Electronic identification data
Your electronic identification data (such as the browser type and version on your device, the operating system you use, unique device identifiers, information about your network operator, information about the time and date when you access our website, and the like) is processed to ensure your unobstructed access to and visit to our website. In addition, this data may be processed to develop, secure, and maintain the proper operation of our website and to prevent possible threats. Finally, sometimes we need this type of data to solve technical problems if they occur. For all these purposes, we use our legitimate interest to process your electronic identification data.
Our use of cookies
When you visit our website, we may supply your browser with technologies such as cookies. We must stress that we use cookies to enable the regular functioning of the website as well as to provide the best possible on-site experience to all our website visitors. Therefore, we do not use any type of cookies except strictly necessary cookies.
Our professional outreach
From time to time, we may contact professionals whose work, organisation, or project appears relevant to our services. For this purpose, we may process limited professional information, such as name, role, organisation, professional email address, project name, funding programme, source of the information, communication history, and opt-out status.
We use this information to send targeted professional communications, respond to enquiries, and manage prospective client or project relationships. The legal basis is our legitimate interest in developing our activities and contacting professionals where our services may be relevant to their role or project, in accordance with applicable data protection and electronic communications rules.
You may object to this processing at any time. If you do so, we will stop contacting you for this purpose and may keep limited information to make sure your objection is respected.
We do not sell your personal data or share it with third parties. You can exercise your data protection rights as described below.
How do we protect your data?
Whenever we process personal data, we take special care to ensure that the processing of personal data is lawful. Therefore, when processing your data, we always rely on the relevant legal grounds to ensure the lawful processing of personal data.
We regularly put effort into storing your data securely. To achieve that, we apply different technical and organizational measures to ensure the protection of your personal data against accidental or unlawful loss, alteration, theft, unauthorized disclosure or access, unauthorized use, potential data breach, and all other unlawful forms of data processing. Based on business needs and security requirements, we apply restrictions on access control to your personal data.
It is likely that we will not share your personal data with third-party entities. However, if it were the case for any reason, data sharing will be conducted in accordance with all relevant standards and rules (including those laid down by the GDPR) to make sure that your personal data is safe, secure, and processed lawfully.
Your personal data may be shared with public authorities and law enforcement agencies where it is necessary to do so and where we are legally required or permitted to do so.
How long do we keep your data?
We keep your personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.
For newsletters and professional communications, we keep your contact details for as long as you remain subscribed or, where relevant, for as long as we have an ongoing professional relationship with you. If you unsubscribe or object to receiving further communications, we will stop contacting you for this purpose and may keep limited information in a suppression list to make sure your request is respected.
For collaboration and contractual relationships, we keep personal data for the duration of the collaboration or contract and for any additional period necessary to comply with legal, accounting, reporting, audit, dispute-resolution, or grant-management obligations.
For general enquiries, we keep your personal data for as long as necessary to respond to and manage your request, and for a reasonable period afterwards in case of follow-up questions. We keep professional outreach records for as long as necessary to manage them and/or comply with any legal, unless you object earlier or a longer retention period is needed because of a professional relationship, project collaboration, contract, or legal obligation.
When personal data is no longer needed, we delete it, anonymise it, or securely archive it where retention is legally required.
Your rights
We fully respect all of your rights granted by the GDPR. More details about your rights are explained below.
Right to access. You have the right to ask us for copies of the personal information that we hold.
Right to rectification. You have the right to request correction or deletion of your personal data that you find inaccurate.
Right to be forgotten. Also known as the Right to erasure, entitles you to request from us to erase your personal data that we hold. It can happen in various cases: when the data is no longer needed for the purposes it was collected; when you have withdrawn consent and there is no other lawful basis on which we can continue to process it; when you objected to the processing and there are no overriding legitimate grounds to continue; when the data has been unlawfully processed or when the data has to be erased for compliance with a legal obligation.
Right to restrict processing. You have the right, under limited circumstances, to request that we limit our use and processing of your personal data.
Right to object to processing. You have the right, under limited circumstances, to object to our processing of your personal data.
Right to data portability. You have the right to request the transmission of your personal data that we process to another entity, without hindrance from us, if such transmission is technically feasible.
Right to withdraw consent. You have the right to withdraw your consent at any time where we rely on it to process your personal data, without giving any reason to us.
Right to lodge a complaint. You have the right to lodge a complaint within your local or French data protection authority (French Data Protection Agency – CNIL) if you feel that your rights are violated.
If you feel that your personal data rights have been breached or in case you have any questions or doubts regarding the processing of your personal data on this website, you can contact us: contact@privanova.com.
End-notes
The Privacy Notice entered into force on 28 October 2023, and its current version has applied since 8 July 2026. It can be updated or modified from time to time. If an essential change or update occurs and if it affects your rights and obligations with regard to the processing of your personal data, you will be notified in advance, so that you can review the changes before they become effective.