Privacy and data protection policy

Who is responsible for your data?

The data controller is Ellipsia SAS, 6 rue d’Armaillé, 75017 Paris, France, registered with the Paris Trade and Companies Register (RCS Paris) under number 894 828 565. For any question about your personal data, write to the data protection contact point: bonjour@ellipsia.fr. Ellipsia has not appointed a data protection officer.

This page describes, for each use of this website, the data processed, why, on what legal basis, who can access it, how long it is kept and how to exercise your rights.

You write to us (contact form)

• Purpose: to respond to your request.
• Legal basis: Ellipsia’s legitimate interest in responding to the requests addressed to it; pre-contractual measures where your request concerns a service.
• Data: last name, first name, company, email address, reason for the request and content of the message. Fields marked with an asterisk are mandatory: without them, we cannot reply to you.
• Recipients: the Ellipsia teams authorised to handle the request; the website host (Hostinger, UAB, Lithuania, European Union).
• Retention period: the time needed to handle the request, then 3 years maximum after the last exchange.

You book a meeting (Microsoft Bookings)

• Purpose: to schedule a 30-minute conversation with Ellipsia and send the invitation and reminders.
• Legal basis: pre-contractual measures taken at your request; Ellipsia’s legitimate interest in organising its business discussions.
• Data: name, email address, chosen time slot and the information entered in the booking form.
• Recipients: the relevant Ellipsia teams; Microsoft, which provides the Microsoft Bookings service as a processor.
• Retention period: depending on the configuration of Ellipsia’s Microsoft account, 3 years maximum after the last exchange.
• Cookies: the booking opens in a window provided by Microsoft; any cookies are set by Microsoft when this window is opened (see the cookie policy).

You apply for a job (recruitment)

• Purpose: to review your application, contact you, organise interviews and make the hiring decision.
• Legal basis: pre-contractual measures taken at your request (review of the application); your consent for retention beyond the recruitment process (optional box).
• Data: last name, first name, email address, cover message, CV and its content (career history, education, skills, contact details). Please do not send us sensitive information (health, opinions, origin, etc.): it is not needed.
• Mandatory data: last name, first name and email address (asterisk). The message and the CV are optional but useful for reviewing your application.
• Recipients: the people at Ellipsia involved in recruitment and in administering the tools; the website host (Hostinger, UAB, Lithuania, European Union); public authorities where the law requires us to.
• Retention period: unsuccessful application without your consent to retention: deleted no later than 6 months after the end of the recruitment process; unsuccessful application with your consent (box ticked): kept for 2 years maximum so that we can contact you again, and you may withdraw this consent at any time; successful application: the data is added to your employee file and kept in accordance with the applicable rules.
• Optional box: “I agree that Ellipsia may keep my application for up to two years so that I can be contacted about future opportunities.” Ticking this box is not necessary to submit your application, and not ticking it has no effect on how your application is reviewed.

Visitor statistics

This website measures its audience with Google Analytics 4 (Google), only if you accept optional cookies. Page views, traffic sources and device type are measured in aggregate. Data is sent to Google, which may process it outside the European Union. Legal basis: your consent, which you can withdraw at any time with the “Manage my cookies” link. Measurement cookies last 13 months (see the cookie policy).

Security and operation of the website (technical logs)

• Purpose: to ensure the security of the website, prevent abuse and spam, and guarantee its proper operation.
• Legal basis: the legitimate interest of Ellipsia and its host in securing the service; the host’s legal obligation to retain connection data.
• Data: IP address, date and time, pages requested, browser type.
• Recipients: Hostinger, UAB (host, Lithuania, European Union).
• Retention period: 12 months maximum.

The contact form includes an anti-spam protection that may record messages detected as unwanted.

Cookies and local storage

The website sets no optional cookie before you make a choice. Details are given in the cookie policy.

Transfers outside the European Union

The website is hosted in the European Union. Using Microsoft (appointment booking) may involve, depending on how the service is configured, access from a country outside the European Union; such transfers are covered by the safeguards provided for by the GDPR (standard contractual clauses or an adequacy decision).

Your rights

You have the right of access, rectification, erasure, objection, restriction and portability regarding your data, as well as the right to set guidelines on what happens to it after your death. Where processing is based on your consent, you may withdraw it at any time, without affecting what took place before.

To exercise your rights, write to bonjour@ellipsia.fr. We may ask for proof of identity only where there is reasonable doubt about your identity. We reply within one month. If you believe your rights are not being respected, you may lodge a complaint with the CNIL, the French data protection authority (cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07).

Contact us

If you have general questions about the services or the information we collect about you, or about how we use it, please contact us:

Contact us