Data Privacy Notice

Purpose of Notice

The aim of this Data Privacy Notice (the "Notice") is to detail how echo-prismai.com ("Echo Prism AI" or "We" or "Us") will handle, as data controller, the personal data you provide Us when you visit the website echo-prismai.com (the "Website"), or that We obtain from third parties, to connect you with professionals who may be of interest to you.

How is your data collected?

We gather your personal data:

Directly from you, when you enter your Identification Data on our Website; and/or
Indirectly:
- by obtaining Identification Data about you from third parties
- through collecting data about your navigation on our Website using cookies or similar technologies (refer to our Cookies Policy for more details).

Providing your personal data is optional, but not doing so may prevent Us from linking you with professionals that could align with your interests.

What categories of personal data will be processed?

Echo Prism AI collects and processes the following categories of personal data about you:

Category of personal data	Definition
Identification Data	Includes your full name and contact details (phone number and email address).
Browsing Information	Details such as IP address, access times and dates, pages visited on our web and mobile sites, language preferences, reports on software crashes, browser type, device-related information, and online activities automatically collected, e.g., via cookies, web server logs, pixels, and web beacons.

What are the purposes and legal basis of our processing?

Echo Prism AI processes your personal data for the following purposes:

Purpose	Legal basis	Categories of personal data processed
Connecting you with professionals offering services that may interest you	Your Agreement	Personal Identification Data
Managing requests and fulfilling legal obligations from regulators or other authorities, domestically and internationally.	Compliance with relevant legal and regulatory requirements.	Personal Identification Data Browsing Data
Protecting and enforcing our rights	Our legitimate interest in safeguarding our rights against users (including you), as well as judicial, administrative, and/or law enforcement entities.	Personal Identification Data Browsing Data
Ensuring the functionality and security of our Website	Our legitimate interest in maintaining a secure and efficient Website.	Browsing Data

Your Data Privacy Rights

Under current data protection laws, you are granted a wide array of rights, including:

Right of Access: You can ask Echo Prism AI to confirm if your personal data is being processed and, if so, gain access to that data. This includes details on processing purposes, categories of personal data processed, and possible data recipients.
You're entitled to a copy of the processed data. For extra copies, a nominal fee may be charged based on administrative costs.
Right to Rectification: If your personal data is incorrect, you have the right to have it corrected. Additionally, you have the right to complete incomplete personal data, including through supplementary statements.
Right to Erasure ("Right to be Forgotten"): You can request that Echo Prism AI erase your personal data under specific conditions.
Right to Restrict Processing: You can request the restriction of processing your personal data. In such cases, the data will be marked and processed by us only for certain purposes.
Right to Data Portability: You have the right to receive your personal data, which you've provided to Echo Prism AI, in a structured, commonly used, and machine-readable format, and you can transmit those data to another controller without hindrance from us.
Right to Object: You can object to the processing of your personal data based on your specific situation at any time. Upon objection, we will stop processing your data for the objected purposes, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.
Right to Withdraw Consent: If data processing is based on your consent, you can withdraw this consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Post-Mortem Right to Data: You have the right to set directives regarding the management of your personal data after your death.

Note: Exercising these rights may be subject to certain conditions and limitations under local data protection law.

To exercise any of these rights, please reach out to us as outlined in the "Contact Us" section below.

You also have the right to file a complaint with the competent French data protection authority, the CNIL.

Our Data Sharing Practices

Your personal data may be shared in the following ways:

Within our corporate group;
With our partners, for their processing purposes, provided you have consented to this sharing, to inform you about services/products you may find interesting;
With service providers aiding our operations (e.g., storage, hosting, analytics, technical support);
With our legal advisors, for compliance with our statutory obligations, including accounting, auditing, and internal controls;
In the context of a business sale, asset transfer to a third party, or during company restructuring or reorganization;
Where mandated or allowed by law, to government bodies, courts, external advisors, and similar third parties.

International Data Transfers

Personal data collected by Echo Prism AI may be transferred outside the European Economic Area (EEA). Transfers to countries recognized by the European Commission as providing adequate protection (e.g., Israel) are deemed to ensure an adequate level of data protection. For transfers to countries not recognized as providing adequate protection, we ensure data protection through standard contractual clauses or other approved mechanisms, guaranteeing adequate safeguards.

Our Data Retention Policies

We retain your personal data only as long as necessary for the purposes outlined in this Notice, in compliance with applicable laws. Once we no longer require your personal data, it will be deleted or anonymized.

Contact Us

If you have any inquiries about this Notice, please reach out to us at [email protected].

Updates to This Notice

This Privacy Notice may be revised from time to time. We will inform you of any major changes as mandated by law.

Last updated: 01.11.2023