Who is responsible
The data controller for personal data collected through www.pertimm.com (the “Website”) is PERTIMM DEVELOPPEMENT, a simplified joint-stock company (SAS) registered with the Paris Trade and Companies Register under SIREN 793 499 104, whose head office is at 120 rue La Boétie, 75008 Paris, France. It is represented by its President, Charles-Henri Puaux.
For any question about your personal data, write to contact@pertimm.com with “Personal data” in the subject line.
This policy covers the Website only. Data that Pertimm processes for its clients as part of a project is governed by the contract and data-processing terms agreed for that project, and third-party websites linked from ours have their own policies.
What we collect
We collect only what you choose to send us and the technical data any web server records. Fields marked with an asterisk on our forms are required; the others are optional.
When you use the contact form
- first name*, last name* and email address*;
- phone number and organisation, if you provide them;
- the enquiry type you select (project, public sector & government, research partnership, media, careers or other) and your message*;
- your confirmation that you agree to Pertimm processing your data to answer your request.
With each message, the Website also records technical data: the date and time, a reference number, your IP address, your browser (user agent) and the page from which you sent the form. Your message is sent by email to the Pertimm team and kept in a submissions log on our server, so that no request is lost if email delivery fails. We may also send you an automatic acknowledgement of receipt.
When you write to us directly
If you email contact@pertimm.com or sales@pertimm.com, we process your email address, your name and the content of your message in the same way as a contact-form request.
When you subscribe to the newsletter
Your email address and your consent (the box “Yes, subscribe me to your newsletter”, which you must tick) are stored in our subscriber list, together with the date and time, the page, your IP address and your browser, which together form the proof of your consent. Each address is recorded only once.
When you browse the Website
Like any web server, ours records technical logs: IP address, date and time, the address requested, the response status, the referring page and your browser (user agent). To prevent spam and abuse, the number of form submissions sent from the same IP address is also counted for a few minutes.
What we do not collect
- No advertising, analytics or social-media cookies, and no tracking pixels.
- No third-party content that tracks you: no embedded maps, videos or social widgets, no external fonts.
- No user accounts, passwords or payment data.
- No data bought from third parties, and no profiling.
Please do not include sensitive information (such as health data) in your messages. The Website is intended for professionals and is not directed at children.
Purposes & legal bases
Each use of your data rests on one of the legal bases provided by article 6 of the General Data Protection Regulation (GDPR).
| Purpose | Data used | Legal basis |
|---|---|---|
| Answering your enquiry and following up on a project you ask us about | Contact form fields; emails you send us | Your consent, given by ticking the box on the form (art. 6(1)(a)); for project requests, steps taken at your request before entering into a contract (art. 6(1)(b)) |
| Sending the Pertimm newsletter | Email address | Your consent (art. 6(1)(a)), which you can withdraw at any time |
| Keeping proof of your consent | Date and time, page, IP address, browser, consent wording | Our legitimate interest in being able to demonstrate consent (art. 6(1)(f) and art. 7(1)) |
| Operating and securing the Website; preventing spam and abuse | Server logs; anti-spam counters; a hidden anti-spam field on forms | Our legitimate interest in keeping the Website available and secure (art. 6(1)(f)) |
| Handling requests to exercise your rights | Your identity and contact details; the content of your request | Our legal obligations under the GDPR (art. 6(1)(c)) |
We do not use your data for any other purpose, and no decision about you is taken by automated means.
How long we keep it
| Data | Retention period |
|---|---|
| Contact requests (form and emails) | 3 years after the last contact with you. If a contract follows, the retention rules of that contract apply. |
| Newsletter subscription and proof of consent | Until you unsubscribe or ask us to delete it |
| Server logs | 12 months maximum |
| Anti-spam counters | A few minutes, then cleared automatically |
| Requests to exercise your rights | As long as needed to answer them and to prove that we did, within legal limitation periods |
At the end of these periods, the data is deleted or anonymised.
Who receives it
- Pertimm staff who need it: the people who answer your request or manage the newsletter (management, sales and the relevant project teams).
- Our email service provider, which delivers form messages to our inbox, acting as a processor on our behalf: [To be completed].
- Our hosting provider, Hetzner Online GmbH (Germany), acting as a processor; the Website’s server is located in Helsinki, Finland, within the European Union. See Hosting in the legal notice.
Our processors act only on our instructions, under a contract that meets the requirements of article 28 of the GDPR. We never sell or rent your data and never share it for advertising. We disclose it to public authorities only when the law requires us to.
Transfers outside the EU
We do not intend to transfer your personal data outside the European Union (EU) or the European Economic Area (EEA). Should a provider ever involve such a transfer, it would be covered by appropriate safeguards, such as an adequacy decision of the European Commission or the Commission’s standard contractual clauses, and this policy would be updated first.
Cookies & trackers
The Website uses no advertising, analytics, audience-measurement or social-media cookies and contains no tracking pixels. At the date of this policy, it sets no cookies at all.
One preference can be kept on your device: if you use the “Pause animations” switch, your browser remembers that choice in a local storage entry named pertimm-motion. It is never sent to us, contains no personal data and is exempt from consent, because it only stores a setting you chose yourself. Switching animations back on deletes it.
No third-party content is embedded: there are no maps, videos or social-media widgets, and our typefaces are hosted on our own server, with no calls to Google Fonts or any other font service. Browsing the Website therefore does not send your data to third parties.
Links to external services (LinkedIn, Facebook, map directions, research programme pages and public authorities) send data to those services only when you choose to follow them; their own privacy policies then apply.
Because we use no cookies that require consent, you will not see a cookie banner. If this ever changes, we will ask for your consent first, as required by article 82 of the French Data Protection Act of 6 January 1978.
Security
We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access, including:
- encrypted connections between your browser and the Website (HTTPS);
- a strict content security policy: the Website runs only its own code and loads no external resources;
- server-side validation of every form, with size limits and protection against spam and repeated submissions;
- submission and subscriber files stored outside the public part of the server, with access restricted to authorised people;
- access to messages limited to the staff who need them.
No system is entirely secure: please do not send passwords or sensitive information through the forms.
Your rights
Under articles 15 to 22 of the GDPR and the French Data Protection Act, you have the following rights over your personal data:
- Access (art. 15): obtain confirmation that we process your data, and a copy of it.
- Rectification (art. 16): have inaccurate or incomplete data corrected.
- Erasure (art. 17): have your data deleted, for example when it is no longer needed or you withdraw your consent.
- Restriction (art. 18): have the processing of your data temporarily frozen, for example while a request is examined.
- Notification (art. 19): when we rectify or erase your data or restrict its processing, we inform the recipients to whom it was disclosed.
- Portability (art. 20): receive the data you gave us in a structured, machine-readable format, or have it sent to another organisation, where processing is based on your consent or a contract.
- Objection (art. 21): object at any time to processing based on our legitimate interest, on grounds relating to your situation, and to direct marketing without giving any reason.
- No automated decisions (art. 22): the Website takes no decision about you based solely on automated processing, including profiling.
- Withdrawal of consent (art. 7(3)): withdraw your consent at any time, for example by unsubscribing from the newsletter, without affecting processing carried out before.
- Instructions after death: under article 85 of the French Data Protection Act, you can tell us how your data should be stored, erased or communicated after your death.
How to exercise your rights
Tell us which right you wish to exercise and, if possible, the email address you used on the Website. If we have reasonable doubts about your identity, we may ask for additional information to confirm it.
We answer within one month of receiving your request. This period may be extended by two months for complex or numerous requests, in which case we will tell you why (art. 12(3) GDPR). Exercising your rights is free of charge.
To stop receiving the newsletter, use the unsubscribe link included in each newsletter or write to us: your address will be removed from the subscriber list.
Complaints
If you believe that your rights have not been respected, you can lodge a complaint with the French data protection authority, the National Commission on Informatics and Liberty (CNIL):
You may also contact the supervisory authority of the EU country where you live or work. We would appreciate the chance to address your concern first.
Changes to this policy
We may update this policy to reflect changes to the Website, to our practices or to the law. The date at the top of this page shows the latest version. If a change significantly affects how your data is used, we will highlight it on this page and, where required, ask for your consent again.