Personal data protection policy

Effective 5 June 2025

CAMELEIA is committed to protecting the personal data you provide on www.cameleia.fr. We aim to provide the highest level of protection in accordance with Regulation (EU) 2016/679 of 27 April 2016 concerning the protection of personal data (the “GDPR”).

CAMELEIA’s (the “Company”) privacy policy explains what data we collect, why we process it, how you can control your data and how to contact us. This policy applies when you use web pages on a website operated by the Company and when you use our predictive and decision-support AI services.

CAMELEIA may revise or supplement this privacy policy. The latest revision date will appear at the top of this document.

If you have questions about our personal-data policy or wish to exercise your rights of access, amendment, rectification or erasure, contact [email protected].

Data controller

Personal data collected through this website and our predictive AI services is recorded in a computerized database by the following data controller:

CAMELEIA
21, avenue de Ceinture
94000 CRETEIL
[email protected]

Purposes of processing

The following summarizes what you can expect when visiting our website and using our services:

For visitors to our website:

Audience analytics and technical improvement: your browsing behavior and activity are used for audience measurement (page views, visits, pages viewed, browser used, etc.) and to prevent and resolve technical incidents. This data remains anonymous unless you explicitly provide personal information.

Sales, marketing and communication purposes:

To contact visitors who submit a website contact form by telephone or email
To send promotional offers by email
To email newsletters and educational content about predictive and decision-support AI

For clients and users of our predictive AI services:

Service delivery: to implement our packaged data-platform solution using our four-stage methodology (discovery, design, deployment and operation)

Predictive-model customization: to adapt our AI models to each client’s specific needs

Technical support and maintenance: to keep our solutions working correctly and respond to support requests

Continuous improvement: to analyze and improve the use of our services

We process personal information by sending it to integrated email and customer relationship management (CRM) systems for sales, marketing and customer-relations purposes.

Data collected

Identity and contact data

The personal data collected allows us to tailor our contact with each professional and provide a solution suited to their needs:

Contact’s first name
Contact’s last name
Company name
Contact’s business email
Contact’s business telephone number (mobile or landline)
Description of the request provided by the contact
Role or position (to better tailor our solutions to your profile)

Technical and usage data

We collect information needed to analyze how you accessed our website: IP address, connection and traffic data, browser type and version, time-zone settings and location, browser plug-in types and versions, operating system and platform.

We also collect information about how you use our website, including selected language, pages visited and visit duration.

Data relating to our predictive AI services

Under our methodology, we may process:

Structured data supplied by clients to create predictive models
Metadata concerning use of our platforms and models
Model performance data for continuous improvement

We collect only the minimum data necessary for the service to operate properly. Required and optional data is identified by an asterisk when entered.

Confidentiality of client data

As part of our predictive and decision-support AI services, we process business data that may be confidential. We undertake to:

Process this data only for contractually defined purposes
Implement appropriate security measures to protect this data
Never use this data for purposes other than those contractually agreed
Never disclose this data to unauthorized third parties

Recipients

Collected data is intended for our sales, marketing and technical departments and our data-science teams. It may also be sent to the following third parties:

Location and hosting of collected data

Collected data is hosted by the following providers:

CAMELEIA SAS (private cloud), as website host (data location: France)
AWS for data used in our predictive models (data location: to be specified, preferably within the EU)

Cookies

Our cookie policy is available in Article 5 of the legal notice on www.cameleia.fr.

Retention period

Data is retained for the duration of service use and then archived for an additional period based on applicable limitation and statutory retention periods, solely for purposes permitted by law. It is deleted after that period.

For data used in our predictive AI models, the retention period is agreed with each client; the default period is 12 months after the end of the business relationship.

Data security

We implement appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, accidental loss, alteration, disclosure or unauthorized access.

For our predictive AI services, we apply enhanced security standards, including:

Data encryption
Two-factor authentication for platform access
Regular security audits
Staff training in security best practices

Withdrawal of consent and exercise of your rights

At any time, you may:

Withdraw consent for the use of non-essential personal data submitted through the contact form
Access your data
Request its amendment
Request its erasure
Request restriction of processing
Exercise your right to data portability

To do so, write to the following address and specify your request:

CAMELEIA
21, avenue de Ceinture
94000 CRETEIL

Or by email: [email protected]

To protect the confidentiality of your personal data, any request to exercise your rights must include a certified copy of a valid identity document (identity card or passport). This copy will be returned with your request and the requested information or confirmation that your request has been processed. Without such evidence, we cannot process the request because the identity of the rights holder cannot be sufficiently verified.

You also have the right to lodge a complaint with the French data protection authority, the Commission Nationale de l’Informatique et des Libertés (CNIL).