Privacy Policy

Contents

‍

I. How does Pyla collect and process your personal data?

1) Personal data collected on the website

1. What data is collected on the website?

2. Why is this data being collected?

3. How long is personal data retained?

2) Processing of personal data related to the use of the Pyla solution

1. What data is collected when using the Pyla solution?

2. Why is Personal Information collected?

3. How long do you retain your data?

II. What are your rights?

1) How can you exercise your rights?

2) Where is your data stored?

3) Is your personal data shared with third parties?

III. Do we use cookies?

‍

‍

Privacy Policy

‍

Pyla, a simplified joint-stock company registered with the Paris Trade and Companies Register under No. 884 603 408, with its registered office at 6 chemin du Verger - 27650 Muzy (France), offers an intuitive solution that helps companies better manage their resources (hereinafter the “Pyla Solution”) and publishes the website accessible at https://www.getpyla.com (hereinafter the “Website”).

The provision and use of the Pyla Solution and the Website require the processing of certain personal data that identifies or makes identifiable a natural person (i) visiting the Website and/or submitting personal data via the Website, or (ii) employees and collaborators authorized by their employer to use the Pyla Solution for the management of their business expenses (hereinafter the “users,” “the user,” “you,” “your,” and “yours”).

By subscribing to and/or using the website and/or the Pyla Solution, you acknowledge and agree that Pyla may process certain personal data about you, as well as certain information regarding headcount and resources recorded through the Pyla Solution.

This Privacy Policy is intended to describe how Pyla processes your personal data in connection with your use of the website and/or the Pyla solution, and to inform you of your rights in this regard. It may be updated, particularly in the event of changes to data protection regulations or if we make improvements, additions, or modifications to the Pyla solution or the website. The applicable version is the one available on the website on the date you use it and/or the Pyla solution.

Pyla places the highest priority on the security and integrity of the personal data entrusted to it. Pyla is committed to taking all necessary precautions to ensure the security of personal data and, in particular, to protect it against accidental or unlawful destruction, accidental loss, corruption, unauthorized disclosure or access, as well as against any other form of unlawful processing or disclosure to unauthorized persons.

To this end, Pyla implements security measures that comply with industry standards to protect personal data from unauthorized disclosure. Furthermore, to prevent unauthorized access and ensure the accuracy and proper use of data, Pyla has implemented appropriate electronic, physical, and administrative procedures to safeguard and preserve the data collected through its services.

Pyla has appointed a Data Protection Officer (DPO), who can be contacted by email (contact@getpyla.com) and whose role includes ensuring Pyla’s compliance with the amended “Data Protection Act” of January 6, 1978, and the General Data Protection Regulation of April 27, 2016 (“GDPR”) (hereinafter collectively referred to as “the Data Protection Regulations”), as well as responding to requests and questions from data subjects.

Below are the main answers to questions you may have about Pyla’s commitments regarding the protection of personal data:

‍

I. How does Pyla collect and process your personal data?

1) Personal data collected on the website

‍

Pyla is the "data controller" for the personal data collected through its website.

1. What data is collected on the website?

Personal data about you may be collected when you browse the website, primarily your browsing data and your IP address, in particular through the use of cookies.

In addition, you may provide us with personal information (last name, first name, email address (work and/or personal), phone number, and, if applicable, a resume) through our website when you contact us via the contact forms or demo requests, or if you apply for a job opening at Pyla.

If you submit data, documents, or information to us via the website, please ensure that these materials do not contain any unnecessary confidential or sensitive information (such as Social Security numbers, driver’s license numbers, medical records, or confidential information about your company or employer).

In certain specific cases, Pyla may need to ask you for a copy of your ID, for example, to verify your eligibility to use the website or to process a request to exercise your rights under data protection regulations.

‍

2. Why is this data being collected?

The primary purpose of collecting your personal data is to provide you with an optimal, efficient, and personalized experience when you use our website and its features.

The processing of your personal data is based on your consent and is intended to give you access to the website and its various features, to respond to your inquiries and requests, as well as to improve your browsing experience, our services and offers, and to keep you informed of our latest news.

You are, of course, welcome to contact us at any time regarding this matter and exercise your rights under the General Data Protection Regulation (see Section II, “What are your rights?” below).

‍

3. How long is personal data retained?

Pyla has established retention periods for personal data collected through its website.

With regard to your browsing data, cookies are retained for 13 months after we obtain your consent on our website.

For requests for information, contact, or a demonstration, your personal data is retained for a period of 36 months from the date of our last contact.

With regard to your responses to our job postings or unsolicited online applications, we retain your personal data for the duration of our recruitment process or for as long as necessary to review your application and, with your consent, for an additional two years. If your application is successful, we retain your personal data for the duration of the employment contract and for an additional five years after the end of our working relationship.

These retention periods apply subject to your exercise of your rights under the Personal Data Regulations, as indicated above.

‍

2) Processing of personal data related to the use of the Pyla solution

The Pyla solution is made available to users (employees or contractors). In this context, Pyla processes personal data in its capacity as a “data processor” within the meaning of the Personal Data Regulations, and on your behalf (the client and employer) in your capacity as the “data controller.”

‍

1. What data is collected when using the Pyla solution?

When using the Pyla solution, Pyla may collect and store information that securely identifies users, maintains a history of their visits to the website and their use of the Pyla solution, details about documents and data transferred to Pyla, professional information regarding user identification within the company, role and team, as well as communications with our teams.

It is the data controller’s responsibility to verify that the information or documents provided do not contain any sensitive personal data for which consent has not been obtained, including through third-party data entered into the Pyla solution.

For certain processing activities, Pyla may engage further subcontractors, in compliance with its obligations and commitments to the data controller and the Personal Data Regulations.

Pyla is committed to ensuring the highest level of security and confidentiality for all information, including personal data, entrusted to it by the data controller.

Users of the Pyla solution are responsible for using it in accordance with the permissions set by their employer and for ensuring that their access to the Pyla solution is secure, including by not sharing their personal login credentials and passwords, changing them regularly, and immediately notifying their employer and/or Pyla of any loss, disclosure, or unauthorized access.

‍

2. Why is personal data collected?

Pyla needs to collect this personal data to fulfill the contract entered into with the employer that has subscribed to the Pyla solution and, consequently, to provide users with access to the Pyla solution and enable its use in accordance with said contract, as well as to comply with its legal obligations under the Personal Data Regulations.

Committed to applying the principle of data minimization, Pyla limits the collection and processing of personal data to those data and for those purposes strictly necessary for the fulfillment of its contractual and legal obligations.

‍

In particular:

• Users' contact information is processed to enable the sending of information regarding the Pyla solution, its operation, or its use;
• User login credentials are used to verify employees' logins, identify them, grant them access to the Pyla solution, and bill their employer for the Pyla service;
• Identifying users' positions or roles and any other HR data allows for the definition of user rights and permissions for the Pyla solution, as well as the allocation of resources, as determined by the primary administrator;
• Equipment data is intended to track the inventory by the employer;

‍

3. How long do you retain your data?

Pyla retains the personal data necessary for using the Pyla solution for as long as you use it and for an additional period of 24 months following the end of such use, in order to provide the necessary data to the data controller and to fulfill its contractual and legal obligations.

‍

II. What are your rights?

1) How can you exercise your rights?

In accordance with data protection regulations, you have the right to access, correct, restrict, erase, and delete your personal data, as well as the right to object and the right to data portability.

You can update your personal identification information (title, first name, last name, email address, phone number, password) at any time by logging in to the "My Profile" section of your account, in accordance with any Pyla identification and usage policy that your employer may have implemented.

You may exercise your rights by contacting your employer (the data controller), or by writing to us directly at: contact@getpyla.com. We will acknowledge receipt of your request and respond within 30 days, which may be extended if necessary. We may require that your request be accompanied by a photocopy of a valid ID, which will be retained only for the time necessary to verify your identity, and we will inform your employer of the nature of your request and the appropriate action to be taken.

For more information about your rights regarding personal data protection, please visit the CNIL website: www.cnil.fr.

‍

2) Where is your data stored?

The servers on which Pyla processes and stores personal data are located in France for the solution and in the United States for the website.

‍

3) Is your personal data shared with third parties?

Pyla does not sell or rent your personal data to third parties.

Due to the use of certain tools associated with the Pyla solution—for example, to support the Pyla solution’s sales operations—certain data may be shared with third-party partners or suppliers. A list of these partners and suppliers is available upon written request.

For each of these partners, Pyla requires full compliance with data protection regulations and written contractual guarantees regarding the security and confidentiality of data processing.

Pyla does not otherwise disclose your personal data to third parties, unless: (1) you (or your account holder acting on your behalf) request or authorize such disclosure; (2) the disclosure is necessary to process transactions or provide the services you have requested; (3) Pyla is required to do so by a government authority or regulatory body, in the event of a court order, subpoena, or any other similar request from a government or judicial authority, or to establish or defend a legal claim; or (4) disclosure is necessary to comply with Pyla’s legal and/or regulatory obligations.

‍

III. Do we use cookies?

We use cookies when you visit our website. A cookie is a small, non-executable file consisting solely of text that is sent by our website or third-party websites to your computer or smartphone and stored by your browser or smartphone.

Cookies cannot delete or read information from your computer or smartphone. However, the placement and storage of cookies can indirectly identify a user, as they can track the pages a user visits on a website and remember their visit and profile. However, cookies are neither spyware nor viruses.

We use functional and technical cookies, which are essential for using the website; in particular, they allow you to access certain pages on our website or, for example, to save your login credentials.

We may also use cookies to analyze and measure traffic on our site, its use, the effectiveness of our campaigns, and cookies for the purpose of personalizing the content or services displayed (real-time personalization of navigation, identification of navigation problems in order to provide assistance ...).

Third-party cookies may be placed on your device when you visit our website, for example by advertising providers or social media platforms, to measure the performance of a campaign or to display ads for Pyla on external websites.

In accordance with the recommendations of the CNIL, you are notified of the existence and use of cookies via the information banner displayed on the homepage, and you may view the list of cookies and exercise your rights (to accept or reject all or some of the cookies) at any time via this banner and the link provided on every page of our website.

Important: Disabling all or some cookies may prevent you from browsing the site or accessing certain content.

You can also configure your browser to accept or reject all or some cookies. For more information, please follow the link for your browser:

• to manage cookies in Google Chrome,
• to manage cookies in Internet Explorer,
• to manage cookies in Mozilla Firefox,
• to manage cookies in Safari.

‍