Legal

Privacy Policy

Last updated: April 21, 2026

Protection and security of personal data is a top priority for Ekimetrics. We comply with applicable data processing legislation, including the French law N°78-17 of 6 January 1978, as amended, relating to data processing, files and personal freedom and privacy, and the General Data Protection Regulation 2016/679 of 27 April 2016 (“GDPR”).

This privacy policy (hereinafter the "Privacy Policy") applies to personal data collected via our website www.ekimetrics.com, our social media pages, and any other websites and applications where it appears, or as otherwise communicated to you by Ekimetrics.

This Privacy Policy does not cover data processing we carry out on behalf of our clients, which is subject to separate contracts directly concluded with our clients.

1. Who is responsible for data processing?

Your personal data is processed by EKI METRICS SAS and our affiliates, acting as the "data controllers" under the GDPR. The terms "Ekimetrics," "we," and "our" used in this Privacy Policy refer to EKI METRICS SAS and our affiliates. For a full list of our affiliates, see here.

2. What is personal data?

Your personal data is any information that can directly or indirectly identify you. This may include your name, identification number, location data, online identifiers, or one or more specific elements related to your physical, physiological, genetic, mental, economic, cultural, or social identity.

3. What personal data do we collect?

We collect personal data about you via our website, our social media pages, and other websites and applications, such as those used for our recruitment purposes. We may also collect personal data about you when you participate in events organised or attended by us. This data may include information you provide to us directly (e.g., when you submit a contact request or apply to an open position on our job page), data we collect (e.g., through cookies to understand how you use our website), and data that is provided to us by third-parties, including our subcontractors.

This data may include:

Contact information: your name, first name, email address, phone number, information about your company and job title;
Online and account information: your login and password when you create an account, e.g., on our job page or on our proprietary platforms;
Job application information: your education and work history, CV, cover letter, and any other information and document you share with us during the application and recruitment process. We may also process your personal data for background checks during the recruitment process, which may include but is not limited to, verifications of your ID and right work, personal address, and information about your criminal record (only where justified by the job role or required by law);
Social media: your social media profiles or information about your social media activity, e.g., when you follow us or share our content on social media websites;
Images: your images in social media or where you attend an event organised or attended by us;
Site and device information: your IP address, device identifiers, information processed by cookies and other trackers;
Any other information you provide to us, e.g., in a free comment field using our online contact forms.

4. What are the purpose and legal basis used for the processing your personal data?

We collect and process your personal data for the following purposes:

Respond to your contact requests and communicate with you;
Deliver services that your company has ordered from us;
Recruitment activities;
Carry out marketing operations, including sending you our newsletter;
Organise events;
Improve our websites, products and services;
Perform statistical analysis;
Protect our systems and assets (e.g., identify fraud or carry out investigations).

We may use all the categories of data described in Section 3 for the above purposes or for other purposes as permitted by law and notified to you from time to time.

Depending on the purpose of the processing and the category of personal data, the legal basis for processing your data may be:

Your consent, for example, when you complete the contact form, apply to an open position, or consent to cookies;
Our legitimate interest, where this is not overridden by your rights or interests, such as carrying out marketing operations, improving our website functionality or conducting statistical analyses;
Compliance with a legal obligation, for example, when we verify your identity and right to work when sending you an offer of employment.

5. Who receives your personal data?

Ekimetrics shares the data described in Section 3 with its internal departments who have a need to know the data, such as our HR, marketing or customer service departments.

We may disclose the data described in Section 3 with the following third parties:

Our website hosting provider;
Our subcontractors and vendors, including subcontractors used for our recruitment activities and those used for our marketing purposes to develop and manage our site and contact forms or to organise our ad campaigns (e.g. e-mail campaigns);
Other third parties that we may notify to you from time to time.

We may also disclose the data described in Section 3 to other third parties for investigation or litigation purposes, including to law enforcement, competent authorities, our lawyers and other external professional advisors.

We will not sell your data to third parties.

6. How long do we store your data?

Your personal data is only retained for as long as necessary for processing and for complying with our legal obligations, where applicable.

The following categories of data are retained for specific time periods:

Personal data used for marketing purposes: retained for 3 years from the last contact;
Client personal data: retained in line with the applicable agreement we have with the client;
Candidate personal data when you apply to an open position at Ekimetrics: retained for 2 years from the last contact;
Cookies: retained for 13 months from your consent.

Data necessary to comply with our legal obligations is retained according to current applicable legal provisions (including but not limited to the Commercial Code, Civil Code, and Consumer Code).

7. Do we transfer data outside the European Union?

For data subjects located within the European Union: We mainly process your personal data within the European Union. However, some data may be transferred to our offices located in the United States, China, and the United Kingdom. This concerns mainly professional contact data collected via our contact forms, so our local teams can follow up with you. Where these transfers are necessary, we ensure that appropriate safeguards are in place.

Additionally, some of our technical service providers are located outside the European Economic Area, such as the United States. Consequently, your personal data may be processed in countries not recognised as providing an adequate level of data protection according to the GDPR. In such cases, Ekimetrics ensures that your personal data is protected to the same level required by European laws and regulations. We ensure that transfers are covered by appropriate safeguards, such as European Commission Standard Contractual Clauses or other mechanisms required under applicable data protection regulations.

8. How do we protect your data?

We apply strict technical and organisational security measures, in line with the applicable regulations, recommendations of the French Data Protection Authority (CNIL) and market best practices, including but not limited to data encryption and access control systems.

9. Third-party websites

Our website and other websites and applications used by Ekimetrics may contain links to third-party websites and applications that are not under our control. This Privacy Policy does not apply to, and Ekimetrics is not responsible for, the privacy practices of such third-party websites. We recommend you read the privacy policies of such third-party websites.

10. What are your rights?

Under the applicable data protection regulations, you may have the following rights:

Right to access your data;
Right to rectify and ask for the suppression of your data;
Right to object to the processing of your data;
Right to restrict the processing of your data;
Right to withdraw your consent (where the processing is based on your consent);
Right to data portability.

To exercise your rights, you can contact us by email at data.protection@ekimetrics.com. You can also contact us by postal mail at the addresses set out here.

In compliance with applicable data protection regulations, we may request that you provide a copy of your ID or other information to allow us to identify you in order to process your request.

You also have the right to lodge a complaint with the competent data protection authority.

Cookies:

Depending on the browser you use, you may be able to control cookies and other tracking technologies. If you set your browser to block cookies and other trackers, certain features of our websites may not function properly.

You can opt out of certain non-essential cookies, namely by selecting “Reject All” when first visiting our website. These non-essential cookies will not be set on your device unless you select “Accept All Cookies”. Your browser may allow you to clear existing cookies at any time. Note that any options you make regarding cookies are browser and device specific.

11. Changes to this policy

We may update this Privacy Policy at any time. The applicable version will be the one published on our website at the time of your visit. We recommend that you regularly check this page to stay informed of any changes.