Privacy Policy

1. Introduction

SatisFactory attaches particular importance to the protection of personal data and respect for privacy.
The purpose of this privacy policy is to inform users of the SatisFactory website and platform about how their personal data is collected, used, and protected, and about their rights under Regulation (EU) 2016/679 on the protection of personal data (GDPR).

2. Data controller

The data controller is:
SatisFactory
79/83 rue Baudin, 92300 Levallois-Perret
Email: contact@satisfactory.fr

The Data Protection Officer (DPO) can be contacted at the following address:
dpo@satisfactory.fr

3. Personal data collected

The personal data that may be collected includes:

• identification and contact details (last name, first name, email address, job title, company);
• professional data related to the use of the platform;
• context data and metadata associated with surveys, provided and configured by the customer (e.g., site name, region, point of sale, customer type, or any other business attribute), which may, depending on their nature and use, constitute personal data;
• content transmitted in the context of surveys or recordings, which may include personal data depending on the customer's practices;
• technical connection data (logs, IP address, browser type) for security purposes and to ensure the proper functioning of the service.

SatisFactory only collects data that is strictly necessary for the purposes described below.

4. Purposes of processing

Personal data is processed for the following purposes:

• supply and operation of the SaaS Feedback Management/Quality Monitoring solution;
• collection, analysis, and reporting of customer feedback on behalf of its clients;
• collection, analysis, calculation, and reporting of compliance scores related to audio recordings;
• management of user accounts and access to the platform;
• customer support and technical assistance;
• continuous improvement of services and user experience;
• system security, fraud and incident prevention;
• compliance with legal and regulatory obligations.

No processing is carried out for direct marketing purposes without prior information or an appropriate legal basis.

5. Legal basis for processing

The treatments implemented are based on:

• the performance of a contract or pre-contractual measures;
• compliance with legal obligations;
• SatisFactory's legitimate interest (security, service improvement);
• the consent of the individual concerned, where required.

6. Retention periods

Personal data is stored for a limited period of time, proportionate to the purposes pursued:

• account data: for the duration of the contractual relationship;
• operational data and feedback: according to the parameters defined by the customer, with a limited default duration;
• Technical and security data: stored for a period compatible with legal obligations and security requirements.

After these periods, the data is deleted or anonymized.

7. Recipients of the data

Personal data is accessible only:

• to authorized SatisFactory employees;
• to service providers and subcontractors acting on behalf of SatisFactory, strictly within the scope of their duties and under contractual confidentiality and security commitments.

SatisFactory does not sell or rent any personal data to third parties.

8. Data transfers

The data is hosted within the European Union.
When using subcontractors located outside the European Union, SatisFactory implements the appropriate safeguards provided for by the GDPR (standard contractual clauses, additional security measures).

9. Data security

SatisFactory implements appropriate technical and organizational measures to ensure the confidentiality, integrity, and availability of personal data, including:

• access control and authorization management;
• stream encryption;
• secure hosting with certified providers;
• regular backups and continuity plans;
• logging and access monitoring.

10. Rights of data subjects

In accordance with the GDPR, all data subjects have the following rights:

• right of access to one's data;
• right to rectification;
• right to erasure;
• right to restriction of processing;
• right to object;
• right to data portability;
• right to withdraw consent at any time when processing is based on consent.
• These rights can be exercised by contacting: dpo@satisfactory.fr

A response will be provided within the regulatory time frame.

11. Cookies and trackers

The site may use cookies or trackers for audience measurement and proper functioning purposes.
Users can set their preferences using the tools provided when browsing.

12. Changes to the Privacy Policy

This policy may be updated to reflect legal, regulatory, or operational changes.
In the event of a substantial change, users will be notified by appropriate means.

13. Complaints

In the event of persistent disagreement, any person concerned has the right to lodge a complaint with the competent supervisory authority, in particular the CNIL.