Privacy Policy

1. Introduction

SatisFactory places particular importance on the protection of personal data and respect for privacy.
The purpose of this privacy policy is to inform users of the SatisFactory website and platform about how their personal data is collected, used, and protected, as well as the rights they have, in accordance with Regulation (EU) 2016/679 on the protection of personal data (GDPR).

2. Data Controller

The data controller is:
SatisFactory
79/83 Rue Baudin, 92300 Levallois-Perret
Email: contact@satisfactory.fr

The Data Protection Officer (DPO) can be contacted at the following address:
dpo@satisfactory.fr

3. Personal data collected

The personal data that may be collected includes, in particular:

• identification and contact information (last name, first name, email address, job title, company);
• professional data related to the use of the platform;
• contextual data and metadata associated with surveys, provided and configured by the client (e.g., store name, region, point of sale, customer type, or any other business attribute), which, depending on their nature and use, may constitute personal data;
• content transmitted in connection with surveys or recordings, which may include personal data depending on the customer’s practices;
• connection data (logs, IP address, browser type) for security purposes and to ensure the proper functioning of the service.

SatisFactory collects only the data strictly necessary for the purposes described below.

4. Purposes of data processing

Personal data is processed for the following purposes:

• provision and operation of the Feedback Management / Quality Monitoring SaaS solution;
• collecting, analyzing, and reporting customer feedback on behalf of its clients;
• collection, analysis, calculation, and reporting of compliance scores related to audio recordings;
• management of user accounts and platform access;
• customer support and technical assistance;
• continuous improvement of services and the user experience;
• system security, fraud prevention, and incident prevention;
• compliance with legal and regulatory requirements.

No data processing is carried out for direct marketing purposes without prior notice or an appropriate legal basis.

5. Legal Basis for Data Processing

The treatments used are based on:

• the performance of a contract or pre-contractual measures;
• compliance with legal obligations;
• SatisFactory’s legitimate interest (security, service improvement);
• the consent of the data subject, where required.

6. Retention periods

Personal data is retained for a limited period of time, commensurate with the purposes for which it is collected:

• account information: for the duration of the contractual relationship;
• operational data and feedback: based on parameters defined by the client, with a limited default duration;
• Technical and security data: retained for a period consistent with legal obligations and security requirements.

Once these time limits have expired, the data is deleted or anonymized.

7. Recipients of the data

Personal data is accessible only:

• to authorized SatisFactory employees;
• to service providers and subcontractors acting on behalf of SatisFactory, strictly within the scope of their assignments and subject to contractual confidentiality and security obligations.

SatisFactory does not sell or rent any personal data to third parties.

8. Data transfers

The data is hosted within the European Union.
If subcontractors located outside the European Union are used, SatisFactory implements the appropriate safeguards required by the GDPR (standard contractual clauses, additional security measures).

9. Data Security

SatisFactory implements appropriate technical and organizational measures to ensure the confidentiality, integrity, and availability of personal data, including:

• access control and authorization management;
• data encryption;
• secure hosting with certified providers;
• regular backups and business continuity plans;
• access logging and monitoring.

10. Rights of Data Subjects

In accordance with the GDPR, every data subject has the following rights:

• the right to access one's data;
• right to rectification;
• right to erasure;
• right to restriction of processing;
• right to object;
• right to data portability;
• the right to withdraw consent at any time when the processing is based on consent.
• You may exercise these rights by contacting: dpo@satisfactory.fr

A response will be provided within the prescribed time frame.

11. Cookies and trackers

The website may use cookies or trackers for audience measurement and to ensure proper functioning.
Users can configure their preferences using the tools provided while browsing.

12. Changes to the Privacy Policy

This policy may be updated to reflect changes in laws, regulations, or operational procedures.
In the event of a substantial change, users will be notified by appropriate means.

13. Complaint

In the event of a persistent disagreement, any affected individual has the right to file a complaint with the competent supervisory authority, such as the CNIL.