Data Privacy Notice

Purpose of Notice

The purpose of this Data Privacy Notice (the "Notice") is to detail how echoprism-ai.com ("Echo Prism AI" or "We" or "Us") will handle, as the data controller, the personal data you provide Us when you visit the website echoprism-ai.com (the "Website"), or that We obtain from third parties, to connect you with professionals you may find of interest.

How is your data collected?

We gather your personal data:

Directly from you, when you submit your Identification Data on our Website; and/or
Indirectly:
- by obtaining Identification Data about you from third parties
- through collecting data related to your navigation of our Website using cookies or similar technologies (refer to our Cookies Policy for more details).

Providing your personal data is optional, but not doing so may prevent Us from connecting you with professionals that align with your interests.

What categories of personal data will be processed?

Echo Prism AI collects and processes the following categories of personal data about you:

Category of personal data	Definition
Identification Data	Includes your full name and contact details (phone number and email address).
Browsing Information	Details such as IP address, access times and dates, pages visited on our web and mobile sites, language preferences, reports on software crashes, browser type, device-related information, and online activities automatically collected, e.g., via cookies, web server logs, pixels, and web beacons.

What are the purposes and legal basis of our processing?

Echo Prism AI processes your personal data for the following purposes:

Purpose	Legal basis	Categories of personal data processed
Connecting you with professionals offering services that may interest you	Your Agreement	Identification Data
Addressing requests and adhering to legal requirements from regulatory bodies or other authorities, both domestically and internationally.	Compliance with applicable legal and regulatory mandates.	Identification Data Browsing Information
Protecting and asserting our rights	Our legitimate interest in defending our rights against users (including yourself), judicial, administrative, and/or law enforcement entities.	Identification Data Browsing Information
Ensuring the operational efficiency and security of our Website	Our legitimate interest in maintaining a secure and effective Website.	Browsing Information

Your Data Privacy Rights

In accordance with current data protection laws, you have a range of rights, including:

Right of Access: You can request confirmation from Echo Prism AI regarding whether your personal data is being processed and, if so, access to that data. This includes details about processing purposes, categories of personal data processed, and possible data recipients.
You are entitled to a copy of the processed data. For additional copies, a nominal fee may be charged based on administrative costs.
Right to Rectification: If your personal data is inaccurate, you have the right to have it corrected. Additionally, for processing purposes, you have the right to complete any incomplete personal data, which may include providing supplementary statements.
Right to Erasure ("Right to be Forgotten"): You can request that Echo Prism AI delete your personal data under certain conditions.
Right to Restrict Processing: You can request that the processing of your personal data be restricted. In such cases, the data will be marked and processed by us only for specific purposes.
Right to Data Portability: You have the right to receive your personal data, which you have provided to Echo Prism AI, in a structured, commonly used, and machine-readable format, and you have the right to transmit those data to another controller without hindrance from us.
Right to Object: You can object to the processing of your personal data based on your specific situation at any time. Upon objection, we will cease processing your data for the objected purposes unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.
Right to Withdraw Consent: If the processing of your data is based on your consent, you can withdraw this consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.
Post-Mortem Right to Data: You have the right to set directives regarding the handling of your personal data after your death.

Note: Exercising these rights may be subject to certain conditions and limitations under local data protection laws.

To exercise any of these rights, please contact us as outlined in the "Contact Us" section below.

You also have the right to file a complaint with the competent French data protection authority, the CNIL.

Our Data Sharing Practices

Your personal data may be shared in the following ways:

Within our corporate group;
With our partners, for their processing purposes, provided you have consented to this sharing, to inform you about services/products that may interest you;
With service providers assisting our operations (e.g., storage, hosting, analytics, technical support);
With our legal advisors, to comply with our statutory obligations, including accounting, auditing, and internal controls;
In the context of a business sale, asset transfer to a third party, or during company restructuring or reorganization;
Where required or permitted by law, to government bodies, courts, external advisors, and similar third parties.

International Data Transfers

Personal data collected by Echo Prism AI may be transferred outside the European Economic Area (EEA). Transfers to countries recognized by the European Commission as providing adequate protection (e.g., Israel) are deemed to ensure an adequate level of data protection. For transfers to countries not recognized as providing adequate protection, we ensure data protection through standard contractual clauses or other approved mechanisms, guaranteeing adequate safeguards.

Our Data Retention Policies

We retain your personal data only as long as necessary for the purposes outlined in this Notice, in compliance with applicable laws. Once your personal data is no longer needed, it will be deleted or anonymized.

Contact Us

If you have any inquiries concerning this Notice, feel free to reach out to us at [email protected].

Revisions to the Notice

This Privacy Notice may undergo updates from time to time. We will inform you of any major changes in accordance with legal requirements.

Last revised: 01.11.2023