# Privacy policy

How we collect, use and protect your personal data, in accordance with the General Data Protection Regulation (GDPR).

## Data controller

The controller of the personal data collected via the www.hoctav.ai site is Sinfony France (Laurent Gruber), reachable at [dpo@sinfony.eu](mailto:dpo@sinfony.eu). For any information about the publisher, please refer to our [legal notice](/en/legal-notice/).

## Data collected

We may collect the following categories of data:

-   Identification data (surname, first name, job title);
-   Professional contact details (email, phone, company);
-   Browsing data (cookies, connection data, technical logs);

## Purposes of processing

Your data is processed for the following purposes:

-   Respond to your requests for contact, a demo or an assessment;
-   Send you the resources you requested (white papers) and keep you informed of our content, webinars and news (if you have consented);
-   Improve the operation and security of the site;

## Legal basis

Each processing activity relies on a specific legal basis:

-   the **performance of pre-contractual measures or of the contract**, to respond to your requests for contact, a demo or an assessment;
-   your **consent**, for sending resources, content, webinars and news;
-   our **legitimate interest**, to ensure the proper functioning, security and improvement of the site.

## Retention period

Your data is retained for as long as necessary for the purposes described above:

-   prospect and commercial contact data: **3 years from your last contact**;
-   data linked to a contractual relationship: the duration of the contract, then archived in accordance with the applicable **legal periods** (accounting and tax, up to 10 years);
-   browsing data and technical logs: **12 months maximum**.

## Data recipients

Your data is intended for the authorised departments of Sinfony France. We use processors acting on our behalf, in compliance with the GDPR:

-   **Google Analytics 4** — Website audience measurement (Google Ireland Limited). [Privacy policy](https://policies.google.com/privacy)
-   **HubSpot** — Forms and contact tracking (HubSpot Ireland Limited). [Privacy policy](https://legal.hubspot.com/privacy-policy)

Some of these providers may be located outside the European Union; such transfers are then framed by appropriate safeguards, in particular the European Commission's standard contractual clauses.

## Cookies

On your arrival, a banner allows you to **accept or refuse** cookies that are not strictly necessary. **No tracking cookie is placed before your consent.** You can also configure your browser to block or delete cookies.

A strictly necessary cookie is also set to remember your consent choice and to allow the site to operate. Exempt from consent, it is not used for any tracking.

| Cookie | Set by | Duration |
| --- | --- | --- |
| `_ga` | Google Analytics 4 | 13 months |
| `_ga_*` | Google Analytics 4 | 13 months |
| `hubspotutk` | HubSpot | 13 months |
| `__hstc` | HubSpot | 13 months |
| `__hssc` | HubSpot | 30 minutes |
| `__hssrc` | HubSpot | session |

You may change or withdraw your choice at any time via the cookie management link in the footer.

## Your rights

In accordance with the GDPR, you have a right of access, rectification, erasure, restriction, objection and portability of your data, as well as the right to withdraw your consent at any time. To exercise these rights, contact our DPO at [dpo@sinfony.eu](mailto:dpo@sinfony.eu) (proof of identity may be requested). You may also lodge a complaint with the **CNIL** ([www.cnil.fr](https://www.cnil.fr) — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07).

## DPO contact

To exercise your rights or for any question about the processing of your data, you can contact our Data Protection Officer (DPO):

-   **Email:** [dpo@sinfony.eu](mailto:dpo@sinfony.eu)
-   **Postal address:** 23 rue Claude Curtat — 69330 Meyzieu — France

_Last updated: August 5, 2026_