Legal
Last Update on 12-02-2026
This privacy policy or Prysm (“we,” “us,” or “our”) describes how and why we may access, collect, store, use, and/or share (“process”) your personal data (“Personal Data”) when you use our services (“Services”), including when you:
This policy applies to all processing of Personal Data as defined by applicable regulations. Processing includes, in particular, the collection, recording, organization, storage, erasure, or destruction of Personal Data, including any combination of two or more of these activities.
We collect Personal Data that you voluntarily provide to us when you express an interest in obtaining information about us or our products and services, when you participate in activities relating to the Services, or when you contact us.
Personal Data provided by you. The Personal Data we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The Personal Data we collect may include the following:
Sensitive information. We do not process sensitive information.
All Personal Data you provide to us must be true, complete, and accurate, and you must notify us of any changes to such Personal Data.
We automatically collect certain data when you visit, use, or navigate the Services. This data does not reveal your specific identity (such as your name or contact details), but it may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This data is primarily necessary to maintain the security and operation of our Services, as well as for our internal analytics and reporting purposes.
Like many businesses, we also collect data through cookies and similar technologies. You can learn more about this in our Cookie Notice: __.
The data we collect includes:
PRYSM
2229 Route des Crêtes
06560 Sophia Antipolis – France
SIRET : 424 035 947 00052
Contact / Administration / RGPD : administration@prysm.fr
We process your Personal Data for various reasons, depending on how you interact with our Services, including:
If you are located in the EU or the United Kingdom, this section applies to you.
The General Data Protection Regulation (GDPR) and the UK GDPR require us to explain the valid legal bases on which we rely to process your Personal Data. Accordingly, we may rely on the following legal bases to process your Personal Data:
In legal terms, we are generally the “data controller” under the European data protection laws described in this privacy policy because we determine the means and/or purposes of the processing of Personal Data that we carry out. This privacy policy does not apply to Personal Data that we process as a “data processor” on behalf of our customers. In those situations, the customer to whom we provide services and with whom we have entered into a data processing agreement is the “data controller” of your Personal Data, and we simply process your information on their behalf in accordance with their instructions. If you would like to learn more about our customers’ privacy practices, we encourage you to read their privacy policies and direct any questions to them.
If you are located in Canada, this section applies to you.
We may process your Personal Data if you have given us specific permission (i.e., express consent) to use your Personal Data for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent). You may withdraw your consent at any time.
In some exceptional cases, we may be legally permitted under applicable law to process your Personal Data without your consent, including in the following circumstances:
We may need to share your Personal Data in the following situations:
Except for possible disclosures to the recipients listed above, the Personal Data collected about you is not communicated, transferred, or disclosed to third parties, including recipients located outside the European Union.
Your Personal Data will not be retained for longer than is strictly necessary for the purposes for which it is processed, in accordance with applicable laws and regulations.
Personal Data relating to customers and used for direct marketing purposes is retained throughout the business relationship and for up to three (3) years after the end of that relationship. The end of the business relationship may correspond, for example, to a purchase, the expiration of a warranty, the end of a service contract, or the customer’s last contact. This rule applies to all information used for marketing purposes, including information not originally collected for that purpose.
Personal Data relating to prospects who are not customers is retained for a maximum of three (3) years from its collection or the last contact with the prospect. Contact may include a request for documentation or clicking a hyperlink in an email. Simply opening an email is not considered contact.
Personal Data necessary to manage an individual’s right to object to direct marketing is retained for a minimum of three (3) years from the exercise of that right and is used solely for this purpose. Only the Personal Data strictly necessary to record and respect the objection (for example, an email address) is retained.
Cookies and other trackers placed on your device for audience measurement purposes have a maximum lifespan of thirteen (13) months and are not automatically extended by new visits. Raw audience measurement data associated with an identifier is also retained for a maximum of thirteen (13) months, after which it is deleted or anonymized.
Personal Data relating to contributors who post reviews of products, services, or content is retained for a reasonable period determined on a case-by-case basis depending on the business sector concerned. In principle, the publication of reviews should not exceed five (5) years. After this period, aggregated data may be retained in anonymized form before being deleted.
At the end of these periods, we undertake to return or destroy, at our own expense and under our responsibility, all Personal Data collected, unless we are required to retain it for longer under a law or regulation.
In certain regions (such as the EEA, the United Kingdom, Switzerland, and Canada), you have certain rights under applicable data protection laws. These may include the right (i) to request access to and obtain a copy of your Personal Data, (ii) to request its rectification or erasure, (iii) to restrict or object to the processing of your Personal Data, (iv) where applicable, to data portability, (v) not to be subject to automated decision-making, and (vi) to provide instructions concerning the processing of your Personal Data after your death. If a decision with legal or similarly significant effects is made solely by automated means, we will inform you, explain the main factors involved, and provide you with a simple way to request human review. In certain circumstances, you may also have the right to object to the processing of your Personal Data. You may make such a request by contacting us using the details provided in the section “HOW CAN YOU CONTACT US ABOUT THIS POLICY?” below.
We will consider and respond to all requests in accordance with applicable data protection laws.
If you are located in the EEA or the United Kingdom and believe that we are unlawfully processing your Personal Data, you also have the right to lodge a complaint with the data protection authority in your Member State (the CNIL in France: www.cnil.fr) or with the UK data protection authority.
If you are located in Switzerland, you can contact the Federal Data Protection and Information Commissioner.
Withdrawing your consent: If we rely on your consent to process your Personal Data, which may be express and/or implied depending on applicable law, you have the right to withdraw your consent at any time. You may do so by contacting us using the details provided in the section “HOW CAN YOU CONTACT US ABOUT THIS POLICY?” below.
Please note, however, that this will not affect the lawfulness of processing carried out before your consent was withdrawn or, where applicable law permits, the processing of your Personal Data on legal grounds other than consent.
Opting out of marketing and promotional communications: You can unsubscribe from our marketing and promotional communications at any time by clicking the unsubscribe link in the emails we send or by contacting us using the details provided in the section “HOW CAN YOU CONTACT US ABOUT THIS POLICY?” below. You will then be removed from our marketing lists. However, we may still communicate with you, for example, to send service-related messages necessary for the administration and use of your account, to respond to service requests, or for other non-commercial purposes.
Cookies and similar technologies: Most web browsers are set to accept cookies by default. If you prefer, you can generally configure your browser to delete or reject cookies. If you choose to delete or reject cookies, this may affect certain features or services within our Services. For more information, please see our Cookie Notice: __.
If you have questions or comments about your privacy rights, you can email us at administration@prysm.fr
Providing your Personal Data is necessary to enable us to process your requests and answer your questions, particularly when you contact us through the contact form available on the website.
Where processing is based on your consent, providing the requested Personal Data is optional. However, fields marked as mandatory are necessary for us to handle your request properly. If you do not provide the required information, we may be unable to answer your questions or provide the requested services.
Unless otherwise indicated, providing Personal Data is not a legal or regulatory obligation.
We may use cookies and similar tracking technologies (such as web beacons and pixels) to collect information when you interact with our Services. Some online tracking technologies help us maintain the security of our Services, prevent crashes, fix bugs, save your preferences, and facilitate basic site functions.
We also allow third parties and service providers to use online tracking technologies on our Services for analytics and advertising purposes, including to help manage and display advertisements, tailor advertisements to your interests, or send abandoned-cart reminders (depending on your communication preferences). Third parties and service providers use their technology to deliver advertisements for products and services suited to your interests, which may appear either on our Services or on other websites.
To the extent that these online tracking technologies are considered a “sale” or “sharing” (which includes targeted advertising as defined under applicable laws) under applicable US laws, you may opt out of these online tracking technologies by submitting a request as described below in the section “DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?.”
Specific information about how we use these technologies and how you can refuse certain cookies is available in our Cookie Notice: __.
We may share your information with Google Analytics to track and analyze the use of the Services. Google Analytics advertising features that we may use include Google Analytics Demographics and Interests Reports. To opt out of being tracked by Google Analytics across the Services, visit https://tools.google.com/dlpage/gaoptout. You can disable Google Analytics advertising features through Ads Settings and the ad settings for mobile applications. You can also opt out at http://optout.networkadvertising.org/ and http://www.networkadvertising.org/mobile-choice. For more information about Google’s privacy practices, please consult the Google Privacy & Terms page.
We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of all Personal Data we process. However, despite our safeguards and efforts to secure your Personal Data, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. We therefore encourage you to use secure connections when transmitting data.
We do not knowingly collect or solicit data from children under 18 years of age, or the equivalent age specified by law in your jurisdiction, and we do not knowingly market such Personal Data. By using the Services, you represent that you are at least 18 years old, or the equivalent age specified by law in your jurisdiction, or that you are the parent or guardian of such a minor and consent to your dependent minor’s use of the Services. If we learn that Personal Data from users under 18 years of age, or the equivalent age specified by law in your jurisdiction, has been collected, we will deactivate the account and take reasonable steps to promptly delete such data from our records. If you become aware of any data we may have collected from children under 18 years of age, or the equivalent age specified by law in your jurisdiction, please contact us at administration@prysm.fr
The table below shows the categories of Personal Data we have collected during the past twelve (12) months. The table includes illustrative examples of each category and does not reflect the specific Personal Data we collect from you. For a complete inventory of all Personal Data we process, please refer to the section “WHAT PERSONAL DATA DO WE COLLECT?.”
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Contact details, such as real name, alias, postal address, telephone or mobile number, unique personal identifier, online identifier, IP address, email address, and account name | YES |
| B. Personal Data as defined in the California Customer Records statute | Name, contact details, education, employment, employment history, and financial information | YES |
| C. Protected classification characteristics under federal or state law | Sex, age, date of birth, race and ethnicity, national origin, marital status, and other demographic information | NO |
| D. Commercial information | Transaction information, purchase history, financial details, and payment information | NO |
| E. Biometric information | Fingerprints and voiceprints | NO |
| F. Internet or other similar network activity | Browsing history, search history, online behavior, interest data, and interactions with our websites, applications, systems, and advertisements, as well as those of other entities | NO |
| G. Geolocation data | Device location | YES |
| H. Audio, electronic, sensory, or similar information | Images and audio, video, or call recordings created in connection with our business activities | NO |
| I. Professional or employment-related information | Business contact details so we can provide our services to you at a professional level, or job title, employment history, and professional qualifications if you apply for a job with us | NO |
| J. Education information | Student records and directory information | NO |
| K. Inferences drawn from collected Personal Data | Inferences drawn from any of the Personal Data listed above to create a profile or summary concerning, for example, an individual’s preferences and characteristics | NO |
| L. Sensitive Personal Data | NO |
We may also collect other Personal Data outside these categories when you interact with us in person, online, by telephone, or by mail in connection with:
We will use and retain the Personal Data collected as necessary to provide the Services or for:
To learn more about the sources of the Personal Data we collect, see the section “WHAT PERSONAL DATA DO WE COLLECT?.”
To learn more about how we use your Personal Data, see the section “HOW DO WE PROCESS YOUR INFORMATION?.”
Will your information be shared with anyone else?
We may disclose your Personal Data to our service providers pursuant to a written contract between us and each service provider. To learn more about how we disclose Personal Data, see the section “WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL DATA?.”
We may use your Personal Data for business purposes, such as conducting internal research for technological development and demonstration. This is not considered a “sale” of your Personal Data.
During the past twelve (12) months, we have not disclosed, sold, or shared any personal information with third parties for business or commercial purposes. In the future, we will not sell or share the Personal Data of website visitors, users, and other consumers.
You have rights under certain US data protection laws. However, these rights are not absolute, and in some cases we may deny your request as permitted by law. These rights include:
Depending on the state in which you reside, you may also have the following rights:
To exercise these rights, you can contact us by submitting a data subject access request, emailing us at administration@prysm.fr, or referring to the contact details at the bottom of this document.
Under certain US data protection laws, you may designate an authorized agent to make a request on your behalf. We may deny a request from an authorized agent who does not provide proof that they have been validly authorized to act on your behalf in accordance with applicable laws.
Upon receiving your request, we will need to verify your identity to determine whether you are the person about whom we hold information in our system. We will use Personal Data provided in your request solely to verify your identity or authority to make the request. However, if we cannot verify your identity from the information we already hold, we may ask you to provide additional information to verify your identity and for security or fraud prevention purposes.
If you submit your request through an authorized agent, we may need to collect additional information to verify your identity before processing your request, and the agent will need to provide written and signed authorization from you to submit the request on your behalf.
Under certain US data protection laws, if we deny your request, you may appeal our decision by emailing us at administration@prysm.fr. We will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for our decisions. If your appeal is denied, you may file a complaint with your state’s Attorney General.
Section 1798.83 of the California Civil Code, also known as the “Shine The Light” law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about the categories of personal data (if any) that we disclosed to third parties for direct marketing purposes, as well as the names and addresses of all third parties with whom we shared personal data during the preceding calendar year. If you are a California resident and wish to make such a request, please submit it to us in writing using the contact details provided in the section “HOW CAN YOU CONTACT US ABOUT THIS NOTICE?.”
We collect and process your Personal Data in accordance with the obligations and conditions established by Australia’s Privacy Act 1988 and New Zealand’s Privacy Act 2020.
This privacy policy satisfies the notification requirements set out in both privacy laws, in particular concerning the Personal Data we collect from you, its sources, its purposes, and the other recipients of your Personal Data.
If you do not wish to provide the Personal Data necessary to fulfill the applicable purpose, this may affect our ability to provide our services, in particular to:
You have the right to request access to or correction of your Personal Data at any time. You may make such a request by contacting us using the details provided in the section “HOW CAN YOU ACCESS, UPDATE, OR DELETE THE DATA WE COLLECT ABOUT YOU?.”
If you believe that we are unlawfully processing your Personal Data, you have the right to lodge a complaint about a breach of the Australian Privacy Principles with the Office of the Australian Information Commissioner, and about a breach of the New Zealand Privacy Principles with the Office of the New Zealand Privacy Commissioner.
You have the right to request access to or correction of your Personal Data at any time. You may make such a request by contacting us using the details provided in the section “HOW CAN YOU ACCESS, UPDATE, OR DELETE THE DATA WE COLLECT ABOUT YOU?.”
If you are dissatisfied with how we address any complaint regarding our processing of Personal Data, you may contact the regulatory authority, whose contact details are as follows:
General enquiries: enquiries@inforegulator.org.za
Complaints (duly completed POPIA/PAIA Form 5): PAIAComplaints@inforegulator.org.za & POPIAComplaints@inforegulator.org.za
We may update this privacy policy from time to time. The updated version will be indicated by an updated “revision” date at the top of this privacy policy. We encourage you to review this privacy policy regularly to stay informed about how we protect your information.
If you have questions or comments about this policy, you may contact our Data Protection Officer (DPO) by email at administration@prysm.fr, or contact us by post at the following address:
PRYSM
2229 Route des Crêtes
06560 Sophia Antipolis – France
Under the applicable laws of your country or your US state of residence, you may have the right to request access to the Personal Data we collect about you, details about how we have processed it, correction of inaccuracies, or deletion of your Personal Data. You may also have the right to withdraw your consent to the processing of your Personal Data. These rights may be limited in certain circumstances by applicable law. To request access to, updating of, or deletion of your Personal Data, please complete and submit a data subject access request.
