As part of its activities, Basalt may process sensitive personal data. Therefore, we attach the utmost importance to the security and confidentiality of the data of users of Basalt's services, whether it concerns the website www.getbasalt.ai or the web application available at app.getbasalt.ai.

The purpose of this privacy policy is to help you understand how we process the personal data you provide to us, in accordance with the provisions of the European Regulation 2016/679 of April 27, 2016, concerning the protection of individuals with regard to the processing of personal data and the free movement of such data (the "GDPR"), the French Law No. 78-17 of January 6, 1978, relating to data processing, files, and freedoms, as amended (the "LIL"), and this Policy.

This privacy policy may be updated regularly to enrich it, depending on Basalt's needs, circumstances, or legal requirements.

We therefore invite you to regularly review updates, although we will always notify you of significant changes affecting how your data is processed.

Your Rights

As a data subject, you have a number of rights regarding your personal data under data protection laws. If you wish to exercise any of your rights, please contact us at: [email protected]

Right of Access: You can request access to a copy of the personal data we hold about you, as well as details on the reasons and methods of its use;
Right of Rectification: You can ask us to correct or complete any personal data we hold about you that is inaccurate or incomplete;
Right to Erasure/Right to be Forgotten: You have the right, under certain circumstances, to request the deletion of any personal data we hold about you. Please note that there may be situations where we need to retain your personal data after a deletion request if we have a legal basis to do so;
Right to Restriction: You can ask us to restrict (i.e., prevent) the processing of your personal data when you have contested our use of it and we do not have a legal basis to continue processing your personal data;
Right to Data Portability: In certain circumstances, you can ask us to transfer the data we hold about you to another entity. This data will be provided in a structured, commonly used, and electronic format;
Right to Object: You can object to us using your personal data for specific purposes.

You also have the right to file a complaint with a supervisory authority - in France, this is the CNIL, whose contact details are available here.

Personal Data Security

Basalt implements technical and organizational security measures to ensure the security of Personal Data and to protect it from unauthorized access, loss, or disclosure. The Personal Data processed within the Basalt platform is hosted by AWS France.

International Transfers of Personal Data

Users' Personal Data is processed and stored within the European Union or in a country whose legislation is recognized as adequate by a decision of the European Commission in accordance with Article 45 of the GDPR. When Personal Data is subject to international transfers to a country that is not covered by an adequacy decision, Basalt commits to implementing mechanisms for these transfers in accordance with the GDPR, such as entering into Standard Contractual Clauses approved by the European Commission.