Privacy Policy

1. INTRODUCTION

This Privacy Policy is intended to inform you about how Cloud Solutions collects, uses, and protects your personal data when you visit or use the showcase website www.wimi-teamwork.com (hereinafter the "Site").

Cloud Solutions is committed to respecting your privacy and personal data, in accordance with the General Data Protection Regulation (GDPR) 2016/679 of April 27, 2016, and the French Data Protection Act of January 6, 1978, as amended.

This policy applies exclusively to the showcase website www.wimi-teamwork.com. Use of the Wimi application (the SaaS service) is governed by separate terms and conditions and a privacy policy, which can be accessed from your user account.

2. DATA CONTROLLER

The controller for the personal data collected on the Site is:

Cloud Solutions
Simplified joint-stock company
Registered office: 23 rue d'Anjou, 75008 Paris
Paris Trade and Companies Register (RCS) 528 893 522
Phone: +33 (0)1 76 44 01 97
Email: contact@wimi-teamwork.com

3. DATA PROTECTION OFFICER (DPO)

Cloud Solutions has appointed a Data Protection Officer whom you may contact with any questions regarding the processing of your personal data:

Eric Barbry
Racine Avocats Law Firm
Email: dpo-wimi@racine.eu
Phone: +33 1 44 82 43 00
Postal address: 112 Rue Réaumur, 75002 Paris, France

4. DATA COLLECTED ON THE SHOWCASE WEBSITE

4.1. Data collected directly

When you use the Site, Cloud Solutions may collect the following personal data:

Via contact forms:

• First and last name
• Email address
• Phone number
• Company name
• Job title / position held
• Country
• Message or request submitted

Via download forms (white papers, guides, case studies):

• Full name
• Email address
• Company name
• Job title
• Phone number
• Country

Via the chatbot (Intercom):

• Full name (if provided)
• Email address (if provided)
• Conversation content
• Communication history

Via the conversational assistant Jenna (AI sales agent):

• Full name (if provided)
• Email address (if provided)
• Phone number (if provided)
• Conversation content
• Page visited and date of interaction

Required fields are marked with an asterisk (*). If this mandatory information is not provided, we will be unable to process your request.

4.2. Automatically collected data

When you browse the Site, technical data is collected automatically:

Connection and browsing data:

• IP address
• Browser type and version
• Operating system
• Pages visited and duration of visit
• Date and time of connection
• Referrer (originating website)
• Browser language

This data is collected via cookies and similar technologies, managed by Flowappz, as well as through the following tools:

• Google Tag Manager (tracking tag management)
• Meta Pixel (measurement and optimization of Facebook/Instagram campaigns)
• Bing Pixel (measurement and optimization of Microsoft Advertising campaigns)

For more information on cookies, please see our Cookie Policy available on the Site.

4.3. Data from external sources

Cloud Solutions may also collect personal data about you through:

• B2B sales prospecting (participation in professional events, trade shows)
• Purchasing databases from specialized providers that comply with current regulations
• Enrichment of contact details provided via the Jenna conversational assistant, using specialized service providers and public sources

When you provide a professional email address via the conversational assistant, Cloud Solutions supplements your profile with professional information obtained from specialized providers and public sources in order to prepare its sales response.

Data concerned: your first and last name, your job title, the company or organization you are affiliated with, its public legal information (identification number, industry sector, headcount, published revenue), its website, the phone number that the organization itself publishes, and the address of your public professional profile.

Searching for a direct phone number: for requests identified as relevant to our business, we also search for a phone number to reach you directly. This may be a personal mobile number. This search is not systematic: it only concerns requests where the content indicates a need corresponding to our services.

Origin of this data: it does not come from you, but from public registers, legal notices published by your organization on its own website, and professional data enrichment providers. In accordance with Article 14 of the General Data Protection Regulation, this notice informs you of this indirect collection. You may obtain the precise origin of any information held about you upon request.

‍

5. PURPOSES OF PROCESSING

Your personal data is collected and processed for the following purposes:

Managing interactions with the Jenna conversational assistant: answering visitor questions, qualifying sales inquiries, and ensuring follow-up.

Qualifying sales inquiries: supplementing the professional contact details provided in order to direct the inquiry to the right person and respond via the most appropriate channel, including by phone.

6. LEGAL BASIS FOR PROCESSING

In accordance with the GDPR, Cloud Solutions relies on the following legal bases:

• Consent : when you explicitly agree to the processing (e.g., advertising cookies, downloading content)
• Legitimate interest : when Cloud Solutions has a legitimate interest in processing your data (e.g., B2B prospecting, site security, service improvement)
• Performance of pre-contractual measures : when processing is necessary prior to entering into a contract (e.g., quote requests, demo requests)
• Legal obligation : when Cloud Solutions is subject to a legal obligation (e.g., log retention, fraud prevention)

7. DATA RECIPIENTS

Your personal data is accessible, within the limits of their duties and for the aforementioned purposes, to the following categories of recipients:

7.1. Internal recipients

• Authorized personnel in the marketing and sales departments
• Authorized personnel in the customer relations and support departments
• Authorized personnel in the administrative and IT departments
• Authorized personnel in the control departments (statutory auditors, internal audit)

7.2. External recipients

Technical subcontractors:

• Webflow, Inc. (site hosting)
• HubSpot, Inc. (customer relationship management, forms)
• Intercom, Inc. (chatbot and customer support)
• Google LLC (Google Tag Manager, audience measurement)
• Meta Platforms, Inc. (Meta Pixel, targeted advertising)
• Microsoft Corporation (Bing Pixel, targeted advertising)
• Flowappz (cookie consent management)
• Frame UX (Croissant agency) – publisher of the Jenna conversational assistant
• Supabase, Inc. – hosting for the Jenna conversation database (European Union, Ireland)
• Anthropic PBC – processing of messages exchanged with Jenna via the artificial intelligence model
• Dropcontact SAS (France) – verification and enrichment of professional contact details
• FullEnrich SAS (France) – professional contact identification
• Apollo.io – direct phone number lookup

Business partners:

• Cloud Solutions partners and resellers, for the purpose of managing sales leads

Competent authorities:

• Upon request or in accordance with legal obligations: judicial, administrative, and tax authorities

All Cloud Solutions subcontractors are contractually required to comply with GDPR requirements and to ensure the security and confidentiality of your data.

8. TRANSFERS OUTSIDE THE EUROPEAN UNION

Some of our subcontractors are located outside the European Union, notably in the United States:

• Webflow, Inc. (United States) – Hosting for the Wimi marketing website
• HubSpot, Inc. (United States) – CRM and forms
• Intercom, Inc. (United States) – Chatbot
• Google LLC (United States) – Analytics and Tag Manager
• Meta Platforms, Inc. (United States) – Advertising
• Microsoft Corporation (United States) – Advertising
• Anthropic PBC (United States) – processing of messages exchanged with the Jenna assistant by the AI model
• Apollo.io (United States) – searching for direct business phone numbers for professional contacts

Please note: the Jenna conversation database is hosted by Supabase within the European Union (Ireland). Only the processing by the AI model involves a transfer outside the EU, which is governed by the European Commission's standard contractual clauses, with no reuse of your data for model training.

These transfers are governed by the following mechanisms, in accordance with the GDPR:

• Standard contractual clauses adopted by the European Commission
• Adequacy decisions for countries recognized as providing an adequate level of protection
• Other appropriate safeguards (Binding Corporate Rules, certifications)

For more information on the safeguards in place, you may contact our Data Protection Officer.

The search for direct phone numbers described in section 4.3 is performed by Apollo.io, a company based in the United States. For this search, your name, professional email address, and organization name are transmitted to them and are therefore processed outside the European Union. This transfer is governed by [mechanism, to be completed based on the contract]. The service providers based in France mentioned in section 7.2 also use subcontractors located outside the European Union under the same conditions.

If you do not wish for your data to be subject to this transfer, you may object to it by contacting the Data Protection Officer, without this affecting the processing of your request.

9. RETENTION PERIOD

Cloud Solutions retains your personal data for a limited period proportionate to the purposes pursued:

At the end of these periods, your data is either deleted or irreversibly anonymized for statistical purposes.

Conversations with the Jenna assistant: 12 months, after which they are deleted or anonymized.

Professional information obtained through enrichment: 12 months from the last interaction, followed by deletion, unless a business relationship has been established.

‍

10. YOUR RIGHTS

In accordance with the GDPR and the French Data Protection Act, you have the following rights regarding your personal data:

10.1. Right of access

You have the right to obtain confirmation as to whether or not your personal data is being processed, and to access such data.

10.2. Right to rectification

You have the right to have inaccurate or incomplete data concerning you corrected.

10.3. Right to erasure ("right to be forgotten")

You may request the deletion of your data in the following cases:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw your consent and there is no other legal basis for the processing
• You object to the processing and there are no overriding legitimate grounds
• The data has been processed unlawfully

10.4. Right to restriction of processing

You may request the restriction of the processing of your data in certain circumstances, particularly if you contest the accuracy of the data or object to its processing.

10.5. Right to data portability

You have the right to receive the data you have provided to us in a structured, commonly used, and machine-readable format, and to transmit it to another controller.

10.6. Right to object

You may object at any time, for reasons relating to your particular situation, to the processing of your data based on legitimate interest.

You also have an absolute right to object to the processing of your data for direct marketing purposes, including profiling related to such marketing.

Regarding information obtained through data enrichment and direct phone number lookup, your objection takes effect immediately and without justification. We will then cease all research concerning you and delete any information already obtained, including your phone number.

10.7. Right to withdraw your consent

When processing is based on your consent, you may withdraw it at any time. This withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

10.8. Right to define post-mortem directives

You have the right to define directives regarding the storage, deletion, and disclosure of your data after your death.

10.9. Exercising your rights

To exercise your rights, you may submit your request:

By email:
dpo-wimi@racine.eu

By mail:
Cloud Solutions
Attn: Data Protection Officer
112 Rue Réaumur
75002 Paris
France

Your request must be accompanied by a copy of a valid proof of identity. Cloud Solutions commits to responding to your request within one month of receipt. This period may be extended by two months if the complexity of the request justifies it.

11. COOKIES AND SIMILAR TECHNOLOGIES

The Site uses cookies and similar technologies to improve your browsing experience, measure traffic, and display targeted advertisements.

During your first visit, an information banner allows you to set your cookie preferences. You can change your choices at any time via the cookie manager available on the Site.

For more information on the cookies used, their purpose, and how to configure them, please consult our Cookie Policy.

12. DATA SECURITY

Cloud Solutions implements all appropriate technical and organizational measures to ensure the security and confidentiality of your personal data, including:

• Data encryption during transmission (HTTPS/SSL protocol)
• Permission management and data access control
• Secure authentication for users
• Regular backups of data
• Monitoring and detection of security incidents
• Training and awareness for teams on security best practices

Despite these measures, no method of electronic transmission or storage is completely secure. Therefore, Cloud Solutions cannot guarantee the absolute security of your data.

12.1. Data breach

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, Cloud Solutions commits to:

• Notifying the CNIL within 72 hours of becoming aware of the breach
• Informing you without delay if the breach is likely to affect you
• Communicating the protective measures you should implement

13. RIGHT TO LODGE A COMPLAINT

If you believe that Cloud Solutions is not fulfilling its data protection obligations, you have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL):

CNIL – Complaints Department
3 Place de Fontenoy – TSA 80715
75334 PARIS CEDEX 07
Phone: 01 53 73 22 22
Website: www.cnil.fr

14. POLICY UPDATES

Cloud Solutions reserves the right to modify this Privacy Policy at any time, particularly to comply with legal, regulatory, judicial, or technical developments.

In the event of a material change, you will be notified by any appropriate means (notification on the Site, email).

The version currently in effect is the one accessible on the Site on the day of your visit. We recommend that you check this page regularly.

Last updated: 06/30/2026

15. CONTACT

For any questions regarding this Privacy Policy or the processing of your personal data, you can contact us:

Email: contact@wimi-teamwork.com
Phone: +33 (0)1 76 44 01 97

Data Protection Officer:
Email: dpo-wimi@racine.eu
Phone: +33 1 44 82 43 00

Cloud Solutions is committed to handling your data with the utmost care and in compliance with applicable regulations.