Confidentiality policy

1. INTRODUCTION

This Privacy Policy aims to inform you about how Cloud Solutions collects, uses, and protects your personal data when you visit or use the showcase website www.wimi-teamwork.com (hereinafter, the "Site").

Cloud Solutions is committed to respecting your privacy and personal data, in accordance with the General Data Protection Regulation (GDPR) 2016/679 of April 27, 2016, and the amended Data Protection Act of January 6, 1978.

This policy applies exclusively to the showcase website www.wimi-teamwork.com. The use of the Wimi application (the SaaS service) is governed by separate terms and conditions and a privacy policy, accessible from your user account.

2. DATA CONTROLLER

The data controller for personal data collected on the Site is:

Cloud Solutions
Simplified Joint Stock Company
Registered office: 23 rue d'Anjou, 75008 Paris
RCS Paris 528 893 522
Phone: +33 (0)1 76 44 01 97
Email: contact@wimi-teamwork.com

3. DATA PROTECTION OFFICER (DPO)

Cloud Solutions has appointed a Data Protection Officer whom you can contact for any questions regarding the processing of your personal data:

Eric Barbry
Racine Avocats Law Firm
Email: dpo-wimi@racine.eu
Phone: 01 44 82 43 00
Postal address: 112 Rue Réaumur, 75002 Paris, France

4. DATA COLLECTED ON THE SHOWCASE WEBSITE

4.1. Directly collected data

When you use the Site, Cloud Solutions may collect the following personal data:

Via contact forms:

• First and last name
• Email address
• Phone number
• Company name
• Position / Job title
• Country
• Message or request submitted

Via download forms (white papers, guides, case studies):

• Full name
• Email address
• Company name
• Job title
• Phone number
• Country

Via the chatbot (Intercom):

• Full name (if provided)
• Email address (if provided)
• Conversation content
• Conversation history

Via the conversational assistant Jenna (AI sales agent):

• Full name (if provided)
• Email address (if provided)
• Phone number (if provided)
• Conversation content
• Page viewed and date of exchange

Required fields are marked with an asterisk (*). Without this mandatory information, we will not be able to process your request.

4.2. Automatically collected data

When you browse the Site, technical data is automatically collected:

Connection and browsing data:

• IP Address
• Browser type and version
• Operating system
• Pages viewed and visit duration
• Connection date and time
• Referrer (originating website)
• Browser language

This data is collected via cookies and similar technologies, managed by Flowappz, as well as through the following tools:

• Google Tag Manager (tracking tag management)
• Meta Pixel (measurement and optimization of Facebook/Instagram campaigns)
• Bing Pixel (measurement and optimization of Microsoft Advertising campaigns)

For more information on cookies, please consult our Cookie Policy available on the Site.

4.3. Data from External Sources

Cloud Solutions may also collect your personal data through:

• B2B Sales Prospecting (participation in professional events, trade shows)
• Purchase of Databases from specialized providers complying with current regulations

5. PURPOSES OF PROCESSING

Your personal data is collected and processed for the following purposes:

Managing interactions with the conversational assistant Jenna: answering visitor questions, qualifying commercial inquiries, and ensuring follow-up.

6. LEGAL BASIS FOR PROCESSING

In accordance with the GDPR, Cloud Solutions relies on the following legal bases:

• Consent : when you explicitly agree to the processing (e.g., advertising cookies, content downloads)
• Legitimate Interest : when Cloud Solutions has a legitimate interest in processing your data (e.g., B2B prospecting, Site security, service improvement)
• Performance of Pre-contractual Measures : when processing is necessary before entering into a contract (e.g., quote request, demo request)
• Legal Obligation : when Cloud Solutions is subject to a legal obligation (e.g., log retention, fraud prevention)

7. RECIPIENTS OF THE DATA

Your personal data is accessible, within the limits of their responsibilities and for the aforementioned purposes, to the following categories of recipients:

7.1. Internal Recipients

• Authorized personnel from marketing and sales departments
• Authorized personnel from customer relations and support departments
• Authorized personnel from administrative and IT departments
• Authorized personnel from control departments (statutory auditor, internal audit)

7.2. External Recipients

Technical subcontractors:

• Webflow, Inc. (website hosting)
• HubSpot, Inc. (customer relationship management, forms)
• Intercom, Inc. (chatbot and customer support)
• Google LLC (Google Tag Manager, audience measurement)
• Meta Platforms, Inc. (Meta Pixel, targeted advertising)
• Microsoft Corporation (Bing Pixel, targeted advertising)
• Flowappz (cookie consent management)
• Frame UX (Croissant agency) – publisher of the conversational assistant Jenna
• Supabase, Inc. – hosting of Jenna's conversation database (European Union, Ireland)
• Anthropic PBC – processing of messages exchanged with Jenna by the artificial intelligence model

Business Partners:

• Cloud Solutions partners and resellers, for the purpose of sales lead management

Competent Authorities:

• Upon request or as part of legal obligations: judicial, administrative, tax authorities

All Cloud Solutions subcontractors are contractually bound to comply with GDPR requirements and to ensure the security and confidentiality of your data.

8. TRANSFERS OUTSIDE THE EUROPEAN UNION

Some of our subcontractors are located outside the European Union, notably in the United States:

• Webflow, Inc. (United States) – Hosting of the Wimi "showcase" commercial website
• HubSpot, Inc. (United States) – CRM and forms
• Intercom, Inc. (United States) – Chatbot
• Google LLC (United States) – Analytics and Tag Manager
• Meta Platforms, Inc. (United States) – Advertising
• Microsoft Corporation (United States) – Advertising
• Anthropic PBC (United States) – processing of messages exchanged with the Jenna assistant by the AI model

Note: The Jenna conversation database is hosted by Supabase within the European Union (Ireland). Only processing by the AI model involves a transfer outside the EU, governed by the European Commission's standard contractual clauses, without your data being reused for model training.

These transfers are governed by the following mechanisms, in accordance with the GDPR:

• Standard contractual clauses adopted by the European Commission
• Adequacy decisions for countries recognized as providing an adequate level of protection
• Other appropriate safeguards (Binding Corporate Rules, certifications)

For more information on the safeguards implemented, you can contact our Data Protection Officer.

9. RETENTION PERIOD

Cloud Solutions retains your personal data for a limited period proportionate to the purposes for which it is processed:

Upon expiry of these periods, your data is either deleted or irreversibly anonymized for statistical purposes.

Conversations with the Jenna assistant: 12 months, after which they are deleted or anonymized.

10. YOUR RIGHTS

In accordance with the GDPR and the French Data Protection Act, you have the following rights regarding your personal data:

10.1. Right of Access

You have the right to obtain confirmation as to whether or not data concerning you is being processed, and to access that data.

10.2. Right to Rectification

You have the right to obtain the rectification of inaccurate or incomplete data concerning you.

10.3. Right to Erasure ("Right to be Forgotten")

You may request the erasure of your data in the following cases:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw your consent and there is no other legal basis for the processing
• You object to the processing and there is no overriding legitimate ground
• The data has been unlawfully processed

10.4. Right to Restriction of Processing

You may request the restriction of the processing of your data in certain circumstances, particularly if you contest the accuracy of the data or object to the processing.

10.5. Right to Data Portability

You have the right to receive the data you have provided to us in a structured, commonly used, and machine-readable format, and to transmit it to another data controller.

10.6. Right to Object

You may object at any time, on grounds relating to your particular situation, to the processing of your data based on legitimate interest.

You also have an absolute right to object to the processing of your data for direct marketing purposes, including profiling related to such marketing.

10.7. Right to Withdraw Your Consent

When processing is based on your consent, you may withdraw it at any time. This withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

10.8. Right to define post-mortem directives

You have the right to define directives regarding the retention, erasure, and communication of your data after your death.

10.9. Exercising Your Rights

To exercise your rights, you can send your request:

By email:
dpo-wimi@racine.eu

By postal mail:
Cloud Solutions
For the attention of the Data Protection Officer
112 Rue Réaumur
75002 Paris
France

Your request must be accompanied by a copy of a valid proof of identity. Cloud Solutions commits to responding to your request within one month of its receipt. This period may be extended by two months if the complexity of the request justifies it.

11. COOKIES AND SIMILAR TECHNOLOGIES

The Site uses cookies and similar technologies to improve your browsing experience, measure audience, and deliver targeted advertisements.

During your first visit, an information banner allows you to set your cookie preferences. You can change your choices at any time via the cookie manager accessible on the Site.

For more information on the cookies used, their purpose, and how to configure them, please consult our Cookie Policy.

12. DATA SECURITY

Cloud Solutions implements all appropriate technical and organizational measures to ensure the security and confidentiality of your personal data, including:

• Data encryption during transmission (HTTPS/SSL protocol)
• Authorization management and data access control
• Secure authentication of users
• Regular backup of data
• Monitoring and detection of security incidents
• Training and awareness of teams on good security practices

Despite these measures, no electronic transmission or storage method is entirely secure. Cloud Solutions therefore cannot guarantee the absolute security of your data.

12.1. Data Breach

In the event of a personal data breach likely to result in a high risk to your rights and freedoms, Cloud Solutions undertakes to:

• Notify the CNIL within 72 hours of discovering the breach
• Inform you without delay if the breach is likely to affect you
• Communicate the protective measures to be implemented to you

13. RIGHT TO LODGE A COMPLAINT

If you believe that Cloud Solutions does not comply with its data protection obligations, you have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL):

CNIL – Complaints Department
3 Place de Fontenoy – TSA 80715
75334 PARIS CEDEX 07
Phone: 01 53 73 22 22
Website: www.cnil.fr

14. POLICY AMENDMENT

Cloud Solutions reserves the right to amend this Privacy Policy at any time, particularly to adapt to legal, regulatory, case law, or technical developments.

In the event of a substantial amendment, you will be informed by any appropriate means (notification on the Website, email).

The version in effect is the one available on the Website on the day of your visit. We recommend checking this page regularly.

Last updated: 30/06/2026

15. CONTACT

For any questions regarding this Privacy Policy or the processing of your personal data, you may contact us:

Email: contact@wimi-teamwork.com
Phone: +33 (0)1 76 44 01 97

Data Protection Officer:
Email: dpo-wimi@racine.eu
Phone: 01 44 82 43 00

Cloud Solutions is committed to handling your data with the utmost care and in compliance with current regulations.