Privacy Policy
Last updated: publication date
1. Who we are
Company name (“Pseudia”, “we”), a company incorporated under Belgian law with registered office at Esplanade Simone Veil 1, 4000 Liège, registered with the Crossroads Bank for Enterprises (BCE) under number 01029.242.353, is the controller for personal data collected via the website www.pseudia.eu and the services described below. Data protection contact: privacy@pseudia.eu.
This policy covers data we process on our own behalf (visitors, prospects, Playground users, job applicants). Data that our clients entrust to the Pseudia platform under a contract is processed on their behalf, as a processor, and is governed by the Data Processing Agreement (DPA) signed with each client.
The Pseudia platform does not store the data it processes: it is pseudonymized in transit, between the source and destination chosen by the client. Only the information necessary for pseudonymization (configuration of rules and transformations) and for identifying data sources is retained, along with, if the client chooses to save them, the access credentials for those sources. The client may also provide these credentials at execution time: in that case they are used only for the requested execution and are not retained afterwards.
2. What data, for what purposes?
| Processing | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Website browsing | IP address, browser type, pages visited (server logs) | Operation and security of the website | Legitimate interest (security and proper functioning of the website) | Logs: 90 days maximum; cookies: see Cookie Policy |
| Demo request / contact | Business email, role, company size, sector, interests, message | Respond to the request, organize the demo, qualify the need | Pre-contractual measures (art. 6.1.b) and legitimate interest (B2B prospecting) | 24 months after last contact |
| Newsletter and marketing communications | Business email, role | Keep you informed about Pseudia, its features and events | Consent (revocable at any time via the unsubscribe link) | Until consent is withdrawn, then 3 years on a suppression list |
| Playground | Account (email, name), usage logs, data entered in the Playground | Provide the free trial, limit abuse, improve the engine | Performance of the terms of use (art. 6.1.b) | Account: 12 months after last login; usage logs: 90 days maximum; entered data: not stored (processed in transit) |
| B2B prospecting (LinkedIn, trade shows) | Name, job title, company, business email | Offer our services to professionals who may be interested | Legitimate interest (art. 6.1.f), with the right to object at any time | 24 months after last contact |
| Recruitment | CV, cover letter, correspondence | Evaluate applications | Pre-contractual measures | 6 months after the end of the process, unless agreed to retain longer |
| Clients (billing, support) | Contact details, contractual data, support history, Pseudia platform usage logs (user, timestamp, operations performed, IP address) | Perform the contract, invoice, provide support, secure the platform and trace operations | Performance of the contract; legal obligation (accounting) | Contract duration + 7 years (accounting obligations); usage logs: 90 days maximum |
We do not process any sensitive data on our own behalf and do not make any automated decisions producing legal effects on you.
3. Playground: specific rule
The Playground, available at https://admin-panel.dev.pseudia.eu, is a demonstration environment. You must not enter real personal data into it (see the Terms of Use). Data entered is used solely to show you the result of pseudonymization; it is processed in transit, is not stored, and is neither analyzed for commercial purposes nor used to train a model.
4. Who has access to your data?
Your data is accessible to Pseudia team members who need it for their duties, and to the following providers, bound by contract and acting on our instructions:
| Provider | Service | Location |
|---|---|---|
| Scaleway SAS | Hosting of the showcase website | France (EU) |
| Scaleway SAS | Hosting of the Playground, the panel and the API | Paris, France (EU) |
| Brevo SAS | CRM: managing demo requests and prospects | France (EU) |
| Brevo SAS | Sending the newsletter and marketing communications | France (EU) |
| [Support tool] | Customer support | [country] |
We do not sell or rent your data. We may disclose it to an authority if required by law.
5. Transfers outside the European Union
All our data is hosted within the European Union. Our hosting providers and tools (Scaleway, Brevo) are French companies, and no transfer outside the EU takes place as part of our processing. If a future provider were to involve a transfer, it would rely on an adequacy decision or on the European Commission's standard contractual clauses, and this policy would be updated beforehand.
6. Your rights
You have the rights of access, rectification, erasure, restriction, portability and objection, as well as the right to withdraw your consent at any time without affecting the lawfulness of processing carried out beforehand. To exercise your rights, write to privacy@pseudia.eu; we respond within one month, extendable by two months for complex requests. We may request proof of identity in case of reasonable doubt.
You may lodge a complaint with the Belgian Data Protection Authority (APD/GBA), rue de la Presse 35, 1000 Brussels, contact@apd-gba.be, www.autoriteprotectiondonnees.be.
7. Security
We apply appropriate technical and organizational measures: encryption in transit (TLS) and at rest, strong authentication for access to our systems, the principle of least privilege, access logging, backups, and strict separation of pseudonymization keys from data. In the event of a data breach likely to result in a high risk to you, we will inform you in accordance with art. 34 of the GDPR.
8. Changes
We may amend this policy to reflect changes in our services or in the law. The update date appears at the top of the document; in the event of a substantial change, we will inform you via a notice on the website or by email if we have your address.
References: GDPR (EU 2016/679), Belgian law of 30 July 2018 on the protection of individuals with regard to the processing of personal data, art. XII.6 CDE.