We use cookies to understand how you interact with our site. By accepting, you consent to our use of these cookies.

Privacy Policy

This privacy policy ('Policy') describes how personally identifiable information ('Personal Information') that you may provide on the website cosmic-data.io ('Website' or 'Service') and any of its related products and services (collectively, 'Services') is collected, protected, and used. It also describes your choices regarding the use of your personal information and how you can access and update that information. This policy constitutes a legally binding agreement between you ('User', 'you', or 'your') and Cosmic Data ('Cosmic Data', 'we', 'our', or 'us'). By accessing and using the website and the services, you acknowledge that you have read, understood, and agree to be bound by the terms of this policy.

This policy does not apply to the practices of companies that we do not own or control, or to people that we do not employ or manage.

This Policy aims to inform you of the conditions under which your personal data is processed in connection with the Service. This version of the Policy reflects the latest developments in law and fact, known as of its effective date. Cosmic Data, headquartered at 230 Routes des Dolines, 06560 Valbonne, as the data controller, is committed to protecting your privacy and personal data in accordance with applicable legal requirements, notably Regulation No. 2016/679 of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and the free movement of such data (hereinafter 'General Data Protection Regulation' or 'GDPR') and Law No. 78-17 of January 6, 1978, as amended, relating to information technology, files, and freedoms (hereinafter 'Data Protection and Freedom Law'), (together the 'Applicable Regulations').

Automatic Information Collection

The Website may use cookies based on the preferences you expressed when you first logged onto the Website or at any time thereafter.

When you open the website, our servers automatically record the information sent by your browser. This data may include information such as your device's IP address, the type and version of your browser, the type and version of your operating system, your language preferences, or the web page you were visiting before accessing the website and services, the pages of the website and services that you visit, the time spent on those pages, the information you search for on the website, the times and dates of access, as well as other statistics.

The information collected automatically is used only to identify potential abuse cases and to establish statistical information regarding the use and traffic of the website and services. This statistical information is not aggregated in a way that allows the identification of a specific user of the system.

Collection of Personal Information

You can access and use the website and services without telling us who you are or revealing information that would allow you to be identified as a specific individual. However, if you wish to use certain features of the website, you may be asked to provide certain personal information (for example, your name and email address). We receive and store all information that you knowingly provide to us when you create an account, post content, make a purchase, or fill out an online form on the website.

When necessary, this information may include the following:

Personal data such as first name, last name, email address, company, job title, comments, country of residence.
Geolocation data such as latitude and longitude.

Some of the information we collect comes directly from you through the website and services. However, we may also collect personal information about you from other sources such as public databases, social media platforms, third-party data providers, and our joint marketing partners.

We use and transfer to any other application the information received from Google API to which we will adhere. Google API Services User Data Policy, including limited use requirements.

Purposes of Personal Data Collection

The processing of personal data carried out as part of the Service aims to provide you with a Website and to produce audience and usage statistics of the Service.

The information collected by Cosmic Data, including personal data, is used for the following purposes:

Manage the User account creation process and manage that space;
Conclude the contract and provide the Services offered to the User;
Manage the commercial prospecting messages from Cosmic Data;
Manage the Website and its operational functions (including logistics), resolve any technical issues, improve and develop new features based on usage and/or feedback and requests from Users;
Respond to User requests and communicate with them, including through the 'Contact Us' form;
Manage our Site using a chatbot;
Enforce applicable laws, regulations, and terms of service.

Cosmic Data may also use the User's personal data to send commercial prospecting messages (including sending information related to the Service and marketing activities). The User can explicitly and freely consent or not to the collection and processing of their personal data for marketing purposes through a checkbox.

Legal Bases for Processing

The processing carried out in connection with the provision of the Service offered on the Cosmic Data Site is::

Necessary for the performance of the contract binding the User to Cosmic Data or for the execution of pre-contractual measures: this includes processing aimed at managing the User account creation process; the provision of the Service.
Based on the User's consent: for the deposit and reading of non-essential cookies, the settings of which can be adjusted via the dedicated banner for this purpose;
Based on Cosmic Data's legitimate interest: this includes processing aimed at managing the Site and its operational functionalities (including logistics), resolving any technical issues, improving and developing new features based on usage and/or feedback and requests from Users, conducting statistics, and finally sending commercial prospecting. Indeed, these processes contribute to improving the Service by Cosmic Data and thus benefit both the User and Cosmic Data without infringing on the interests, rights, and fundamental freedoms of Users.
Necessary for compliance with a legal obligation: this includes processing aimed at managing billing and accounting.

Billing and Payments

We engage third-party payment service providers to help us process your payment information securely. The use of your personal information by these third parties is governed by their respective privacy policies, which may or may not contain privacy protections as effective as this policy. We recommend that you review their respective privacy policies.

Information Management

You can delete certain personal information we hold about you. The personal information you can delete may change as the website and services evolve. However, when you delete personal information, we may retain a copy of the non-revised personal information in our records for as long as necessary to fulfill our obligations to our affiliates and partners and for the purposes described below. If you wish to delete your personal information or permanently delete your account, you can do so by contacting us.

Disclosure of Information, Recipients of Personal Data

Cosmic Data is committed to retaining all personal data collected and sharing it only under certain circumstances mentioned above and in accordance with the provisions of the Applicable Regulations.

The communication of Users' personal data to Cosmic Data staff:

Some of the Users' personal data is accessible to authorized personnel of Cosmic Data if those individuals need access to fulfill the purposes mentioned, that is, to appropriately provide Users with the Service. The authorized internal services of Cosmic Data include, in particular, the IT department and the marketing/sales department.

The communication of Users' personal data to third-party service providers:

Cosmic Data may grant access to Users' personal data to third-party service providers acting as subcontractors to perform services related to the Site. These providers act only on the instructions of Cosmic Data and will have access to Users' personal data only to carry out these services and will be subject to the same security and confidentiality obligations as Cosmic Data.

Depending on the services requested or if necessary to carry out a transaction or provide a service you have requested, we may share your information, with your consent, with trusted third parties that work with us, other affiliated companies, and subsidiaries that we engage to help operate the website and the services offered to you. We do not share personal information with non-affiliated third parties. These service providers are not permitted to use or disclose your information except as necessary to provide services on our behalf or to comply with legal requirements. We can only share your personal information for these purposes with third parties whose privacy policies are compatible with ours or who agree to comply with our personal information policies. These third parties receive the personal information they need only to perform their designated functions, and we do not allow them to use or disclose personal information for their own marketing purposes or other purposes.

In the event of a business transition, such as a merger or acquisition by another company, or the sale of all or part of its assets, your user account and personal information will likely be part of the transferred assets.

Retention of Personal Data

The personal data collected by Cosmic Data is stored on the servers of a provider located in France. Cosmic Data requires this provider to take, in accordance with the Applicable Regulations, all organizational and technical measures to ensure an adequate level of protection for Users' personal data.

Cosmic Data retains personal data for different periods depending on the case:

- If you are not a customer of Cosmic Data: for 3 years from your last contact with Cosmic Data;

- If you are a customer of Cosmic Data and are a User: for the entire duration of the contractual relationship. The data necessary to fulfill its contractual or legal obligations, particularly accounting, will be retained and only deleted at the end of the applicable statutory limitation period.

- For data related to contact forms: the time necessary to process the request and then for 3 years in intermediate archiving.

Transfer of Information

Depending on your location, data transfers may involve the transfer and storage of your information in a country other than your own. You have the right to know the legal basis for the transfer of information to a country outside the European Union or to any international organization governed by public international law or established by two or more countries, such as the UN, as well as the security measures we have taken to protect your information. If such a transfer occurs, you can learn more by reviewing the relevant sections of this policy or by inquiring with us using the contact information provided in the contact section.

The Right to Object to Processing

When personal information is processed for reasons of public interest, in the exercise of an official authority vested in us, or for the legitimate interests we pursue, you may object to this processing by providing a reason related to your particular situation to justify the objection. However, please note that if your personal information is processed for direct marketing purposes, you may object to this processing at any time without having to provide justification. To find out whether we process personal information for direct marketing purposes, you can refer to the relevant sections of this document.

Data Protection Rights under the GDPR: As a User, what are your rights?

If you reside in the European Economic Area (EEA), you have certain data protection rights, and Cosmic Data strives to take reasonable steps to allow you to correct, modify, delete, or limit the use of your personal information. If you wish to be informed about the personal information we hold about you and wish for it to be deleted from our systems, please contact us. In certain circumstances, you have the following data protection rights:

- You have the right to request access to your personal information that we store and to have the opportunity to access your personal information.

- You have the right to request that we correct any personal information you believe is inaccurate. You also have the right to request that we complete any personal information you believe is incomplete.

- You have the right to request the deletion of your personal information under certain conditions outlined in this policy.

- You have the right to object to the processing of your personal information.

- You have the right to request restrictions on the processing of your personal information. When you limit the processing of your personal information, we may store it but will no longer process it.

- You also have the right to withdraw your consent at any time when Cosmic Data has relied on your consent to process your personal data.

You have the right to lodge a complaint with a data protection authority regarding the collection and use of your personal information. For more information, please contact your local data protection authority in the European Economic Area (EEA). In France, this is the CNIL. : the supervisory authority.

How to exercise these rights?

Any request to exercise your rights can be addressed to Cosmic Data using the contact details provided in this document. Please note that we may ask you to verify your identity before responding to such requests. Your request must contain sufficient information for us to verify that you are indeed the person you claim to be or that you are the authorized representative of that person. You must provide enough details for us to correctly understand the request and respond to it. We cannot respond to your request or provide personal information without first verifying your identity or your authorization to make such a request and confirming that the personal information concerns you.

Do Not Track Signals

Some browsers include a 'Do Not Track' feature that signals to the websites you visit that you do not want your online activity to be tracked. Tracking is not the same as using or collecting information related to a website. For these purposes, tracking refers to the collection of personally identifiable information from consumers who use or visit a website or online service as they move across different websites over time. The website and services do not track their visitors over time and across third-party websites. However, some third-party sites may keep track of your browsing activities when they serve you content, allowing them to tailor what they present to you.

Advertising

We may allow certain third-party companies to assist us in tailoring advertisements that we believe may be of interest to users and to collect and use other data regarding users' activities on the website. These companies may serve ads that may place cookies and track user behavior.

Links to Other Resources

The website and services contain links to other resources that are not owned or controlled by us. Please be aware that we are not responsible for the privacy practices of these other resources or third parties. We encourage you to be cautious when you leave the website and services and to read the privacy statements of each resource that may collect personal information, as well as the terms of use (TOU) for information regarding their personal data protection procedures in case no protection policy is in place or if it is attached to the TOU/Terms of Service.

Information Security

We secure the information you provide on computer servers in a controlled and secure environment, protected from unauthorized access, use, or disclosure. We maintain reasonable administrative, technical, and physical security measures to prevent unauthorized access, use, alteration, and disclosure of personal information that we control and store. However, no data transmission over the Internet or a wireless network can be guaranteed.

Therefore, while we strive to protect your personal information, you acknowledge that (i) the security and privacy of the Internet are limited and beyond our control; (ii) the security, integrity, and confidentiality of all information and data exchanged between you and the website and services cannot be guaranteed; and (iii) such information and data may be accessed or tampered with in transit by a third party, despite our efforts.

Data Breach

If we learn that the security of the website and services has been compromised or that users' personal information has been disclosed to unrelated third parties as a result of external activities, including but not limited to security attacks or fraud, we reserve the right to take reasonably appropriate actions, including but not limited to investigation and reporting, as well as notification to law enforcement authorities and cooperation with them. In the event of a data breach, we will make reasonable efforts to notify the affected individuals if we believe there is a reasonable risk of harm to the user as a result of the breach or if notification is otherwise required by law. If applicable, we will post a notice on the website.

Changes and Modifications

We reserve the right to modify this Policy or its terms regarding the Website and Services from time to time at our discretion and will inform you of any significant changes in how we handle Personal Information. When we do, we will revise the updated date at the bottom of this page. We may also provide notice by other means at our discretion, such as using the contact information you have provided. Any updated version of this policy will take effect immediately upon posting the revised policy unless otherwise specified. Your continued use of the Website and Services after the effective date of the revised Policy (or any other law specified at that time) will constitute your consent to these changes. However, without your consent, we will not use your personal information in a materially different manner from what was stated at the time of collecting your personal information.

Acceptance of This Policy

You acknowledge that you have read this Policy and accept all of its terms. By accessing and using the Website and Services, you agree to be bound by this Policy. If you do not agree to comply with the terms of this Policy, you are not authorized to access or use the Website and Services.

If you wish to contact us to learn more about this Policy or for any questions regarding individual rights and your personal information, you can contact us by:

Email to hello@cosmic-data.io
Adresse postale : 230 route des Dolines, 06560 Valbonne – France.

The last update to this document was on March 7, 2024.