Data Privacy Notice

Purpose of Notice

The purpose of this Data Privacy Notice (the "Notice") is to clarify how echoprismai.org ("Echo Prism AI" or "We" or "Us") will handle, as data controller, your personal data provided to Us when you visit the website echoprismai.org (the "Website"), or that We obtain from third parties, to connect you with professionals who may align with your interests.

How is your data collected?

We gather your personal data:

Directly from you, when you submit your Identification Data on our Website; and/or
Indirectly:
- by receiving Identification Data about you from third parties
- through the collection of data related to your navigation of our Website using cookies or similar technologies (refer to our Cookies Policy for details).

Providing your personal data is optional, but not doing so may limit our ability to connect you with professionals that match your interests.

What categories of personal data will be processed?

Echo Prism AI collects and processes the following categories of personal data about you:

Category of personal data	Definition
Identification Data	Includes your full name and contact details (phone number and email address).
Browsing Information	Details such as IP address, access times and dates, pages visited on our web and mobile sites, language preferences, reports on software crashes, browser type, device-related information, and online activities automatically collected, e.g., via cookies, web server logs, pixels, and web beacons.

What are the purposes and legal basis of our processing?

Echo Prism AI processes your personal data for the following purposes:

Purpose	Legal basis	Categories of personal data processed
Connecting you with professionals offering services that may interest you	Your Consent	Identification Data
Handling requests and adhering to legal requirements from regulators or other authorities, both domestically and internationally.	Compliance with applicable legal and regulatory obligations.	Identification Data Browsing Information
Protecting and enforcing our rights	Our legitimate interest in safeguarding our rights against users (including you), judicial, administrative, and/or law enforcement entities.	Identification Data Browsing Information
Ensuring the functionality and security of our Website	Our legitimate interest in maintaining a secure and efficient Website.	Browsing Information

Your Rights Regarding Data Privacy

Under current data protection laws, you are entitled to a wide range of rights, including:

Right of Access: You can request confirmation from Echo Prism AI on whether your personal data is being processed and, if so, access to that data. This includes information on processing purposes, categories of personal data processed, and potential data recipients.
You're entitled to a copy of the processed data. For additional copies, we may charge a nominal fee based on administrative costs.
Right to Rectification: If your personal data is inaccurate, you have the right to have it corrected. For processing purposes, you also have the right to complete incomplete personal data, including through supplementary statements.
Right to Erasure ("Right to be Forgotten"): You can request that Echo Prism AI erase your personal data under certain conditions.
Right to Restrict Processing: You can ask for the processing of your personal data to be restricted. In such cases, the data will be marked and processed by us only for specific purposes.
Right to Data Portability: You have the right to receive your personal data, which you've provided to Echo Prism AI, in a structured, commonly used, and machine-readable format, and you have the right to transmit those data to another controller without hindrance from us.
Right to Object: You can object to the processing of your personal data based on your specific situation, at any time. Upon objection, we will stop processing your data for the objected purposes, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.
Right to Withdraw Consent: If data processing is based on your consent, you can withdraw this consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Post-Mortem Right to Data: You have the right to set directives regarding the management of your personal data after your death.

Note: The exercise of these rights may be subject to certain conditions and limitations under local data protection law.

To exercise any of these rights, please reach out to us as outlined in the "Contact Us" section below.

You also have the right to file a complaint with the competent French data protection authority, the CNIL.

Data Sharing Practices

Your personal data may be shared as follows:

Within our corporate group;
With our partners, for their processing purposes, provided you have consented to this sharing, to inform you about services/products you may find interesting;
With service providers aiding our operations (e.g., storage, hosting, analytics, technical support);
With our legal advisors, for compliance with our statutory obligations, including accounting, auditing, and internal controls;
In the context of a business sale, asset transfer to a third party, or during company restructuring or reorganization;
Where mandated or allowed by law, to government bodies, courts, external advisors, and similar third parties.

Cross-Border Data Transfers

Personal data collected by Echo Prism AI may be transferred outside the European Economic Area (EEA). Transfers to countries recognized by the European Commission as providing adequate protection (e.g., Israel) are deemed to ensure an adequate level of data protection. For transfers to countries not recognized as providing adequate protection, we ensure data protection through standard contractual clauses or other approved mechanisms, guaranteeing adequate safeguards.

Data Retention Policies

We retain your personal data only as long as necessary for the purposes outlined in this Notice, in compliance with applicable laws. Upon no longer requiring your personal data, it will be deleted or anonymized.

Contact Us

If you have any inquiries about this Notice, please reach out to us at [email protected].

Updates to This Notice

This Privacy Notice may undergo periodic revisions. We will inform you of any substantial modifications as mandated by law.

Last revised: 01.11.2023