Infovista Privacy and Personal Data Protection Policy

1. INTRODUCTION
Infovista SAS with registered office in 3 rue Christophe Colomb, 91300 Massy, France, and which can be contacted at the email address privacy@Infovista.com) (“Infovista” or “Data Controller”), in its capacity of data controller, wishes to inform the users of its Website www.Infovista.com (the “Website”) that the personal data relating to them are processed by Infovista in compliance with the current regulations concerning the processing of Data and, specifically, with UE Regulation n. 2016/679 (hereinafter “GDPR”).

In particular, this privacy information notice on the processing of personal data (hereinafter, “Privacy Notice”) describes the purposes and means of the processing of the personal data that are collected through our Website and that relate to the users who navigate and consult such Website (hereinafter, users, prospects, applicants and other individuals whose personal data are processed under this Privacy Notice are hereinafter collectively referred to as the “Users” or the “Data Subjects”) pursuant to articles 13 and 14 of the GDPR.

2. WHAT AND WHO THIS PRIVACY NOTICE COVERS?
Infovista is the data controller of the personal data collected from the User through the Website and the services provided through the Website, that is processed in compliance with the terms of this Privacy Notice and the relevant provisions of law. Accordingly, this Privacy Notice applies to all Users.

This Privacy Notice covers personal data collected from:

Users browsing and interacting with the Website;
Individuals requesting information, assistance, a demonstration or a test;
Individuals receiving or subscribing to communications on Infovista, its solutions, products, services and events;
Business contacts and prospects whose professional contact details are collected directly or indirectly by Infovista in the context of its B2B activities;
And candidates submitting either a spontaneous application or applying for a job offer or internship opportunity through the Website or Infovista’s careers pages.

3. WHAT KIND OF DATA DOES INFOVISTA COLLECTS ABOUT THE USER?
Infovista processes the following types of personal data relating to the Users:

personal details, including name and surname, and the role held in the company/entity to which the Data Subject belongs;
the contact details, including the address, telephone number and e-mail address;
navigation data relating to the IP address, identification codes of the devices used by the User for the use of the pages or services, data relating to the characteristics of the browser and the access timing;
Data relating to the User’s interactions with Infovista communications and content, such as registrations, downloads, attendance, openings, clicks and other engagement information, where applicable and permitted by law.

Personal Data may include the following, as applicable.
For the purposes of (i) receiving email communications on Infovista, its solutions, products, services and events, and (ii) of being contacted for surveys, for the pre-booking of Infovista events and for sales prospections and/or solicitations, the information collected is:

Name, first name, last name*
Work e-mail address*
Work phone number*
Company*
Job Title*

It is also specified that Your Personal Data may be collected indirectly by Infovista’s data vendors or other business partners / event organizers / publicly available professional sources which have rightfully transferred such data to Infovista (“Data Vendors”). Personal Data collected indirectly may include Your:

Name, first name
Work e-mail address
Work phone number
Company
Job Title
Country
IP address
Web-browsing statistics
And information regarding professional interests or engagement with business content.
These Personal Data originate from BrightTALK, Clara, Discover.org, ELEVATE, Hoovers, Informa, International Data Group, Lightreading, Networld Media Group, Rainking, SDxCentral, TechTarget, TMCnet are collected for the purposes set forth hereinafter.

For the purposes of being contacted by Infovista or requesting a demonstration or test, the information collected is:

Name,* first name
Company*
Work e-mail address*
Work phone number*
Job Title*
Country*
Subject*
Message*

For the purposes of submitting either a spontaneous job application or applying for a job offer or an internship opportunity featured on the website of Infovista, the information collected to create a candidate page is:

E-mail address* and password* (to access the candidate page)
Résumé* and cover letter
Choice of country(ies) by the applicant*
Name*, first name,* (where required for the relevant recruitment process and permitted by applicable law).
Address,* postal code,* town/city,* phone number*
Position sought*, contract type sought,* location (country)*
Level of education,* name of educational establishment/institution*
Language 1, language 2
Main experience and length of such experience
Level of experience in the position sought*
Box to be ticked “if you wish to be identified as a person with a disability”
Source of information prompting your application*

Applicants are requested not to include in free text fields or upload documents any personal data that is not necessary for the assessment of their application, including special categories of personal data, unless specifically requested or required by law.

4. WHAT ARE THE PURPOSES OF THE PROCESSING?
Infovista processes the Data of the User for the following purposes:

a) the provision of the services offered through the Website, including the reply to the User's request of information or assistance and the management of requests for documentation, demonstrations, tests, events or other business interactions;

b) submitting either a spontaneous job application or applying for a job offer or an internship opportunity featured on the Website of Infovista;

c) the development and improvement of the services offered through the Website and the Website’s security, administration and performance;

d) the compliance with the applicable national/EU laws and/or respond to request from public and government authorities;

(the purposes from letters a) to d) are jointly referred to as "Service and Operational Purposes")

e) exercising or defending legal claims in court proceedings or in an administrative or out-of-court procedure;

f) complete a potential merger, sale of assets or transfer of all or a material part of its business, by disclosing and transferring the User's Data to the third party or parties involved in the transaction as part of the transaction;

g) for B2B business development, sales prospecting and related follow-up communications concerning Infovista’s products, services, events and content, where permitted by applicable law;

(the purpose as per letters f) and g) above are jointly referred to as "Legitimate Interest Purposes")

h) with the User prior consent, the delivery of direct marketing communications concerning products and services of Infovista (e.g., sending of advertising materials, market research). The communications, may be sent by both automated (e.g., SMS, MMS, fax, calling systems, email and web applications) where permitted by applicable law, and traditional (e.g., calls by human operators) means of contact;

i) with the User’s prior consent, the delivery of marketing communications customized to the User interests and needs by means of the channels of communication set out under letter h) above;

(the purposes of letter h) and i) is referred to as "Marketing Purposes").

5. ON WHAT LEGAL BASIS DOES INFOVISTA PROCESS THE USER'S DATA?

The processing of Data for the purposes set out in Section 4 letters a), b), c) and d) is carried out, depending on the circumstances, on the basis of Article 6(1)(b) GDPR, where such processing is necessary to take steps at the request of the User prior to entering into a contract, Article 6(1)(c) GDPR, where such processing is necessary for compliance with a legal obligation, and/or Article 6(1)(f) GDPR, for the pursuit of Infovista’s legitimate interests, including handling requests, administering and securing the Website, and managing recruitment processes.

The processing of the User's Data with regard to the Legitimate Interest Purposes as per Section 4 letter f) and g) is carried out pursuant to article 6(1)(f) of the GDPR, for the pursuit of Infovista’s legitimate interest. Such processing is not mandatory and the User can object to the data processing at any time through the modalities as per Section 10 of this Privacy Policy. In such case no data processing will be carried out by Infovista, except in case where Infovista demonstrates the existence of legitimate grounds for the processing, which override the interests, rights and freedoms of the User, or unless the processing is necessary for the establishment, exercise or defence of legal claims, in accordance with Article 21 of the GDPR.

Where Infovista carries out B2B sales prospecting towards professionals using their professional contact details, such processing may be based on Infovista’s legitimate interests, subject to applicable rules, including the right of the User to object at any time to such direct marketing.

Finally, the data processing with regard to the Marketing Purposes is based on the User's prior consent. Such data processing is not mandatory however should the User refuse to provide the relevant consent the User will not receive marketing communications as per Section 4 letters h) and i) above. In any case, the User can withdraw its consents at any time through the modalities as per Section 10 of this Privacy Policy.

6. HOW DOES INFOVISTA PROCESS THE USER'S DATA?

User's Data will be processed both electronically and/or manually, in any case in such a way as to guarantee the security, protection and confidentiality of the data, thanks to appropriate administrative, technical, personnel and physical measures against loss, theft and unauthorized use, disclosure or modification.

7. WHO CAN HAVE ACCESS TO THE USER'S DATA?

Data will not be disclosed in any way, while they may be communicated to the following subjects located both inside and outside the European Union:

a) the personnel belonging to Infovista as well as other persons in charge of their processing which are duly appointed within the companies of the Infovista Group;

b) external subjects, appropriately appointed as external data processors, including providers of ancillary and support services to those carried out by Infovista, within the limits strictly necessary to carry out the tasks entrusted to them (in particular, software or systems maintenance companies, companies operating in the marketing and communications sector, administrative and tax consultancy consultants, recruitment platform providers, event or webinar providers, hosting providers, CRM providers and analytics or business support providers, as applicable);

c) other companies belonging to the group Infovista is part of and/or subjects transferring a company or business, companies resulting from possible mergers or any other transformation involving Infovista, acting as autonomous data controllers;

d) public bodies whose right to access the Data is provided for by the applicable legislation, acting as independent data controllers.

The complete and updated list of the data processors is available upon request to the Data Controller’s contact details, by sending an e-mail to privacy@Infovista.com.

8. ARE DATA TRANSFERRED ABROAD?

The User Data may be transferred to countries within and outside the European Economic Area. For transfers from the European Union / European Economic Area to countries not considered adequate by the European Commission, Infovista has put in place appropriate and suitable safeguards to protect the Users' Data. Accordingly the Users' Data are transferred in compliance with the requirements and the obligations provided by applicable data protection laws, such as standard contractual clauses adopted by the European Commission as per Articles 45, 46, and where applicable, 49 of the GDPR.

For further information with regard to the appropriate or suitable safeguards and the means by which to obtain a copy of them, the User can contact Infovista with the modalities as per this Privacy Notice.

9. WHICH IS THE RETENTION PERIOD APPLYING TO THE USER'S DATA?

Data will be stored only for the time necessary to achieve the purposes for which they are collected as set out above and, more specifically:

with regards to Contractual Purposes, for the time necessary for the management of the Data Subject's request and thereafter only for the period necessary to comply with applicable legal obligations or to establish, exercise or defend legal claims;
with regards to Legitimate Interest Purposes, for the entire duration of the Data Subject’s request management and thereafter for the period strictly necessary , in the event the Data are necessary to protect and enforce the Data Controller’s rights against the Data Subject and/or third parties in any legal disputes. In the event the processing is aimed at carrying out activities functional to the transfer of a company or business, acquisitions, mergers or other transformations, the retention periods above will apply with respect to the main processing performed;
with regards to Marketing Purposes, for upto 3 years from the last meaningful interaction with the User or prospect(e.g. a request, registration, reply, download, click or attendance), unless the User withdraws consent or objects earlier.
with regard to recruitment data, for the duration of the recruitment process and, in the event of an unsuccessful application, for up to 2 years after the last contact with the candidate, unless a longer retention period is required by law or the candidate requests earlier deletion.
Technical logs and similar Website security data are retained for a limited period proportionate to their purpose.

At the end of the retention periods above, Data will be deleted or anonymized.

10. WHAT ARE THE USER'S RIGHTS WITH REGARD TO DATA?

The User, as data subject, can, at any time, exercise the following rights pursuant to art. 15-22 of the GDPR:

Receiving confirmation if there is any Data processing taking place and, if so, obtaining access to such Data, know the related origin, the purposes of the processing and its methods, as well as the logic applied to the processing carried out by electronic means;
obtaining the update of the Data, and the rectification of incorrect Data without unjustified delay. Considering the purposes of the processing, data subjects have the right to obtain the integration of incomplete Data, even by supplying a supplementary declaration;
obtaining the erasure of Data without unjustified delay;
obtaining the limitation of the processing, provided that the conditions of art. 18 of the GDPR are met;
obtaining the Data portability, meaning receiving in a structured, common use, readable format from automatic device, the Data to him/her referred that had been previously supplied to the Data Controller;
objecting, on grounds relating to his or her particular situation, to the processing of the Data according to art. 6, par. 1, letter e) or f) of the GDPR, unless Infovista demonstrates compelling legitimate grounds for continuing the processing, which override the interests, rights and on freedoms of the Data Subject or for the establishment, exercise or defense of legal claims; and objecting at any time to the processing of personal data for direct marketing purposes, including any related profiling, in which case the personal data will no longer be processed for such purposes;
not being subject to a decision based only on automatized processing, producing legal effects in your regards or similarly significantly affects your person, pursuant to art. 22 of the GDPR;
addressing to the relevant data protection authority to lodge a complaint, shall you consider your Data to have been processed unlawfully.

Requests for the exercise of rights may be made in writing to the Data Controller, who can be contacted at the following e-mail address privacy@Infovista.com.

11. CHANGES AND UPDATES

This Privacy Notice is valid from the date of update indicated below. However, Infovista may subsequently update and/or integrate this Privacy Notice, also as consequence of possible subsequent amendments and/or integrations of the applicable laws.

18-03-2026

Infovista privacy and personal data protection policy