Privacy policy

Public requests (training, project, collective, profile): identity and contact details you enter, message, business details. Purpose: to qualify and handle your solicitation. Basis: pre-contractual steps or legitimate interest in replying, as the case may be. Without this information, the request cannot proceed.

Contact form: the same categories, for a question (information, partnership). This is not a training or project request; the team reads the message. Basis: legitimate interest in replying, or pre-contractual steps.

Enrolment on a programme from a catalogue page: enrolment data sent as a training request, possibly linked to an identified programme.

Unlock-space account: authentication (HttpOnly session cookie), profile, authorisations. Reserved for people already invited or created by an organisation. Basis: performance of the contract or pre-contractual steps, and a legal obligation where applicable (professional training, invoicing).

EVA (site and app): the text you send her, to reply to you. On the phone, speech may be turned into text by the system speech-recognition service (Apple or Google); only the text is then sent to Unlock. A reply may be read aloud by a text-to-speech provider. EVA relies on an assistance model: a reply is not a quote, a contract, or legal advice. Do not put unnecessary sensitive data in the conversation.

Eva app: sign-in by email or pairing QR (session kept on the device). No sign-up in the app. Camera only to scan the QR; microphone only to speak to EVA, when you ask.

Technical log: traces needed for security and diagnosis (sign-in, errors). The exact duration is not published on this page.

Public-site audience measurement: path viewed (no query string, no fragment), page title as displayed, referrer domain, device family, language, country inferred for the duration of the request. No cookie, no persistent identifier in the browser, no cross-site tracking, no IP address stored, no resale, no transfer to a third party. A visitor identifier is hashed on the server with a daily rotation (UTC): two visitors can be told apart on one day; nobody is followed over time. Retention: 395 days, configurable on the server. This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com

Request data are accessible to authorised people responsible for handling them. They are not sold. Public-site audience data are neither resold nor transferred to a third party.

The site host is indicated in the legal notice. Other processors (messaging, electronic signature, and so on) will be published here once they are identified.

Speech recognition on the phone may involve Apple or Google, depending on the device. Text-to-speech may involve a provider. These processing operations exist only to make EVA work.

No transfer outside the European Union is declared on this page. If any exist, they will be described here (tool, country, safeguard).

Precise periods by type of file (unsuccessful request, mission, training documents, invoicing) are not detailed here. In law, they must be limited to what is necessary, then archived or deleted.

The cookie-consent choice is remembered for 365 days in the browser (local storage).

Public-site page views are kept for 395 days (duration configurable on the server), then deleted. The IP address is not stored.

Information not disclosed. for: duration of requests, duration of accounts, duration of training documents, duration of invoices beyond accounting obligations.

You may request access, rectification, erasure, restriction, portability where it applies, and object to processing, under the conditions of the GDPR. Write: Information not disclosed..

Erasing an Unlock-space account is not a self-service action in the Eva app: the account is managed by the organisation. You exercise your rights, including erasure of personal data within the limits of legal training and invoicing duties, by writing to the contact above or through your organisation.

You may lodge a complaint with the CNIL (cnil.fr). Please write to us first, so that we can reply.

For cookies and local storage, see the Cookies page.