Privacy Policy

Last updated: November 15, 2024

Thank you for choosing to read our Privacy Policy (hereinafter “Policy” or “Privacy Policy”). This document informs you about the processing of your personal data in connection with the provision of the services offered on GetSparta.AI (hereinafter “Services”). It also informs you of your rights with regard to such processing. You may ask us about this Policy at any time by contacting our Data Protection Officer (DPO) at dpo@getsparta.ai.The terms defined in Article 4 of Regulation (EU) 2016/679 of the European Parliament and of the Council (known as the “GDPR”) have the same meaning when used in the context of this Policy. Terms beginning with a capital letter have the meaning defined in this Privacy Policy.

Policy Updates
We reserve the right to update or modify this Privacy Policy at any time. Any changes we make will be posted on this page, and any substantive updates that may impact your rights or freedoms will be notified by appropriate means such as e-mail or notification in the Services website. You will find a summary of the latest changes at the bottom of this Policy.

Identity of the data controller and DPO
The person responsible for the processing operations described in this Privacy Policy is CODE IS LAW, a simplified joint stock company registered in Paris under the number 897488615, whose registered office is at 122 rue Amelot, 75011 Paris. It may be referred to in this Policy as “CODE IS LAW” or “we”.CODE IS LAW has appointed a Data Protection Officer (DPO) who can be contacted at dpo@getsparta.ai.


Part 1 - DESCRIPTION OF THE DATA PROCESSING CARRIED OUT FOR THE PROVISION OF THE SERVICES

1.1.Your subscription to the waiting list

Purpose and legal basis of the data processing
You can opt to subscribe to a waiting list to be informed when you can access the private repository of SPARTA. We process the associated data with your consent to receive information related to SPARTA by email, that is based on clause 6(1)(a) of the GDPR.

The data we need for this purpose
For this purpose, we need to collect your email address.

Who this data is intended for
The data required to send such information is processed by the people in charge of SPARTA’s communication to send you the requested information.

How long the data is kept‍
We may keep this data until you decide to withdraw your consent to receiving information about the SPARTA development, which you will be able to do with a link provided with all communications sent by us. In any case, should no communication be sent following your addition to the waiting list, your data will be deleted at the latest two years after you enter your e-mail address.

Information about subcontractors and data transfers outside the EEA‍
Your e-mail is transmitted to our subcontractor Sarbacane in accordance with its Personal Data Processing Agreement (DPA). It does not involve any transfer of data outside the European Economic Area (EEA).


1.2. Keep you informed about the SPARTA development

Purpose and legal basis of the data processing‍

When you submit your email address to enter the waiting list, we may contact you to inform you about the development of SPARTA. We carry out this processing on the basis of your consent to stay informed about the SPARTA development, therefore on the basis of Article 6(1)(a) of the GDPR.

The data we need for this purpose
For this purpose, we need to collect your email address.

Who this data is intended for

The data required to send such information is processed by the people in charge of SPARTA’s communication to send you the requested information.

How long the data is kept‍

We may keep this data until you decide to withdraw your consent to receiving information about the SPARTA development, which you will be able to do with a link provided with all communications sent by us. In any case, your data will be deleted at the latest two years after the last communication.

Information about subcontractors and data transfers outside the EEA Messages are sent using the services of our subcontractor Sarbacane in accordance with its Personal Data Processing Agreement (DPA). It does not involve any transfer of data outside the European Economic Area (EEA), other than that which may be technically necessary to deliver the message to your mailbox.


Part 2 - DESCRIPTION OF THE CONDITIONS UNDER WHICH THE DATA IS PROCESSED

2.1. Data security measures

The processing operations described in this Policy are implemented within the framework of technical and organizational security measures designed to ensure confidentiality, for example through the use of transit encryption measures for all communications, encryption of certain data, data minimization and management of data access rights on a “need-to-know” basis. In cases where we need to transfer data outside the EEA, we ensure that we obtain the necessary guarantees to secure the transfer and ensure the same level of protection as within the EU.

2.2. Your rights with regard to the processing described

You have the rights over your data covered by this Policy to request access to such data (Article 15 of the GDPR), to request rectification of such data (Article 16 of the GDPR), to request erasure of such data (Article 17 of the GDPR), to request restriction of processing (Article 18 of the GDPR), the right to portability of your data (Article 20 of the GDPR), and the right to object to processing (Article 21 of the GDPR). Where processing is based on your consent, you also have the right to withdraw that consent at any time. You can exercise these rights by contacting our DPO by email (dpo@getsparta.ai) or by postal mail at 122 rue Amelot, 75011 Paris (France). In the event of reasonable doubt as to the identity of the natural person making the request, we may ask you to provide additional information necessary to confirm the identity of the person concerned, in particular proof of identity. You also have the right to lodge a complaint with a competent supervisory authority, in particular in France with the Commission Nationale de l'Informatique et des Libertés (CNIL), on which CODE IS LAW depends.First publication of this Privacy Policy

Nov. 15, 2024 : Removed Webflow as a subprocessor for the storage of the waitlist e-mail addresses in clause 1.1, replaced by Sarbacane
Sept. 30, 2024 : First publication of this Privacy Policy