Privacy policy

Data controller

PANORA, SAS, 103 247 284 R.C.S. Nanterre, 5 avenue Jean Jaurès, 92120 Montrouge, France, is the controller of the processing described below.

For any question about your data: privacy@panora.co. PANORA has not appointed a data protection officer.

Scope

This policy covers the website www.panora.co and our exchanges with prospects. Data processed when our clients use the Panora product is governed by their contract and its data processing agreement.

Browsing the website

The website sets no cookies and uses no analytics or advertising tools, so no consent banner is needed.

To serve pages, our hosting provider receives technical data (IP address, browser type, requested page). It is used to deliver content and protect the service, based on our legitimate interest. PANORA keeps no access logs.

Videos are embedded in privacy-enhanced mode (youtube-nocookie.com). The player is provided by Google, which receives your IP address when it loads and may collect data when you play a video, as a separate controller (https://policies.google.com/privacy).

Links to LinkedIn or to the booking tool open third-party services that have their own privacy policies.

Demo requests and correspondence

When you book a demo through our scheduling tool (HubSpot), we collect your first and last name, work e-mail address, company, job title, phone number if provided, the chosen time slot and any information you share with us.

When you write to us, we process your e-mail address, the content of your messages and the information they contain.

Purposes: organising and holding the meeting, answering your requests, following up on the business relationship and presenting our services. Legal basis: our legitimate interest in developing our business with professionals, or pre-contractual steps taken at your request.

Retention

Prospect data and business correspondence: three years from your last contact, then deleted.

Requests to exercise your rights: for as long as needed to handle them, then archived for the applicable limitation period, as evidence.

Recipients and processors

Your data is only accessible to the people at PANORA who need it, and is never sold. It is entrusted to the following processors, bound by contract to GDPR obligations:

Amazon Web Services EMEA SARL (Luxembourg): website hosting and delivery.

HubSpot Ireland Limited (Ireland): meeting scheduling and customer relationship management, data hosted in the European Union.

Google Ireland Limited (Ireland): e-mail (Google Workspace).

Transfers outside the European Union

These providers belong to groups based in the United States. Access from that country, for support or security purposes for instance, cannot be ruled out. Such access is covered by the EU–US Data Privacy Framework, to which these companies have self-certified, and by the European Commission’s standard contractual clauses.

Security

We apply appropriate technical and organisational measures: encrypted connections (HTTPS), restricted and authenticated access to our tools, and providers offering sufficient guarantees.

Your rights

You have the right to access, rectify, erase, restrict and port your data, to object to its processing (including to direct marketing, at any time and without giving a reason), and to set instructions for what happens to your data after your death.

To exercise them, write to privacy@panora.co or to PANORA, 5 avenue Jean Jaurès, 92120 Montrouge, France. We answer within one month. We may ask for proof of identity if we have reasonable doubts.

You may lodge a complaint with the CNIL, the French data protection authority (https://www.cnil.fr).

Changes

This policy may change, for instance if we add an analytics tool. The date of the last update is shown at the top of the page.