Data protection policy

Last updated: June 2026

A. Introduction

The privacy of our site visitors is important to us, and we are committed to protecting it. This policy details what we do with the personal information you provide or that we collect when you use the wearetandem.ai site.

By browsing our site and consenting to cookies under the conditions below, you accept the processing of your personal data in accordance with this policy.

Data controller: Tandem Group (SAS), 60 rue François Ier, 75008 Paris, RCS Paris 102 349 081. For any question relating to the processing of your data, use our contact form.

B. Personal information we collect

The following types of personal information may be collected, stored and used:

  • Information about your device, including your IP address, approximate geographic location, browser type and version, and operating system.
  • Information about your visits and use of the site, including referral source, visit duration, pages viewed and navigation paths.
  • Information such as your name, email address and company name that you provide via the contact form.
  • Information you submit when subscribing to our newsletter (name, email address).
  • The content of messages you send us by email or via the contact form, including their metadata.
  • Information related to your professional activity when you book a meeting via our third-party tools (Tally, Calendly).
  • Any other personal information you voluntarily provide.
  • Before disclosing personal information about another person, you must obtain their prior consent.
  • We do not collect any sensitive data under the GDPR (racial origin, political opinions, religious beliefs, health data, etc.).
  • No automated decision producing legal effects is taken from the data collected on the site.

You remain solely responsible for the accuracy and currency of the information you provide.

C. How we use your personal information

Personal information provided through our site is used for the purposes described below. The legal basis for processing is, as applicable, your consent, the performance of pre-contractual measures, or our legitimate interest in growing our business.

  • Administer our site and respond to your contact requests.
  • Personalize our responses and prepare our commercial meetings.
  • Send you the Optimia newsletter if you have subscribed (you can unsubscribe at any time from each email).
  • Send you communications about our services where you have given explicit consent.
  • Issue and keep invoices and accounting documents related to our services.
  • Measure site audience and improve content (anonymized statistics).
  • Prevent fraud and ensure the technical security of the site.
  • Respond to any legal request from a competent authority.
  • Assert our rights in the context of a potential dispute.
  • Any other purpose compatible with the above, subject to prior information.

Without your explicit consent, we will never share your personal information with third parties for direct marketing purposes.

D. Recipients of your information

Your personal data is accessible to authorized persons within Tandem Group, within the limits of their duties, and to our technical subcontractors acting on our behalf.

We may share data with the following categories of recipients:

  • Our hosts and cloud infrastructure providers, selected for their GDPR compliance and security guarantees.
  • Our third-party operational tools, notably Tally for meeting bookings and Substack for the Optimia newsletter.
  • Our legal and accounting advisors, and any public or judicial body in the case of a legal obligation.

We ensure that these subcontractors provide sufficient personal data protection guarantees.

E. International transfers

Some of our technical subcontractors are established outside the European Union, including in the United States (meeting booking tools, newsletter platform).

When a transfer outside the EU is necessary, we rely on the standard contractual clauses adopted by the European Commission, or any other transfer mechanism recognized by the GDPR.

You can request a copy of the guarantees in place via our contact form.

F. Retention of your data

We retain your personal data for the strict duration necessary for the purpose of the processing, then we archive or delete it. Prospect data is retained for 3 years from the last active contact. Customer data is retained for 10 years from the end of the commercial relationship (accounting obligation).

We may retain certain data beyond these periods if required by law or if necessary to defend our rights in court.

G. Security of your data

We implement reasonable technical and organizational measures to protect your data against loss, alteration or unauthorized access: TLS encryption across the entire site, hosting on professional GDPR-compliant infrastructure, access limited to authorized persons.

You acknowledge, however, that the transmission of information over the internet is never entirely secure, and that we cannot guarantee absolute security.

In the event of a data breach likely to create a risk to your rights, we undertake to notify the CNIL within 72 hours and, where applicable, to inform you directly.

H. Your rights

In accordance with the GDPR and the French "Informatique et Libertés" law, you have the following rights over your personal data:

  • Right of access: confirm that your data is processed and obtain a copy.
  • Right of rectification: have inaccurate or incomplete data corrected.
  • Right to erasure (right to be forgotten): request deletion of your data in the cases provided by law.
  • Right to restriction: restrict the use of your data in certain situations.
  • Right to portability: receive your data in a structured and readable format.
  • Right to object: object to processing, in particular for commercial prospecting purposes.

To exercise these rights, use our contact form.

You also have the right to lodge a complaint with the CNIL, the French supervisory authority: cnil.fr.

I. Third-party websites

Our site contains links to third-party sites (LinkedIn, YouTube, Spotify, Substack, Tally). We have no control over these sites and decline all responsibility for their privacy policies or practices.

We invite you to consult the privacy policies of these third-party sites before sharing personal data with them.

J. Changes

We may update this policy. The last modification date is indicated at the top of this page. In the event of substantial changes, we will inform you by email or via a notification visible on the site.

K. Cookies

Our site uses cookies for the following purposes:

  • Strictly necessary cookies: essential for site operation (language preferences, security).
  • Audience measurement cookies: anonymized statistics about site traffic (subject to your consent).

You can configure your browser at any time to block or delete cookies. Blocking all cookies may limit your experience on the site.