Privacy Policy

The data controller is GENERALI 19, a public limited company with a share capital of 69,300 Euros, with its registered office at 89 rue Taitbout - 75009 PARIS, RCS PARIS 880 269 246.

Its legal representative is Mr Emmanuel NÉRÉ, President.

Generali 19 attaches great importance to the protection of personal data and undertakes to comply with the General Data Protection Regulation of 27 April 2016 (GDPR) and the French Data Protection Act of 6 January 1978.

This policy aims to describe how we collect and process personal data in connection with the use of our website www.geoya.fr.

The purpose of this policy is to explain what data is collected on the site, for what purposes, and what your rights are.


1. Personal data processed 

1.1 Data collected automatically (cookies & connection history)

When you browse the site, we collect technical information relating to the browser and device, identifiers and cookies strictly necessary for operation, and connection logs:

  • IP address;

  • Pages visited;

  • Date and time of connection;

  • Technical cookies (enabling the site to function).

Our cookie management policy is available here [Insert the link to the cookie policy]


1.2. Data collected via the contact form

When you use our site's contact form, we collect:

  • First and last name;

  • Email address;

  • Role & Company (optional);

  • Message content.


1.3 Booking an appointment for a demonstration

When you use the demonstration booking tool, we collect

  • First and last name;

  • Email address;

  • Availability and time zone;

  • Purpose of the appointment;

  • Technical metadata necessary for scheduling (calendar tool).


2. Purposes of processing

 Personal data are processed by Generali 19 for the following purposes: 

2.1 Site operation and user relationship management

The processing implemented is intended to:

  • ensure the operation, maintenance, security and integrity of the site;

  • enable the management of requests submitted via contact forms;

  • organise appointments, demonstrations and exchanges necessary to present Geoya solutions via Calendly.


2.2 Performance of services

Processing carried out as part of Geoya's professional services is intended to:

  • analyse  the vulnerability of assets to climate risks;

  • carry out assessments (self-assessment, remote or on-site assessment);

  • collect the elements necessary to carry out these assessments (photographs, technical documents, building data, answers to questionnaires, metadata from videoconferencing tools);

  • prepare and send assessment reports, as well as recommendations and remediation plans;

  • monitor remediation actions where contractually provided.


2.3 Continuous improvement of services and internal processes

Data may be processed to:

  • improve the performance, quality and security of the services and tools offered by the site and Geoya;

  • produce aggregated or anonymised analyses and statistics intended to optimise services.


2.4 Compliance with legal and regulatory obligations

Data are also processed in order to:

  • comply with the legal obligations of the data controller, particularly in accounting, tax, social, information systems security and management of data subjects' rights;

  • ensure compliance with applicable contractual and regulatory obligations.


2.5 Confidentiality of collected data - No prospecting

Generali 19 uses your personal data for specific purposes, as described in this policy.

The information you provide is kept confidential and used only in the context of your relationship with Generali 19 (trading name Geoya) and its affiliates.

Generali 19 does not carry out any unsolicited commercial prospecting and does not process any data for direct marketing purposes without an appropriate legal basis (including prior consent where required).

Generali 19 does not transfer your data to a third party for prospecting or commercial purposes.


3. Legal bases for processing

3.1 Legitimate interests

Generali 19 processes certain data in order to ensure:

  • the operation, maintenance, improvement and security of the site;

  • the prevention of malicious acts;

  • the carrying out of technical analyses and internal statistics necessary to improve the site.

These processing operations are strictly necessary to guarantee the stability, security and quality of the service provided to site visitors and therefore rely on the legitimate interests of the data controller.


3.2 Compliance with legal or regulatory obligations

The data collected by Generali 19 in order to comply with its legal and regulatory obligations is based on compliance with a legal obligation incumbent on the data controller.


3.3 Performance of pre-contractual measures

This legal basis applies when the user contacts Generali 19 via the website www.geoya.fr, in particular to:

  • respond to requests submitted via the contact form;

  • organise and manage appointments or demonstrations concerning the solutions offered.

These processing operations are necessary to respond to requests made prior to the possible conclusion of a contract or business relationship.


4. Recipients of the data

Personal data are intended exclusively for the following categories of recipients:

4.1 Internal teams 

These are the following categories :

  • authorised support staff;

  • operational teams (management of assessments, production of reports);

  • technical teams (security, application maintenance);

  • employees of other companies under service contract with Generali 19.


4.2 Subcontractors acting on behalf of Generali 19

Generali 19 may transfer certain data to subcontractors, particularly in the following areas:

  • hosting;

  • technical maintenance and support;

  • appointment booking (planning tool);

  • videoconferencing used for remote assessments;

  • collection or processing of technical data necessary for assessment (e.g. professional tools).


4.3 Technical partners and appointed experts

Only in the context of Geoya services:

  • Saretec, for carrying out assessments or developing digital tools;

  • Sixense, for carrying out assessments or developing digital tools;

  • other partners contractually bound to Generali 19 to carry out part of the services.

  • our technical service providers (hosting provider, maintenance), acting as processors in compliance with the GDPR.

No data is sold, rented or shared for commercial purposes.


5. Retention period for collected data

All collected data : 12 months after the last exchange.


6. Hosting & security

The site is hosted by: Framer B.V, Rozengracht 207B, 1016 LZ Amsterdam, Netherlands 

Generali 19 implements all appropriate technical and organisational measures to protect your data against any unauthorised access.


7. Your rights

In accordance with the GDPR and the French Data Protection Act, you have the following rights in relation to your data:

  • right of access;

  • right to rectification;

  • right to erasure;

  • right to restriction of processing;

  • right to object;

  • right to data portability;

  • right to withdraw consent (for data requiring your consent);

  • right to set out instructions regarding the fate of data after your death.

To exercise your rights, contact: contact@geoya.fr 

We may ask you for additional information to confirm your identity if we cannot identify you with certainty. 

You also have the right to lodge a complaint with the National Commission for Information Technology and Civil Liberties.

Online : https://www.cnil.fr/fr/plaintes

By post : National Commission for Information Technology and Civil Liberties, Complaints Department, 3 Place de Fontenoy, 75007 PARIS.


8. Policy changes

Generali 19 reserves the right to amend this policy, with changes taking effect as soon as they are published on the site.