Privacy Policy

Last updated: 25 May 2026

1. Purpose of this policy

The purpose of this privacy policy is to inform users of the Haussmann Executive Research website about how their personal data is collected, processed, stored and protected in accordance with the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and the amended French Data Protection Act (No. 78-17 of 6 January 1978).
It applies to all processing of personal data, excluding the use of cookies, which is governed by a separate policy.

Recognising the value of your personal data and the risks that may arise from its loss, modification or alteration, we take every measure to respect and secure it in accordance with the French Data Protection Act and the EU General Data Protection Regulation.
We take great care to protect your data using all appropriate security measures, particularly in relation to hosting, access and confidentiality. Only authorised personnel who need to access your data are permitted to do so.
We do not share your personal data, except with data processors acting on our behalf and solely for that purpose, and with the authorities in connection with their statutory duties.

2. Definitions

Supervisory authority: the Commission Nationale de l’Informatique et des Libertés.

Consent: any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which the data subject, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to them;

Recipient: any natural or legal person, public authority, agency or any other body to whom personal data are disclosed, whether or not they are a third party.

Personal data: any information relating to an identified or identifiable natural person (hereinafter referred to as the ‘data subject’); an ‘identifiable natural person’ is deemed to be a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to their physical, physiological, genetic, mental, economic, cultural or social identity;

Purpose: the objective pursued by the processing (e.g. recruitment, file management, invoicing);

Restriction of processing: the marking of stored personal data with a view to restricting its future processing;

Data controller: the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing. Where the purposes and means of such processing are determined by Union law or the law of a Member State, the controller may be designated, or the specific criteria for its designation may be laid down, by Union law or the law of a Member State;

Processor: a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;

Third party: a natural or legal person, public authority, agency or other body other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or the processor, are authorised to process personal data;

Processing: any operation or set of operations which is carried out, whether or not by automated means, on personal data or sets of personal data, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or any other form of making available, the combination or interconnection, restriction, erasure or destruction;

3.  Data controller

The data controller is the company operating the Haussmann Executive Research website.

3.1 Data controller responsible for the collection of personal data

For personal data collected in connection with the creation of the User’s personal account and their browsing of the Website, the data controller is:

Pierre-Jean COLIN, Data Protection Officer

pjcolin@haussmann-es.com

As the data controller responsible for the data it collects, Haussmann Executive Research undertakes to comply with the applicable legal framework. In particular, it is Haussmann Executive Research’s responsibility to define the purposes of its data processing, to provide its prospects and clients – following the collection of their consent – with comprehensive information on the processing of their personal data, and to maintain a register of processing activities that accurately reflects the reality. Whenever it processes Personal Data, it takes all reasonable measures to ensure the accuracy and relevance of the Personal Data in relation to the purposes for which it is processed.

4. Data relating to cookies

Purpose and legal basis: We use cookies on our website. These are small text files that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website. You can view our cookie policy – it is available at the bottom of the website under the heading ‘Cookie Management’.

The legal basis for data processing is your consent in each case, in accordance with Article 6(1)(a) of the GDPR. Technically necessary cookies are processed in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interest in ensuring the functionality of our website. In addition, we use a ‘cookie consent management tool’ to manage your cookie preferences in accordance with Article 6(1)(c) of the GDPR.

Cookies are also used for the operation of Google Analytics. The provision of the aforementioned personal data is neither legally nor contractually required.

Recipients and transfer to third countries: We use technical service providers to operate and maintain our website; these act as our data processors. All service providers are contractually obliged to treat your data confidentially. In addition, we use Google services such as Google Analytics. The information generated by these cookies regarding your use of this website is generally transmitted to a Google server in the United States.

Withdrawal of consent: You may refuse or restrict cookies at any time. To do so, click on the ‘Cookie Management’ page in the website footer, then click on the ‘Cookie Settings’ button at the top of that page to adjust your preferences.

4.1 Cookie consent management software

Purpose and legal basis: Our website uses cookie consent management software developed by the web agency Addictic, based in France. This module ensures that our website complies with the applicable regulations on the protection of personal data, in particular the General Data Protection Regulation (GDPR) and the French Data Protection Act. The system enables us to inform users, obtain their prior consent to the use of non-essential cookies, and record their preferences in a documented manner. The processing is based on Article 6(1)(c) of the GDPR (compliance with a legal obligation) and, in certain specific cases, on Article 6(1)(a) (explicit consent).

Recipients and transfer to third countries: The consent management software is hosted on servers located in Europe. No personal data is transferred to third parties outside the European Union via this module. The agency Addictic, as a technical service provider, acts as a data processor and is contractually bound to guarantee the confidentiality and security of the data processed.

Retention period: Consent choices (acceptance or refusal) are retained for a maximum of 6 months, in accordance with the recommendations of the CNIL. At the end of this period, you will be asked to give your consent again.

Profiling: The consent management module does not carry out any profiling. It is strictly limited to the recording and technical management of your cookie preferences.

Withdrawal: You can change your preferences at any time by clicking on the ‘Cookie Management’ link in the footer. From this page, you can access the ‘Cookie Settings’ option and manage your choices as you wish.

4.2 Website analytics

Purpose and legal basis: Our website uses features of the Google Analytics web analytics service. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The tools we use help us to analyse how our website is used, with a view to continuously improving it. Personal data is collected via cookies. This includes information relating to the browser, the navigation path, the date and time of the visit, location data, the internet service provider, the IP address and the duration of the visit, which are displayed in various reports. Processing is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interest.

Recipients and transfer to third countries: We use technical service providers for the operation and maintenance of our website, who act as data processors. Some of these are based in the United States. All service providers are contractually obliged to treat your data confidentially.

Retention period: The storage period depends on the type of cookies (see the ‘Cookies’ section).

Profiling: Data is anonymised immediately after collection. The ‘demographic data’ function, which records, for example, users’ ages or interests, is not enabled on our website.

Withdrawal: You can refuse or restrict cookies at any time. To do so, click on the ‘Cookies’ page in the website footer, then click the ‘Cookie Settings’ button at the top of that page to adjust your preferences.

4.3 Google Analytics

Purpose and legal basis: Provided that you have given your consent in accordance with Article 6(1) of the GDPR, this website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: ‘Google’). Google Analytics uses so-called ‘cookies’, which are text files stored on your computer that enable an analysis of your use of the website. The information generated by the cookie regarding your use of this website is generally transmitted to a Google server in the United States and stored there. However, as IP address anonymisation is enabled on these websites, your IP address will first be truncated by Google within the Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and truncated there. For further information on the terms of use and data protection, please refer to https://marketingplatform.google.com/about/analytics/terms/fr/ et https://policies.google.com/?hl=fr.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services to the website operator relating to the use of the website and the internet.

Recipients and transfer to third countries: We use technical service providers for the operation and maintenance of our website, who act as data processors. Some of these are based in the United States. All service providers are contractually obliged to treat your data confidentially. The information generated by the cookie regarding your use of this website is generally transmitted to a Google server in the United States and stored there. An adequacy decision has been issued by the European Commission (Privacy Shield certification). Furthermore, we have entered into standard contractual clauses with Google LLC.

Retention period: The storage period depends on the type of cookies (see the ‘Cookies’ section).

Profiling: Data is anonymised immediately after collection. The ‘demographic data’ function, which records, for example, users’ ages or interests, is not enabled on our website.

Withdrawal: You can refuse or restrict cookies at any time. To do so, click on the ‘Cookies’ page in the website footer, then click the ‘Cookie Settings’ button at the top of that page to adjust your preferences. You can prevent tracking by Google Analytics on our website by clicking on this link: https://support.google.com/chrome/answer/2790761?hl=fr&co=GENIE.Platform%3DDesktop. An opt-out cookie will be installed on your device. This will prevent Google Analytics from collecting data for this website and this browser in future, for as long as the cookie remains installed in your browser. You can also prevent Google from collecting the data generated by the cookie (including your IP address) by using the following link. Download and install the browser plug-in: Google Analytics opt-out browser add-on.

4.4 Using Google Tag Manager

We use the Google Tag Manager service, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a technical solution for managing website tags via an interface. The tool itself does not directly collect personal data. However, it activates other tags which may collect data (such as Google Analytics, Google Ads or other third-party services). When Google Tag Manager is triggered, your IP address is transferred to Google — which constitutes the processing of personal data.

Loading Google Tag Manager therefore involves the transfer of data to the United States. Google is certified under the EU–US Data Privacy Framework, but a transfer to a third country remains subject to your explicit consent, in accordance with Article 49(1)(a) of the GDPR.

The processing of data is based on Article 6(1)(a) of the GDPR, i.e. your prior consent. Google Tag Manager is only activated once this consent has been obtained via our cookie management tool.

For further information on how Google processes personal data, please refer to their privacy policy:

https://policies.google.com/privacy?hl=fr.

4.5 Using Google Ads

Our website uses the Google Ads service, also provided by Google Ireland Limited. This service enables us to display targeted adverts on the Google Search Network and measure their effectiveness using conversion tags embedded on our website.

When you interact with one of our adverts (e.g. by clicking on a Google advert), a conversion cookie is placed on your device. This cookie enables Google to track your browsing behaviour on our website (for example, viewing a key page or filling in a form). This data is used solely for statistical purposes and does not allow for your direct identification.

The data collected is processed in the United States. Google is certified under the Data Privacy Framework. The processing is based on your prior consent in accordance with Article 6(1)(a) of the GDPR. No Google Ads tags are activated until you have given your consent via our consent manager.

For more information on how Google processes data in connection with its advertising services, please see:

https://policies.google.com/privacy?hl=fr

4.6 Matomo

Purpose and legal basis: This website uses Matomo, an open-source programme for the statistical analysis of visitor traffic. The provider of the Matomo software is InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand. Matomo uses cookies to analyse your use of the website. The information generated by the cookie regarding your use of the website is stored on a server in Germany. We have configured Matomo so that no profiling takes place. The IP address is anonymised immediately after processing and before storage by truncating the last two octets. You can prevent the installation of cookies by adjusting your browser settings. Please note that if you adjust your settings accordingly, you may no longer be able to use all the features of this website. You can find further information on Matomo’s privacy settings via the following link: https://fr.matomo.org/privacy-policy/.

Data processing is carried out on the basis of your consent in accordance with Article 6(1)(a) of the GDPR. You give your consent to Matomo’s analysis of the website by clicking ‘OK’ in the cookie banner on our website. Without this consent, no web analytics cookies will be set by Matomo.

Recipients and transfers to third countries: We use technical service providers who act as data processors to operate and maintain our website and to display advertisements. All service providers are contractually obliged to treat your data confidentially. The transfer of your information to New Zealand is covered by an adequacy decision of the European Commission within the meaning of Article 45 of the GDPR. A data processing agreement within the meaning of Article 28 of the GDPR has been concluded with Matomo.

Retention period: The data will be deleted as soon as it is no longer required for our record-keeping purposes. In our case, this happens automatically after 6 months.

Withdrawal of consent: You are under no legal or contractual obligation to authorise us to use your already anonymised data for web analytics purposes. However, without your data, we cannot further optimise and improve our services.

4.7 Embedded YouTube videos

Purpose and legal basis: Our website may embed videos from the YouTube platform, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The purpose of embedding these videos is to enrich our content and enhance the user experience. When a video is played, personal data such as the IP address, the device used, the date and time of the visit, and the URL of the page viewed may be transmitted to YouTube. In accordance with Article 6(1)(a) of the GDPR, this content is only loaded with your prior explicit consent, obtained via our cookie management module.

Recipients and transfer to third countries: Viewing an embedded YouTube video may result in data being transferred to the United States. YouTube (Google LLC) is certified under the Data Privacy Framework, which guarantees an adequate level of data protection. However, this transfer only takes place after the user has voluntarily activated the content, on the basis of their consent.

Retention period: Any cookies set by YouTube after the video is activated (such as YSC or VISITOR_INFO1_LIVE) have a retention period of up to 24 months. You can find the exact retention periods in the Cookies section.

Profiling: YouTube may link your viewing activity to your Google account if you are logged in. In this case, YouTube may carry out profiling for personalisation or advertising purposes. This processing takes place outside our website and is subject to Google’s terms of service.

Withdrawal: You can adjust your preferences regarding the loading of YouTube videos at any time via our cookie management tool. To do so, go to the ‘Cookies’ page, accessible from the footer of the website, then click on ‘Cookie Settings’ to enable or disable this service.

4.8 Social media presence

Purpose and legal basis: We also offer you the opportunity to stay in touch with us via our social media pages (YouTube, LinkedIn, Instagram as part of our website) on the basis of your consent in accordance with Article 6(1), first sentence, point (a) of the GDPR. These social media services may themselves collect personal data, for example via the profile you have created there. Please note that, despite our joint responsibility with the platforms, we have no influence over the data processing operations carried out by the respective platform, which are performed by the platform for its own purposes. The provision of your personal data is voluntary.

Recipients and transfer to third countries: The recipients are technical service providers and those who maintain our company’s accounts. All service providers are contractually obliged to treat your data confidentially. Processing also takes place outside the EU, namely in the United States. Safeguards are in place in the form of standard contractual clauses.

Retention period: The data we collect directly via the company profile is deleted from our systems as soon as the purpose for which it was stored no longer applies. We have no control over the retention period for your data stored by the operators of the aforementioned platforms for their own purposes. For further information, please contact the operators of these platforms directly.

Withdrawal of consent: You may object to our processing of your data at any time by sending an informal message to

dpjcolin@haussmann-es.com  For more general objections, please contact the relevant platform directly.

Please read the data protection information provided by the relevant platform:

YouTube : Politique de confidentialité des données YouTube
LinkedIn : Politique de confidentialité des données LinkedIn
Facebook : Politique de confidentialité des données Meta
Instagram : Politique de confidentialité des données Instagram

5. Personal data collected on this website

We collect only the personal data strictly necessary for the purposes of our activities. Depending on the forms available on the website or the services used, this may include:

  • Surname
  • First name
  • Subject
  • Email address
  • Telephone number
  • Message
  • IP address
  • Date and time of form submission
  • Consent to the transmission of the information entered
  • Newsletter subscription tracking information

Any other information provided voluntarily

Fields marked with an asterisk (*) on the forms are mandatory for processing your request. The personal information we collect is gathered via forms and through your interaction with our website.

6. Purposes of data processing

Personal data is collected for the following purposes:

  • To respond to your enquiries via the contact forms
  • To comply with legal and regulatory obligations
  • To improve the quality of the services we offer

7. Legal basis for processing

The processing carried out is based on one of the following legal grounds:

  • Your consent (e.g. newsletter, contact form)
  • The performance of a contract or pre-contractual measures
  • Compliance with a legal obligation
  • Our legitimate interests, in particular for the purposes of customer relationship management or improving our services

8. Shelf life

Your personal data is retained only for as long as is necessary for the purposes for which it was collected, and is then archived in accordance with the applicable statutory retention periods.

For example:

  • Contact forms: 12 months from the last correspondence
  • Customer data: for the duration of the contractual relationship plus 3 years
  • Newsletter data: until you unsubscribe plus 3 years for evidence purposes

9. Application process on this website

Purpose and legal basis: By sending your documents by email or post, you agree to your data being stored electronically. We guarantee that your data will be treated confidentially, that it will be used exclusively for the purposes of the application process, and that it will not be used in any other way or for any other purposes.

We process your personal data in accordance with the provisions of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and all other relevant legislation (e.g. BetrVG, AGG, etc.).

The primary purpose of data processing is to establish an employment relationship. The main legal basis is Article 6(1)(b) of the GDPR, in conjunction with Article 26(1) of the BDSG. Furthermore, collective agreements and, where applicable, your separate consents in accordance with Article 6(1)(a) and Article 7 of the GDPR. Article 6(1)(a) and Article 7 of the GDPR, in conjunction with Article 26(2) of the BDSG, may be regarded as consent within the meaning of data protection legislation.

The provision of personal data is neither legally nor contractually required. However, it is not possible to process the request without this information.

Recipients and transfers to third countries: Within our organisation, only those individuals and departments (for example, divisions, works councils, representatives of people with severe disabilities) receive your personal data if they require it to fulfil our contractual and legal obligations.

10. Recipients of the data

The data collected is intended solely for authorised internal departments at Haussmann Executive Research and, where applicable, for subcontractors who are duly bound by contract (hosting, maintenance, email marketing, etc.).
Under no circumstances is the data resold or transferred to unauthorised third parties.

11. Transfer of data outside the EU

In principle, data is hosted within the European Union. Should a transfer need to be made outside the EU, it would be governed by standard contractual clauses or other appropriate safeguards.

12. Data security

We implement appropriate technical and organisational measures to ensure the security, integrity and confidentiality of your personal data, in particular against unauthorised access, loss, alteration or disclosure.
The personal information we collect is stored in a secure environment. To ensure the security of your personal information, we use the following measures:

  • SSL (Secure Sockets Layer) protocol
  • Data backups
  • Firewalls

We are committed to maintaining a high level of confidentiality by incorporating the latest technological innovations to ensure the confidentiality of your transactions. However, as no mechanism offers maximum security, there is always some risk involved when using the internet to transmit personal information.

13. Your rights

In accordance with the GDPR, you have the following rights regarding your data:

  • Right of access to your personal data
  • Right to rectify inaccurate or incomplete data
  • Right to object, on legitimate grounds
  • Right to erasure (‘right to be forgotten’) in certain cases
  • Right to restriction of processing
  • Right to data portability
  • Right to withdraw your consent at any time, for processing based on consent

14. Exercising your rights

You can exercise these rights by contacting us at the following address:
Contact details for the DPO or the designated data protection contact:

Pierre-Jean COLIN, Data Protection Officer
12 rue Lincoln
75008 PARIS
Phone : +33 (0) 1 53 83 60 60
E-mail : haussmann@haussmann-es.com

You may be asked to provide proof of identity if there is reasonable doubt as to your identity.

If you feel that your rights have not been respected, you may lodge a complaint with the CNIL: https://www.cnil.fr