Privacy Policy

Controller

The controller is IndexPresse, ZAC de la Presqu’île, 96-100 Rue Félix Esclangon, 38000 Grenoble, France.

For any question about personal data, you may contact redaction@indexpresse.fr.

Data Subjects

Depending on the product and context, processing may concern website visitors, prospects, customer contacts, and end users accessing the platforms within subscribing institutions.

Data Processed

IndexPresse processes the data required to provide its services, including professional contact details and account, subscription, billing, access, connection, search, usage, and delivery information.

When a person asks to receive the newsletter, IndexPresse processes their email address together with the language and signup page in order to manage that request.

Some data may be provided by the subscribing institution. Information identified as mandatory is required to respond to a request or provide the relevant service.

Purposes and Legal Bases

Data is used to respond to requests and manage accounts, subscriptions, access, deliveries, and billing on the basis of pre-contractual measures, performance of a contract, or IndexPresse’s legal obligations.

Security, service improvement, and usage statistics are based on IndexPresse’s legitimate interests or on consent where consent is required. Newsletter delivery is based on the consent given at signup.

Recipients and Processors

Data is accessible to authorized IndexPresse teams and the providers required for their respective roles: Vercel for application hosting configured in Paris, Scaleway for storage and hosting services in France, and Mistral AI for the relevant artificial intelligence features.

Hosting in France and Safeguarded Transfers

IndexPresse hosts its main application services, databases, and storage facilities in France. Where certain supplementary services cannot be hosted in France, IndexPresse prioritizes locations within the European Union.

Some providers may nevertheless process data from a third country or transfer data there. Such operations are safeguarded under the GDPR through an adequacy decision or appropriate safeguards.

Retention Periods

Data is retained for as long as necessary for its purpose: up to 3 years after the last contact for prospects, throughout the contractual relationship and then for the applicable statutory periods for customers, until consent is withdrawn for the newsletter, and for a proportionate period for statistics before deletion or aggregation.

Your Rights

Under the GDPR, you have rights of access, rectification, erasure, restriction, objection, and, where applicable, data portability.

You may withdraw consent where it is the basis for processing and exercise your rights at redaction@indexpresse.fr. You may also lodge a complaint with the CNIL: https://www.cnil.fr. IndexPresse does not make significant decisions based solely on automated processing.

Cookies and Trackers

The website may use cookies necessary for its operation as well as audience measurement tools. Trackers that are not strictly necessary are subject to the user’s prior consent where required by applicable law.

Policy Updates

Last updated: July 12, 2026.