Information about the main personal data processing activities related to indexpresse.fr and IndexPresse services.
The controller is IndexPresse, ZAC de la Presqu’île, 96-100 Rue Félix Esclangon, 38000 Grenoble, France.
For any question about personal data, you may contact redaction@indexpresse.fr.
Depending on the product and context, processing may concern website visitors, prospects, customer contacts, and end users accessing the platforms within subscribing institutions.
Customer institutions may include companies, banks, consulting firms, schools, universities, public libraries, media libraries, and public reading networks.
Depending on your interaction with IndexPresse, processed data may include contact and request data such as first name, last name, email address, phone number, organization, role, and message content.
As part of a subscription, IndexPresse may process professional contact details, customer management information, billing data, contract data, login identifiers, authorized IP addresses, access settings, sessions, searches, and usage statistics.
For bibliographic record delivery services, IndexPresse may process recipient contact details and delivery settings required to send bibliographic records.
IndexPresse does not intentionally collect special category data within the meaning of the GDPR through the website and services described here.
Data is used to respond to contact, demo, or quote requests, based on pre-contractual measures or IndexPresse’s legitimate interest.
Data is used to manage subscriptions, accounts, platform access, bibliographic record deliveries, and usage statistics, mainly for the performance of the contract concluded with the subscribing institution.
Data may also be used for billing, compliance with accounting and administrative obligations, service security, tool improvement, and product information sent to customers and professional contacts, depending on the applicable legal basis.
Data is intended for authorized IndexPresse teams and, where necessary, technical providers acting on behalf of IndexPresse.
These providers may be involved in website hosting, application hosting, database services, audience measurement, email delivery, storage, bibliographic file delivery, technical operation of the services, and certain analysis or automation features.
Tools identified in the current architecture include Vercel, PostHog, Scaleway, Microsoft Graph, Mistral, OpenAI, and the database services used by IndexPresse. This list may evolve according to the technical needs of the service.
IndexPresse favors providers hosting data within the European Union whenever possible.
Some technical providers may nevertheless involve data transfers to third countries, including the United States. In such cases, IndexPresse ensures that transfers are governed by appropriate safeguards, such as European Commission standard contractual clauses or an equivalent mechanism.
Prospect and contact request data may be retained for up to 3 years from the last contact.
Customer and subscription data is retained for the duration of the contractual relationship, then archived where necessary to comply with legal obligations, including accounting obligations.
Audience measurement and statistics data is retained for a period proportionate to its purpose, then deleted or aggregated.
IndexPresse implements technical and organizational measures designed to protect data against loss, unauthorized access, disclosure, or alteration.
These measures include access control, limited authorizations, use of providers selected for their security commitments, and backup or logging mechanisms appropriate to the relevant services.
Under the GDPR, you have rights of access, rectification, erasure, restriction, objection, and, where applicable, data portability.
You may exercise these rights by writing to redaction@indexpresse.fr. IndexPresse may request proof of identity where necessary to process the request.
You also have the right to lodge a complaint with the CNIL: https://www.cnil.fr.
The website may use cookies necessary for service operation, such as session, language, security, subscriber access, or preference persistence cookies.
The website may also use audience measurement tools, including PostHog. Trackers that are not strictly necessary are only placed after consent, where consent is required under applicable law.
IndexPresse may update this policy to reflect legal, technical, or functional changes to its processing activities. The applicable version is the one published on the website.
Last updated: July 5, 2026.