Privacy policy

Updated: March 23, 2023

  1.  Object 

This privacy policy (hereinafter the "Privacy Policy") illustrates the commitment of the company CUSTOMER LABS, a simplified joint-stock company with share capital of 50,762 €, registered with the Trade and Companies Register of Aix-en -Provence under number 810 308 288, with the following intra-community VAT number FR 19810308288 and whose registered office is located Avenue Louis Philibert in Aix-en-Provence (13100) (hereinafter the "Company") with regard to compliance with privacy and the protection of your personal data when you visit the following website: https://customer-labs.com/ (hereinafter the “Site”).

The Site allows you to:

  • to discover the Company ;
  • to discover the services and the customer satisfaction management solution (hereinafter the “Services”) offered by the Company;
  • to view reviews of the Company and use the link to leave your review; 
  • schedule a demo of the customer satisfaction management solution;
  • access the Company's news and blog;
  • to subscribe to the Company's newsletter;
  • to access job offers and internships offered by the Company; 
  • to contact the Company.
  1. Processing of your personal data

2.1. Processing of your personal data

In accordance with the laws and regulations in force, the Company, acting as data controller, collects some of your personal data during your visit to the Site.

In order to respond to your contact requests, the Company, acting as data controller, collects your following personal data:

  • Your name
  • Your first name ;
  • Your email address ;
  • The subject of your message.

If you schedule a demonstration of the customer satisfaction management solution, the Company collects your following personal data:

  • Your name
  • Your first name ;
  • Your email address ;
  • Your telephone number (optional) ;
  • The desired demonstration date (optional)
  • The subject of your message.

If you subscribe to the Company's newsletter, the Company, as data controller, collects your following personal data:

  • Your first or last name;
  • Your email address.

When you connect to the Site, the Company, acting as data controller, also collects your following personal data:

  • Your connection logs;
  • Your connection logs;
  • Your IP address.

The Company uses the personal data of Users for the following purposes :

FinalityLegal basisDuration of retention of personal data

Receiving and managing contact requests

Processing is based on your consent

Until the withdrawal of your consent or for a period of three years from the date of receipt of your request 
Management of demo requests for the customer satisfaction management solutionThe processing is based on your consent and on the execution of pre-contractual measures For a period of three years from the date of receipt of your demo request 

Management of requests for rights of access, portability, erasure, limitation of processing, rectification and opposition

Processing is necessary to respond to your requests to exercise rights and is based on your consent


Up to one year from your request to exercise your right(s)

Management of requests for the right of opposition to commercial prospecting
The processing is necessary in order to respond to the request to exercise the right of opposition
Up to three years from the exercise of your right of opposition
Management of newsletter subscriptions Processing is based on your consentUntil the withdrawal of your consent or three years from the last contact with you 

2.2. Recipients / transfers of your personal data 

Access to your personal data is restricted to only those persons who need your personal data in order to achieve the specific purpose of the processing.

Your personal data may also be communicated by the Company to third parties:

  • if the law or legal process requires the Company to share your personal data;
  • in response to a request from a public or judicial authority (in particular in the event of a judicial requisition);
  • lorsque la Société considère que la transmission de vos données personnelles est nécessaire ou appropriée afin d’assurer la sécurité des personnes ou protéger le public.

Your personal data is transmitted to the company OVH (2 rue Kellermann, 59100, Roubaix) which hosts the Site on servers located in France.

Your personal data is therefore not subject to any transfer outside the European Economic Area.

2.3. Security of your personal data 

The Company takes care to secure your personal data by implementing the appropriate technical and organizational measures in order to guarantee a level of security adapted to the risk and puts in place means to guarantee constant confidentiality, integrity, availability and resilience. processing systems and services, any means to restore the availability of and access to your personal data as well as a procedure aimed at regularly testing, analyzing and evaluating the effectiveness of the technical and organizational measures put in place by the society.

2.4. Retention of your personal data 

Your personal data is kept only for the time necessary to achieve the purpose for which the Company holds your data, in order to meet your needs, to fulfill its legal or regulatory obligations, in order to allow it to exercise its rights and/or for statistical or historical purposes.

At the end of the periods mentioned above, your personal data will be deleted or the Company will anonymize them.

2.5. Your rights over your personal data

You have the following rights over your personal data:

Rights of access and rectificationYou can request access to your personal data. You can also request the rectification of your personal data which is inaccurate or that your incomplete personal data be completed. You also have the right to know the origin of your personal data.
Right to deletionVous pouvez demander la suppression de vos données personnelles lorsque :Vos données personnelles ne sont plus nécessaires à la réalisation des finalités pour lesquelles elles ont été traitées ;Vous avez choisi de retirer votre consentement (dans les cas où le consentement est la base légale du traitement), ce retrait n’impactant pas la licéité du traitement avant sa mise en œuvre ;Vous vous êtes opposé(e) au traitement de vos données personnelles ;Vos données personnelles ont été traitées de manière illicite ;Vos données personnelles doivent être effacées pour respecter une obligation légale ; ouLa suppression de vos données personnelles est requise pour garantir la conformité à la législation en vigueur, notamment au regard des durées de conservation applicables.
Right of opposition You can object to the processing of your personal data in compliance with the legal obligations imposed on the Company.
Right to limitationYou can also request the limitation of the processing of your personal data if: You dispute the accuracy of your personal data; The Company no longer needs your personal data for the purposes of the processing; andYou have objected to the processing of your personal data.
Right not to be subject to
well-founded decision
exclusively on a treatment
automated data
You have the possibility of not being the subject of a decision based exclusively on automated processing producing legal effects concerning you or affecting you significantly, in particular based on profiling.
Right to withdraw your consent You can withdraw your consent at any time, through a simple method equivalent to that used to collect your consent. The withdrawal of your consent is only valid for the future and does not call into question the legality of a processing carried out on the basis of your consent before its withdrawal or the lawfulness of processing based on another legal basis such as, for example, the performance of a contract concluded between you and the Company.
Droit à la portabilitéYou can request the Company to provide your personal data to you in a structured, commonly used, machine-readable format, or request that it be "ported" directly to another controller under the following conditions: the processing is based on your consent; and that the processing is carried out by automated means.
Right to issue advance directives on the processing of personal data after your deathPursuant to Article 85, I of the Data Protection Act of January 6, 1978 as amended, you can define directives on the exercise of your rights provided for in this section after your death (in particular on the retention period of your personal data, their deletion and/or the communication of your personal data), as well as designating a person in charge of exercising these rights. In the absence of such directives, the Company will grant the requests of your heirs, such as as restrictively set out in Article 85, II of the Data Protection Act.
Right to lodge a complaint with a supervisory authorityIf you have concerns or complaints regarding the protection of your personal data, you have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés via the following link: Online Complaints | CNILThe CNIL can also be reached at the following coordinates: 3 Place de Fontenoy, 75007 Paris – telephone: 01 53 73 22 22. You are invited to inform the Company beforehand so that the Company can process the request and try to find an amicable solution.

You can exercise your aforementioned rights and/or ask any question relating to the processing of your personal data by the Company by e-mail to the following e-mail address: privacy@customer-labs.com or to the following postal address: Délégué à la Data Protection, CUSTOMER LABS, Avenue Louis Philibert, 13100, Aix-en-Provence.

In order for the Company to process your request as quickly as possible, you can indicate in the latter its purpose and the context in which your personal data has been processed by the Company.

In case of reasonable doubt about your identity, the Company may ask you to provide it with a copy of both sides of a valid identity document.

The latter will be deleted by the Company once your request has been granted.

The Company may keep a copy of your identity document for the sole purpose of establishing evidence, in the event of a dispute with you.

2.6. Links to Third-Party Sites

 In order to improve the quality of the Site, the Company may include links on the Site to third-party sites. These sites have a different and independent privacy policy from that of the Company. You are encouraged to review the privacy policy of the third-party sites you visit.

2.7. Site language 

This Privacy Policy is written in French. 

In the event that it is translated into one or more foreign languages , only the French version will prevail in the event of a dispute.

2.8. Cookies

The provisions relating to the deposit of cookies on the Site appear in the cookie policy available on the website.

2.9. Modification of the Privacy Policy 

The Company reserves the right to make changes to this Privacy Policy at any time.

The Company recommends consulting this page regularly, referring to the date of its last modification.

In the event of a material change to the Privacy Policy, the Company will notify you of these changes.