Privacy Policy
Last updated: July 31, 2026
This policy explains how Percisio processes personal data through this website, www.percisio.com. It is written to meet our obligations under the EU General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).
1. Who is responsible for your data
The controller for the processing described in this policy is:
- Percisio SAS, a société par actions simplifiée registered under RCS Paris 103 916 763
- 24 rue du Faubourg Saint-Jacques, 75014 Paris, France
- hello@percisio.com
2. What this policy covers
This policy covers only the personal data processed through this website: the pages you visit, the forms you submit here, and the third-party tools embedded in these pages.
It does not cover personal or health data processed by Percisio's medical devices and clinical software. That processing takes place within healthcare institutions, under separate contracts and data processing agreements concluded with those institutions, and is not carried out through this website.
3. What we collect, why, and on what basis
We collect the following, and only for the purposes described. Where a purpose relies on your consent, you may withdraw it at any time without affecting what was collected before.
3.1 When you browse the site
Our hosting provider records the technical data needed to serve and secure the site, including your IP address, the pages requested, the date and time, the referring page, and your browser and device type. These server logs are not used to build a profile of you.
Legal basis: Our legitimate interest in operating, securing and troubleshooting the website (Article 6(1)(f) GDPR).
3.2 Audience measurement
If you accept analytics cookies, Google Analytics 4 records how you reached the site and which pages you view, using a randomly generated identifier. Nothing is collected until you accept, and you can withdraw at any time through the "Cookie Preferences" link at the bottom of any page. We do not use this data for advertising or profiling.
Legal basis: Your consent (Article 6(1)(a) GDPR and Article 82 of the French Data Protection Act).
3.3 When you contact us or book a meeting
Our contact form and our meeting scheduler are provided by HubSpot and embedded in the /contact and /schedule pages. The details you enter — such as your name, email address, organisation and message — are transmitted to and stored by HubSpot on our behalf so that we can reply to you. These embeds load when the page opens and may set their own cookies.
Legal basis: Steps taken at your request before entering into a contract, and our legitimate interest in responding to enquiries (Article 6(1)(b) and (f) GDPR).
3.4 Embedded video
Pages containing video use YouTube in privacy-enhanced mode (youtube-nocookie.com). The player loads when the video area scrolls into view, which discloses your IP address to Google. In this mode YouTube does not set advertising cookies unless you play the video.
Legal basis: Our legitimate interest in presenting our work (Article 6(1)(f) GDPR).
3.5 Preferences stored on your device
We store your language choice (preferredLanguage) and your cookie choice (cookie-consent) in your browser's local storage. Both stay on your device and are never transmitted to us or to anyone else.
Legal basis: Strictly necessary to provide a feature you have asked for, and exempt from consent under Article 82 of the French Data Protection Act.
4. Cookies
Analytics cookies are placed only if you accept them, and you can change or withdraw that choice at any time. The cookies we use, what they do and how long they last are described in full in our cookie policy. Read our Cookie Policy
5. Who receives your data
We do not sell, rent or trade personal data. We share it only with the providers we use to run this website, each acting as our processor under a data processing agreement:
- Vercel Inc. — website hosting and content delivery, which produces the server logs described above
- Google Ireland Limited — Google Analytics 4, only if you accept analytics cookies
- Google Ireland Limited — YouTube video embeds, in privacy-enhanced mode
- HubSpot Ireland Limited — contact form and meeting scheduling
We may also disclose personal data where the law requires it, or where it is necessary to establish, exercise or defend legal claims.
6. Transfers outside the European Union
We are established in France and the processing described here takes place primarily within the European Union. Several of our providers belong to groups established in the United States, and personal data may be transferred there or accessed from there for support purposes.
Those transfers rely on the European Commission's adequacy decision for the EU–US Data Privacy Framework where the recipient is certified under it, and otherwise on the European Commission's standard contractual clauses together with additional technical and organisational safeguards. You may ask us for a copy of the safeguards that apply.
7. How long we keep it
We keep personal data only as long as it is needed for the purpose it was collected for:
- Server logs: kept for a limited operational period by our hosting provider, then deleted
- Analytics: the _ga cookies expire two years after your last visit; the associated event data is kept for the retention period configured in our Google Analytics property
- Enquiries and meeting requests: kept for as long as needed to handle your request and, where a business relationship follows, for its duration, then deleted or archived in line with the applicable limitation periods
- Your cookie choice: stays in your browser until you change it or clear your browser storage
8. How we protect it
We take appropriate technical and organisational measures to protect the personal data processed through this website, including:
- HTTPS encryption for all traffic between your browser and the site
- Access to the tools holding enquiry data restricted to the people who need it
- Selection of providers offering appropriate security guarantees, bound by data processing agreements
9. Your rights
Under the GDPR and the French Data Protection Act, you have the right to:
- Access the personal data we hold about you and obtain a copy of it
- Have inaccurate or incomplete data corrected
- Have your data erased, where one of the grounds in Article 17 GDPR applies
- Restrict processing, in the circumstances set out in Article 18 GDPR
- Receive the data you provided in a structured, commonly used and machine-readable format, and have it sent to another controller
- Object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests
- Withdraw your consent at any time, without affecting the lawfulness of processing carried out before you withdrew it
- Give instructions on how your personal data should be handled after your death
To exercise any of these rights, write to hello@percisio.com. We may ask you for proof of identity if we have reasonable doubts about who is making the request. We will respond within one month, which may be extended by a further two months for complex or numerous requests; we will tell you if that happens.
10. Complaints
If you consider that your data protection rights have not been respected, you may lodge a complaint with the French supervisory authority: Commission Nationale de l'Informatique et des Libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr. We would nonetheless encourage you to contact us first so we can try to resolve the matter.
11. Children
This website is aimed at healthcare professionals and organisations, not at children. We do not knowingly collect personal data from anyone under the age of 15, which is the age at which a minor may consent on their own to information society services in France. If you believe a child has provided us with personal data, please contact us and we will delete it.
12. Changes to this policy
We may update this policy to reflect changes in our practices or in the applicable law. The date shown at the top of this page is the date the current version was published, and any material change will be announced here.
13. Contact
For any question about this policy or about how we handle personal data, write to hello@percisio.com, or to Percisio SAS, 24 rue du Faubourg Saint-Jacques, 75014 Paris, France.