Privacy policy
Overview
Last updated: 27/10/2025
This Privacy Policy sets out the policies of Emersya SAS who registered address is:
1300 Avenue Albert Einstein
Bâtiment 4 Le Stratégie Concept
34000 MONTPELLIER
France
Introduction
At Emersya, your privacy is important to us. We are committed to protecting your privacy and individual rights in accordance with French and European data protection laws.
This Privacy Policy aims to inform you how we collect, process and store your personal data, and what it is used for.
Emersya acts in two distinct capacities when processing personal data:
- Controller: When you interact with our website, sign up for our solutions and services, or engage with us through other channels (such as trade shows or other in-person events). In that capacity, we use the data to provide our products and services, share relevant content with you, and promote, improve and refine our offerings.
- Processor: When our customers use our solutions to collect and process personal data of their end-users (their customers) in connection with sales, marketing and other business activities. In this case, we act as a service provider on behalf of our customers, who remain the data controllers, as set out in our License and Service Agreement.
Please read this page regularly to stay informed of any modifications we may make.
1. What data we collect
When you interact with Emersya via our website (www.emersya.com), the Emersya Platform, or through a product experience enabled by one of our customers, we may collect personal data and other information about you, as described below:
1.1 When you visit our website
We may collect personal data when you submit web forms or interact with our site—for example by requesting a demo, free trial or quotation; subscribing to our newsletter; or downloading a free resource. We may ask for your email address, first and last name, job title, and other similar business information. You are free to browse our website without providing any personal data.
1.2 When you create an account on the Emersya Platform
We collect the personal data you provide when you register, update your user information, set preferences, or provide any other related information to access or use the Emersya Platform.
1.3 When you use an Emersya-powered product experience
No personal data is collected simply by using the “Viewer”. We only use cookies that support the user’s navigation of the solutions (for example language preference). The information these cookies collect does not enable personal identification, nor contain tracking of any kind.
Notwithstanding the above, we may collect the IP address of any device that accesses the Viewer for approximate geolocation. To remove all doubt: Emersya does not collect the user’s name, address, contact details or any other information that could be used to identify a person through the Viewer.
However, some Emersya solutions require the use and storage of personal data. Emersya only collects and processes data that is strictly necessary for effective use of the solutions. Except in specific limited circumstances, the end‐user provides their own personal data. The following data types may be collected: name, address, phone number, email address, company, position in the company. However, the actual data collected depends on the solution accessed by the user.
Personal data is collected in accordance with Article 6.1(b) of the EU General Data Protection Regulation (GDPR). We store the information on behalf of our customers on our secure servers as processor in accordance with our License and Services Agreement. Each customer remains responsible for the personal data they process using the Emersya Platform Service and for compliance with any required notices, disclosures, or consents. If you have questions about the personal data we process on behalf of a customer, please contact the customer directly and refer to their policies.
1.4 Information we collect from other sources
1.4.1 Emersya Partners
Emersya works with several service-provider partners who may provide us with information about you, or users of your Emersya account. Partners may share this data with us directly or use it to set up a user account on the Emersya Platform. For more information about how we share data with our partners, please review Subsection 3.2 (“Partners”) of the “How We Share Personal Data” section of this Privacy Policy.
1.4.2 Public and third-party sources
We may collect personal data about you from publicly available sources (such as social media platforms). This may include names, job titles, email addresses, IP addresses and social-media profiles. This helps us identify potential new customers, suggest solutions and services that may interest you, deliver personalised communications, and promote events.
2. How the data is used
We will use the information that we collect about you for the following purposes:
2.1 To provide information about our solutions and services
We use the account information you provide when becoming an Emersya customer to send you emails and notifications about billing, account management and other administrative matters.
We also use your information to provide customer support, as well as to recommend new solutions and/or services.
2.2 To provide access to the Emersya Platform and solutions
We use the account information you provide when becoming an Emersya customer to provide access to the Emersya Platform, solutions and services. For example, we use your name and the email address you provide when creating your user account to authenticate you when you log in to the Emersya Platform. We use your payment information to process payments for your subscription to Emersya’s technology and for any paid services we provide. We may also use your account information to investigate and help prevent security incidents.
2.3 To market and promote the subscription service
We use personal data to market and promote Emersya’s solutions and services. For example, we may use your name and email address to send information or content that we believe may be of interest to you. You may opt out of receiving this promotional content by following the instructions located in each communication we send you. If you unsubscribe from our marketing lists, we will continue to contact you regarding administrative matters related to your Emersya subscription and to respond to your direct requests. Where required by law, we will only send marketing communications with your consent; otherwise we will market and promote our solutions and services on the basis of our legitimate business interests.
We may reach out to you by telephone to discuss other Emersya solutions and/or services you might be interested in. If you have an online meeting scheduled with an Emersya representative, we may record and transcribe the call. You will be notified before the recording starts and will have the opportunity to opt-out of the call being recorded.
We may use information collected from third-party service providers and other sources in combination with other information we collect through other channels (as described in this Privacy Policy) for the purposes of providing you with personalised communications, updates, improved solutions, event promotion, and generally to improve your user experience.
2.4 Other purposes if we obtain your consent
We may use your data for additional purposes — for example, to collect customer feedback or create testimonial content — when you give us consent to do so. If we wish to use your information for any other purpose, we will ask for your consent, and will only use your information for the purpose(s) for which you granted consent (unless we are legally required otherwise).
2.5 Legal basis for processing personal data (EEA and UK visitors only)
The legal grounds on which we collect and process your personal data depend on the type of information and the specific context in which it is collected. In most cases, we process your personal data when:
- you have given us your consent;
- the data is required to perform a contract or take steps prior to entering into a contract with you;
- the processing is necessary for our legitimate business interests and is not overridden by your data-protection rights or fundamental freedoms.
In certain situations, we may also be legally required to collect and process your personal data. When this is the case, we will inform you at the time of collection whether providing your data is mandatory and explain the consequences of not providing it. If we rely on our legitimate interests (or those of a third party) as the basis for processing your data, we will clearly explain what those interests are at the time your personal data is collected.
2.6 Profiling and automated processing for marketing purposes
As part of our marketing and relationship-management activities, Emersya uses certain forms of automated processing (profiling) to better understand and serve our prospective and existing customers.
We may use information you provide through our website forms or other interactions — together with additional business information that becomes available during our relationship — to enrich your contact profile in our customer relationship management (CRM) system.
This information helps us:
- assess your level of interest in our products and services through lead-scoring models;
- send you personalised communications and recommendations based on your expressed preferences or professional interests; and
- ensure that our marketing messages remain relevant and useful.
Profiling activities are carried out either with your consent (for example, when you subscribe to marketing communications) or on the basis of Emersya’s legitimate interest in developing its customer relationships and promoting its services.
You have the right to object at any time to the processing of your personal data for direct-marketing or profiling purposes. To do so, you can:
- click the “unsubscribe” link included in any marketing email, or
- contact us directly at contact@emersya.com
We do not use profiling or automated decision-making that produces legal or similarly significant effects on individuals. All decisions to contact or engage with you involve human review and oversight.
3. How we share your information
3.1 Service providers
We may share personal data with our third-party service providers to support our website, solutions and services. For example, we use service providers for data collection, hosting and processing, credit-card payments, customer service, project management or support. We require such third parties to use the personal information we transfer to them only for the purpose for which it was transferred and not to retain it for longer than is required for fulfilling that purpose.
3.2 Partners
We may share your personal data with our Emersya partners to:
- contact you in line with your communication preferences;
- provide complementary services such as 3D modelling or web-development services;
- provide customer-support services.
Partners are prohibited from using your personal data except for the purposes described herein, and are required to maintain the confidentiality of your data.
3.3 Compelled Disclosure
We may also disclose your personal information in the following circumstances:
- to comply with applicable law, regulation, court order or other legal process;
- to enforce your agreements with us, including this Privacy Policy;
- to respond to claims that your use of the Service violates third-party rights.
If our company is merged with or acquired by another company, that company will receive all personal data collected by Emersya as one of the transferred assets. In this event, you will be notified by email and/or a notice on our website of any change in ownership, uses of your personal data, and your choices regarding that data.
4. How we store and secure personal data
4.1 Data Storage and Security
At Emersya, we take the security of your personal data very seriously. We implement a range of technical, organizational and physical safeguards designed to protect your information from unauthorized access, use or disclosure. Your personal data is stored on secure servers within controlled environments that are continuously protected against potential security breaches.
In accordance with Articles 33 and 34 of the GDPR, in the event of a breach or suspected breach of personal data, Emersya and its subcontractors will notify the CNIL within 72 hours of discovery. In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, Emersya will notify the affected individuals without undue delay, primarily by email, in accordance with Articles 33 and 34 of the GDPR. This communication will describe the nature of the breach, its potential consequences, and the measures we have taken or propose to take to mitigate its effects.
4.2 International date transfers
We host and process personal data exclusively within the European Economic Area (EEA). Our production systems, backups and routine support operations are located in the EEA, and we do not transfer personal data to countries outside the EEA or allow remote access to such data from outside the EEA.
We select service providers (sub-processors) that likewise process personal data only within the EEA. A current list of these providers is available upon request.
If, in the future, an international transfer becomes necessary (for example, to engage a specialist provider), we will implement appropriate safeguards before any transfer takes place, such as:
- reliance on a European Commission adequacy decision (GDPR Art. 45), or
- Standard Contractual Clauses with necessary supplementary measures following a transfer impact assessment (GDPR Art. 46).
Where required, we will update this Privacy Policy and our sub-processor disclosures, and we will inform customers and users as appropriate.
4.3 Retention of Personal Data
The length of time we retain your personal data depends on the nature of the data and the purpose for which it was collected. Once the data is no longer necessary for the purposes for which it was obtained, we either delete it, anonymize it, or, if immediate deletion is not feasible, store it securely and restrict access until removal is possible. We keep personal data only for as long as we have a legitimate business or legal reason to do so — for example, to meet our legal obligations, resolve disputes, or enforce our contractual rights. When no such reason remains, we ensure that your data is safely deleted or anonymized, or stored in a secure and isolated environment until it can be permanently removed.
If you have chosen to receive marketing communications from us, we will retain information related to your marketing preferences for a reasonable period following your last interaction with our content, solutions or services. Information collected through cookies or other tracking technologies is also kept for a limited and reasonable duration from the time it was generated. For more detailed information please refer to our Cookie Policy.
The data we process on behalf of customers in connection with their subscription to specific Emersya solutions is stored and secured in accordance with the terms of our License and Services Agreement.
5. Your privacy and individual rights
In accordance with applicable data protection laws, you may have several rights concerning your personal data. These may include the right to:
- access and obtain a copy of the personal data we hold about you,
- request correction or deletion of your personal data,
- restrict or object to the processing of your data,
- request the transfer (portability) of your data to another entity,
- withdraw any consent you have previously given for data processing, and
- lodge a complaint with the relevant supervisory authority.
To exercise any of these rights, please contact us by email at contact@emersya.com
Or by Post:
To Emersya, For the attention of Régis RICHARD,
Stratégie Concept, 1300 Av. Albert Einstein Bât. 4, 34000 Montpellier
You may unsubscribe from our marketing communications at any time through any of the following methods:
- by clicking on the “unsubscribe” link located at the bottom of our e-mails
- updating your communication preferences
- by contacting us by email at contact@emersya.com
Please note: Emersya customers cannot opt out of receiving transactional emails related to their Emersya account, their subscription or use of our services.
6. Changes to this Privacy Policy
Emersya reserves the right to make changes to this privacy policy in order to ensure it reflects our current practices and remains in accordance with French and European data protection regulations. We will ensure that the most up to date version of our privacy policy is available publicly on our website.
7. Contact
If you have any comments or questions about Emersya’s privacy policy, please contact us at contact@emersya.com or using the contact form.