GDPR commitment.
Jemmo complies with the regulations on the protection of personal data, in particular regulation 2016/679 of 27 April 2016 (GDPR) and the amended French Data Protection Act.
In this context, Jemmo has appointed a data protection officer responsible for ensuring compliance with the regulations and for responding to all requests for information and/or advice relating to personal data.
Jemmo undertakes to ensure the confidentiality, security, integrity, availability and retention of the personal data processed and/or hosted, in accordance with applicable laws and regulations.
Data collected.
Data is collected and used by Jemmo to manage Clients' access and actions within the Services offered and to improve and personalize those Services.
Creating an Account and subscribing to the Services involves the collection and automated processing of information and data necessary to provide the Services.
Data relating to Clients, their staff, their customers and/or their activities may be collected, hosted, used, retained and shared with Jemmo's partners in order to provide the Services.
Data categories
- Identification — first name, last name, email address, phone number
- Account — credentials, password (hashed), preferences
- Activity — connection logs, searches, candidate lists, usage history
- Candidate data — imported, sourced or enriched profiles (public data or provided by the Client)
- Billing — billing details, payment history (via Stripe)
Legal bases.
The processing of personal data by Jemmo is based on the following legal grounds:
- Contract performance — providing the Jemmo service (account, sourcing, app)
- Legitimate interest — aggregation of public professional profiles for B2B introductions, in compliance with GDPR principles
- Explicit consent — newsletter and non-strictly-necessary cookies
- Legal obligation — accounting retention, fraud prevention, anti-money-laundering
Security and hosting.
The data collected by Jemmo is processed and stored with the Site's and the Platform's host under conditions designed to ensure its security.
| Host | FLY.IO — Located in France (EU) |
| Encryption | TLS 1.3 in transit, AES-256 at rest |
| Authentication | OAuth + 2FA available |
| Backups | Daily, kept for 30 days |
| Audit logs | Kept for 12 months |
Retention period.
The data collected is kept for one year beyond the period necessary to achieve the stated purposes. Beyond that, it is kept for statistical purposes only.
| Active client account | Duration of the contractual relationship |
| Inactive client account | 3 years after last login |
| Billing data | 10 years (accounting obligation) |
| Public candidate profiles | Continuously updated or deleted |
| Connection logs | 12 months |
| Newsletter | Until unsubscribe, +3 years |
Your rights.
Under the applicable data protection legislation, you have the following rights:
- Right of access — confirmation of the processing of your data, access to the data, purposes, categories.
- Right of rectification — correction of inaccurate data.
- Right to erasure — deletion of data processed unlawfully or whose purpose is no longer relevant.
- Right to restriction — restriction of processing in certain circumstances.
- Right to portability — receiving your data in a structured format and transferring it.
- Right to object — objection to processing for reasons relating to your particular situation.
How to exercise them
The Client may exercise a request regarding these rights directly with Jemmo at contact@jemmo.io. Response time: 30 days maximum.
Complaint
Where applicable, a complaint may be lodged with the French Data Protection Authority — cnil.fr.
Amendments.
Jemmo reserves the right to amend this privacy policy at any time. These amendments may be made necessary to comply with legal developments, or for strategic or technical reasons.
The new version will take effect on the date of its publication. Jemmo undertakes to make its best efforts to inform the Client directly of any substantial change.
DPO contact.
General enquiries
DPO postal address
Guillaume LEPERCQ
99 avenue Achille Peretti
92200 Neuilly-sur-Seine, France
Supervisory authority
Need a PDF version?
All our legal documents are available as a timestamped PDF for your records and your legal department.