Privacy Notice (GDPR)
Version 2026-10-02
1. Who is responsible
The controller is OCTINNOV SAS, 9 avenue MONTCLAR - NICE - FRANCE (RCS NICE 2026). Privacy contact: privacy@tensornumerics.com.
2. What we collect, why, and on what basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Issue your evaluation code, verify your email, provide access | Name, company, email, code, activation and expiry dates | Art. 6(1)(b): steps at your request before entering a contract |
| Security, abuse prevention, enforcing the license, audit trail | IP address, user agent, sign-in times, last activity, administrative actions | Art. 6(1)(f): our legitimate interest in protecting our software and IP |
| Proof that you accepted the license and privacy notice | Document versions, timestamp, IP address, user agent | Art. 6(1)(f): legitimate interest in establishing and defending legal claims |
| Extension requests: assess your request, contact you, keep you on our evaluators list | Reason, use case, team size | Art. 6(1)(a): your consent (given when you tick the box; withdraw at any time) |
| Product news (optional) | Name, email | Art. 6(1)(a): your consent (separate, optional checkbox) |
| Service messages (code, expiry, extension, suspension) | Name, email | Art. 6(1)(b) and (f) |
Providing name, company and email is necessary to receive an evaluation. Everything else is optional. We do not use automated decision-making or profiling that produces legal effects on you.
3. Recipients and transfers
Your data is accessible to authorised staff of OCTINNOV SAS and to processors acting on our instructions under Art. 28 GDPR: hosting provider, email delivery provider. [List your actual processors and their locations here.] We do not sell personal data. Where a processor is located outside the EEA, transfers rely on an adequacy decision or Standard Contractual Clauses.
4. Retention
- Evaluation records: deleted or anonymised 24 months after your last evaluation ends.
- Evaluators list (consent): up to 36 months after the last evaluation, or until you withdraw consent.
- IP addresses and user agents: removed after 90 days.
- After erasure, only anonymised records (consent versions and timestamps, audit entries without personal data) remain.
5. Your rights
You have the rights of access, rectification, erasure, restriction, objection (including to processing based on legitimate interests), data portability, and to withdraw consent at any time without affecting earlier processing. Use the self-service page Your data & opt-out (secure link by email), or write to privacy@tensornumerics.com. We answer within one month.
You may complain to the French supervisory authority, the CNIL (cnil.fr), or to the authority of your own EU/EEA country.
6. Cookies
We only use a strictly necessary session cookie in the administration console and no advertising or analytics cookies on this access portal; therefore no cookie banner is displayed. If this changes we will ask for your consent first.
7. Security
Data is transmitted over HTTPS, access codes are stored only as keyed hashes, administrator access requires two-factor authentication, and administrative actions are logged.