ExaBuilding pays close attention to protecting the personal data of its visitors, prospects and clients. This policy explains what data is collected, why, and what your rights are.
Data Controller
The controller of the data collected on this website is ExaBuilding, 3 Rue Mohamed Bayrem V, Sidi Daoud, La Marsa, Tunis, 2046, Tunisia.
Data Collected
Depending on the forms used, ExaBuilding may collect:
- first and last name;
- email address and phone number;
- company and job title, where applicable;
- information about your project or training request (sector, needs, indicative budget, chosen session, etc.);
- any information you voluntarily provide via our contact forms.
Purposes of Processing
This data is used to:
- respond to your requests for consulting, audits or training registration;
- send you the pricing information you requested;
- follow up on your enquiry;
- send you the newsletter, if you have consented;
- measure website traffic and, subject to your consent, show you relevant adverts on other platforms.
Retention Period
ExaBuilding retains prospect data for a maximum of three (3) years from the last contact, a period considered reasonable for commercial prospecting purposes, unless a legal obligation requires a different duration.
For clients, data is retained for the duration of the business relationship, plus any retention periods required by applicable regulations (in particular accounting and tax regulations).
Recipients and Processors
Your data may be shared with the following providers, strictly within the scope of their mission:
- Resend, for sending transactional emails (confirmations, notifications);
- Google Analytics, for website audience measurement (only if you have accepted audience measurement cookies);
- Microsoft Clarity, for session recording and heatmaps (only if you have accepted audience measurement cookies);
- Meta (Facebook, Instagram) and LinkedIn, for measuring and, where applicable, personalising our advertising activities (only if you have accepted marketing cookies);
- OVH, our hosting provider, for the secure storage of the website and its database.
ExaBuilding does not sell or rent your personal data to third parties.
Cookies
Cookies (and similar technologies, such as your browser's local storage) can serve several purposes. There are therefore different types on our website.
Necessary (technical) cookies
Our website uses technical cookies and local storage data that are essential to its proper functioning. They are used in particular to remember your cookie consent choice and to secure our forms. These cookies are always active and do not require your consent.
Audience measurement cookies
Subject to your consent, our website uses audience measurement cookies (Google Analytics) and session recording (clicks, scrolling) and heatmap cookies (Microsoft Clarity). These cookies help us understand how the site is used, so we can improve its content and usability.
Cookieless audience measurement (Umami)
To understand how the site is used, we also use Umami, an audience measurement solution hosted on our own servers in France. It sets no cookies, does not store your IP address and cannot track you across other websites. It is used only to produce anonymous statistics: pages viewed, where visits come from (for example a search engine or a social network), country, device type and browser, and form submissions, without their content.
This solution is configured to fall within the consent exemption provided by the CNIL (the French data protection authority) for certain audience measurement tools, which is why it does not appear in the cookie banner. Data is kept for a maximum of 25 months and then deleted automatically. It is not shared with any third party.
You can object to this measurement at any time: Do not measure my visits. Your choice is stored in your browser’s local storage for 13 months; clicking the link again turns measurement back on.
Marketing cookies
Subject to your consent, our website uses marketing cookies, in particular the Meta Pixel (Facebook, Instagram) and the LinkedIn Insight Tag. These cookies are used to measure the effectiveness of our communications and, where applicable, to show you relevant adverts on these platforms. Refusing these cookies has no impact on your use of the website.
Consent to audience measurement and marketing cookies is collected via the banner shown on your first visit, which lets you accept, reject or customise your choice by category. You can change your choice at any time by clicking ‘Manage cookies’, available at the bottom of every page. Your choice is kept for 6 months, after which you will be asked again. If you withdraw your consent, the related cookies are deleted from your browser.
Which cookies are set on our website?
- exabuilding-cookie-consent (ExaBuilding): remembers your cookie consent choice; stored in your browser's local storage and not shared with any third party; kept for 6 months.
- Google Analytics (_ga, _ga_*): audience measurement; set by Google; 13 months.
- Microsoft Clarity (_clck: 1 year; _clsk: 1 day): session recording and heatmaps; set by Microsoft, which also uses cookies on its own domains (MUID, CLID…) kept for up to 13 months.
- Meta Pixel (_fbp, and _fbc if you arrive from a Meta ad): advertising measurement and targeting; set by Meta; 90 days. The Pixel also stores lastExternalReferrer and lastExternalReferrerTime in your browser’s local storage.
- LinkedIn Insight Tag: advertising measurement and targeting; cookies set by LinkedIn on its own domains: bcookie (1 year), li_sugr (90 days), lidc (1 day) and __cf_bm (30 minutes, bot protection); li_fat_id (30 days) on our domain if you arrive from a LinkedIn ad; and li_adsId in your browser’s local storage.
- exabuilding-umami-optout and umami.disabled (ExaBuilding): remember that you have opted out of Umami audience measurement; stored in your browser’s local storage only if you make this choice, not shared with any third party; kept for 13 months.
Your Rights
In accordance with applicable personal data protection regulations, you have the right to access, rectify, erase and object to your data. To exercise these rights, you can contact us at contact@exabuilding.com.
Security
ExaBuilding implements reasonable technical and organisational measures to protect your data against unauthorised access, loss or disclosure.
Changes to this Policy
ExaBuilding may amend this privacy policy from time to time. The version in force is the one published on this page.