Privacy Policy
How we collect, use, and protect your data
Effective date: February 2026
Data controller: INCONCRETO FRANCE, 28 Boulevard du Colombier, Rennes 35000, France
What We Collect
- Account information: name, email address, role, function, and department
- Interview responses and scores you submit
- Session data: timestamps, progress, and completion status
Why We Collect It
- To deliver and manage interview assessments
- To calculate scores and generate project benchmark reports
- To allow authorized consultants and administrators to review responses
- To maintain your account and authenticate your sessions
Legal Basis (GDPR Art. 6)
- Contractual necessity: processing your responses to deliver the assessment service
- Legitimate interest: improving the tool and generating aggregate insights
Who Can See Your Data
- Consultants and administrators assigned to your organization
- Other client users within your organization (limited to interview status and progress)
- Your individual responses are visible only to authorized consultants and administrators
Data Retention
- Active assessments: retained for the duration of the engagement plus 12 months
- Completed assessments: retained for 36 months or as contractually agreed
- Account data: deleted within 30 days of account closure
Hosting & Security
- Hosted on Vercel (USA) with encrypted connections (TLS)
- Database on Supabase PostgreSQL (EU/US) with role-based access controls
- Standard Contractual Clauses (SCCs) are in place for non-EU data transfers
Your Rights
Under GDPR, you have the right to access, correct, delete, or export your personal data. You may also object to processing based on legitimate interest.
Contact
Data Protection Officer: Jean Jacques Loheac
Email: dpo@inconcreto.com