Privacy Policy | AB Cube

Update Date: 07/11/2025

Privacy and Data Processing Policy and Use of Cookies

Personal data means any information relating to an identified or identifiable natural person. A natural person is identifiable when he or she can be identified, directly or indirectly, through an entry such as: Name, Identification number, Location data, Online identifier, or any element specific to his or her identity.

It is recalled that, in accordance with the GDPR, personal data must be:

a. Processed lawfully, fairly and transparently with respect to the data subjects;

b. Collected for specified, explicit and legitimate purposes and not further processed in a way incompatible with those purposes.

c. Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

d. Accurate and, where necessary, kept up to date.

e. Kept in a form which permits identification of data subjects no longer than is necessary for the purposes for which they are processed;

f. Processed in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical and organizational measures.

AB CUBE (hereinafter “AB CUBE” or “we”) is committed to protecting your privacy, the use of your personal data, and compliance with the GDPR.

This Policy available on the site constitutes the current version of our privacy policy. It may be modified and updated by us, either due to changes in applicable legislation or changes in our practices. We therefore invite you to consult it regularly.

I/ Privacy and Personal Data Processing Policy for Website and User interactions with AB Cube

AB CUBE, as data controller, processes personal data in accordance with Privacy Policy.

This policy explains how we collect and use your personal data:

When you browse our Website (“The Site”): Data may be collected automatically through cookies or via online forms.
When you interact with AB CUBE: for example, through job applications, commercial inquiries, customer support, billing, event registration, or requests for information about AB Cube’s software).

By using “AB CUBE.com” website (the “Site”), Users (“Users” or “you”) acknowledge and accept that AB CUBE processes certain personal data as described in this Policy.

Who is responsible for processing the personal data collected?

AB CUBE is the data controller within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter “GDPR”).

As such, as data controller, AB CUBE defines and limits the data to be collected in accordance with the purposes of processing.

SARL with share capital of €20,000

Headquarters: 34 boulevard des Italiens, 75009, Paris, France

Registered with the RCS of Bobigny under number 491 191 194

EU VAT: FR50490191194

Tel: 09 83 97 97 99

Who is the Data Protection Officer (DPO) and how to contact them?

We have appointed a Data Protection Officer (“DPO”) who will be your contact for any questions regarding your data.

You can reach them at the following contact details:

Email: dpo@ab-cube.com

What personal data does AB CUBE collect? For what purpose? Can I refuse this collection?

We collect various personal data about you and process it for the purposes described below. Your data will be kept in compliance with applicable regulations.

Purpose	Legal Basis	Data collected	Retention period
Customer Support Management	Performance of the contract between customer organization and AB Cube, AB CUBE’s legitimate interest, and legal obligations	Identification data, professional data (for example: last name, first name, professional e-mail, professional telephone number, position, registration, questions asked and associated answers ...)	5 years from the end of the contractual relationship
Customer relationship management	Performance of the contract between customer organization and AB Cube	Identification data, professional data	5 years from the end of the contractual relationship
Information about AB CUBE software	Performance of the contract between customer organization and AB Cube	Identification and professional data	The duration of the contractual relationship
Billing management	Performance of the contract between customer organization and AB Cube, Legal obligations	Identification data	10 years from the date of issue of the invoice
Marketing and commercial communication	AB CUBE’s legitimate interest (for professionals)	Identification and professional data	3 years from your last activity
Event registrations	AB CUBE’s legitimate interest	Identification data, management data	3 years from your last activity
Recruitment	Your consent or your legitimate interest as a jobseeker or our legitimate interest as a recruiter.	Identification and professional data	The time required to review the candidature and then, with your consent, two years from the date of the candidature.
Supplier management	AB CUBE’s legitimate interest	Identification and professional data	5 years from the end of the contractual relationship

Are my data shared with third parties? For what purpose and where are these third parties located?

AB CUBE will always prioritize service providers located within the European Union.

Any transfer of your data outside the EU will be carried out with appropriate safeguards, in compliance with applicable data protection regulations. Copies of these safeguards can be provided upon request to dpo@ab-cube.com.

These third parties may provide technical services (data hosting, Site features), social networks (e.g., LinkedIn), or be affiliated companies of AB CUBE. In any case, your data will not be transmitted to unrelated third parties. They may, however, be disclosed if required by law or regulations, in particular for legal proceedings or requests from judicial/administrative authorities.

How does AB CUBE ensure the security and confidentiality of my personal data?

AB CUBE is committed to protecting the Personal Data we collect or process against loss, destruction, alteration, unauthorized access, or disclosure.

We therefore implement all appropriate technical and organizational measures, depending on the nature of the Data and the risks involved in its Processing. These measures are designed to preserve the security and confidentiality of your Personal Data. They may include practices such as limited access to Personal Data by persons authorized by virtue of their duties, pseudonymization, or encryption.

In addition, our practices and policies and/or physical and/or logical security measures (secure access, authentication process, backup copies, software, etc.) are regularly reviewed and updated as necessary.

Does the Site contain third-party content or links? Is AB CUBE responsible for them?

Our Site may contain elements and links to other sites controlled by third parties. This includes, for example, links to websites and social networks (such as LinkedIn, YouTube, or others) (hereinafter referred to as “third parties”).

AB CUBE has no access to or control over any content owned and operated by these third parties to which the Site links. For more information, we recommend that you consult the notices on the sites owned by these third parties.

In this context, AB CUBE declines all responsibility for these sites, elements, cookies, or other items owned and operated by third parties.

What rights do I have over my personal data collected and processed by AB CUBE?

The GDPR grants you a number of rights over your personal data:

Right of access, including the right to obtain copies of all your personal data, as well as essential details about how the data is processed.
The right to obtain the rectification of your personal data as soon as possible, and the right to have any incomplete, inaccurate, ambiguous, or outdated personal data completed.
Right to erasure of your personal data, once its processing is no longer necessary, or once AB CUBE has withdrawn its consent or objected to its processing; or once its collection, use, communication, or storage is prohibited;
Right to restriction of processing of personal data;
Right to portability of personal data; and
Right to object to the processing of your personal data (including the right not to be subject to a decision based solely on automated processing);
Right to withdraw your consent at any time.

To exercise your rights, you can contact us at any time, free of charge, at the following address: dpo@ab-cube.com.

If there is any doubt about your identity when you request your rights, you may be asked to provide proof of identity.

How can I express my choices regarding the use of my personal data?

You can withdraw your consent at any time, free of charge, by:

Clicking on the unsubscribe link at the bottom of our communications, or
Contacting us at dpo@ab-cube.com, particularly if the communication does not contain an unsubscribe link.

Who should I contact if I believe that AB CUBE is not fulfilling its obligations?

If you believe that AB CUBE is not complying with its obligations under applicable laws and regulations relating to the protection of personal data, in particular with regard to the security of your data or the exercise of your rights, you have the option of:

First, contacting our DPO at dpo@ab-cube.com
If this is not conclusive, submit a complaint to the local supervisory authority (for France: the CNIL, 3 place de Fontenoy 75007 Paris, https://www.cnil.fr).

II/ Privacy and Personal Data Processing Policy for data recorded in AB Cube’s Software

AB CUBE, as a processor, is authorized to process personal data on behalf of its customers in connection with the performance of the services covered by the general terms and conditions of subscription to AB Cube’s Software.

What processing do we carry out as a subcontractor in connection with our Software?

As a processor, we carry out:

Hosting and maintenance of data for the Software
Management of customer requests relating to the Software

The purpose of these processings is to provide the maintenance and hosting services included in the SaaS service.

If you have decided to subscribe to our AI module offerings through IntakEasy:

Vigilance Case intake
- Help for Vigilance Case Creation from source data
- Help for Vigilance Case update from source data
- Case summarization from a narrative

For customers wishing to obtain further information, please contact AB CUBE, who will send you the relevant documents: dpo@ab-cube.com.

What are AB CUBE’s obligations to our customers?

As a subcontractor, AB Cube undertakes to:

Process personal data solely for the purpose(s) covered by the subcontracting agreement.
Process personal data in accordance with the documented and contractual instructions of the data controller, as set in the appendix entitled “Health Information Systems Security Reference Framework” to this agreement. If AB CUBE, as a processor, considers that an instruction constitutes a violation of the European Data Protection Regulation or any other provision of Union law or Member State law relating to data protection, the data controller shall be promptly informed.
If AB CUBE is required to transfer personal data to a third country (i.e., a country outside the European Union or the European Economic Area) or to an international organization under Union law or Member State law to which it is subject, the data controller shall be informed of the legal obligation prior to processing, unless such transfer is done in the event of an explicit request by a competent authority (important reasons of public interest).
Ensure the confidentiality of personal data processed within the framework of the contract between AB CUBE and its customers.
Consider the principles of privacy by design and by default.
Inform our customers in the event of subsequent subcontracting involving personal data, imposing the same obligations to which AB CUBE is subject. You can contact our DPO to obtain a list of subsequent subcontractors we already use at the following address: dpo@ab-cube.com;
Inform and assist the data controller in fulfilling their obligation to respond to requests from data subjects to exercise their rights;
Notify the data controller of any personal data breach as soon as possible after becoming aware of it. This notification shall be accompanied by any useful documentation to enable the data controller to potentially notify the competent supervisory authority and any data subjects of this breach.
To assist the data controller in its impact assessments (AIPD). In this context, AB CUBE provides its clients with an AIPD template, which must be completed with their own information.
At the end of the provision of services relating to the processing of this data, undertake to:
Not using the data for purposes other than those specified in the contract
1. Not using the data on its own behalf or on behalf of a third party
2. Using the data Only for the duration of the contract
3. Return the data at the end of the contract
Maintain Registers of all categories of processing activities carried out on behalf of the data controller.
Make available to the data controller the documentation necessary to demonstrate compliance with all of its obligations and to enable audits, including inspections, to be carried out by the data controller or another auditor mandated by it, and contribute to these audits.

What are customers’ obligations to AB CUBE?

As the data controller, you agree to:

Provide AB CUBE with the data specified in the contract or in the context of your projects
Document in writing any instructions concerning the processing of data by AB CUBE as a processor
Ensure, in advance and throughout the processing period, that AB CUBE complies with the obligations set out in the European Data Protection Regulation.