Privacy Policy

Thank you for choosing to be part of our community at Deep Mine SAS (“Harmattan AI,” “we,” “us,” or “our”). We are committed to protecting your personal information and your right to privacy in accordance with European Union General Data Protection Regulation (“GDPR”), the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”), the California Online Privacy Protection Act (“CalOPPA”), and other applicable data-protection laws in France and worldwide.

If you have any questions or concerns after reading this notice, please contact us:

Email: contact@harmattan.ai

Contact page: https://www.harmattan.ai/contact

This Privacy Policy explains how Harmattan AI collects, uses, discloses, and safeguards your personal data when you interact with our website. Our website is intended for a professional audience and reflects our commitment to data protection and privacy best practices.

1. WHO WE ARE (DATA CONTROLLER)

Deep Mine SAS

1 rue du Mail, 75002 Paris, France

For the purposes of the GDPR we are the “data controller.”

2. INFORMATION WE COLLECT

We may collect the following categories of personal data:

• Identifiers: e.g., first and last name, email address, postal address, and phone number; only if you explicitly submit them via our contact form.
• Internet or electronic activity: e.g., IP address, and website interaction data collected via a third-party web analytics service.
• Geolocation data: approximate location based on your IP address.

We do not collect sensitive personal data or knowingly collect data from minors under applicable data protection laws.

3. HOW WE COLLECT DATA

We collect personal data through the following means:

• Direct interactions: When you submit a contact form or email us, the information you provide is stored in our internal customer relationship management (CRM) system and used solely for internal purposes and to respond to you.
• Automated technologies: Cookies and similar tracking technologies set by a third-party web analytics provider.
• Job applications: If you apply for a role, your data is collected via a third-party recruitment management platform acting on our behalf and securely transferred to us.

4. PURPOSE AND LEGAL BASIS FOR PROCESSING (GDPR Art. 6)

We process your personal data for the following purposes and on the following legal bases:

• Responding to enquiries – Consent or legitimate interests
• Storing contact data in our CRM – Legitimate interests
• Sending follow-up emails – Legitimate interests
• Website analytics, performance, and security – Consent (where required) and legitimate interests
• Compliance with legal obligations – Legal obligation

5. COOKIES AND TRACKING TECHNOLOGIES

We use a third-party web analytics service to understand how visitors engage with our site. We do not use advertising, or remarketing cookies.

You may refuse analytics cookies through our cookie banner or your browser settings.

“Do Not Track” signals (CalOPPA): Our site currently does not respond to DNT headers.

6. HOW WE SHARE AND DISCLOSE DATA

We do not sell, rent, or trade personal data. We may disclose your data only to:

• Third-party services essential to the operation of our website, under EU Standard Contractual Clauses;
• Service providers acting strictly under our instructions;
• Authorities, when required to do so by law or legal process.
  

7. INTERNATIONAL TRANSFERS

Your data may be processed in countries outside the European Economic Area (EEA). In such cases, we rely on Standard Contractual Clauses or other approved safeguards to ensure adequate protection.

8. YOUR RIGHTS

Under GDPR (EU/EEA residents):

You have the right to:

• Access your personal data
• Rectify inaccurate or incomplete data
• Request erasure ("right to be forgotten")
• Restrict or object to processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with your local data protection authority (e.g., CNIL in France)
  

Under CCPA/CPRA (California residents):

You have the right to:

• Know what personal data we collect and how we use it
• Request deletion or correction of your personal data
• Opt out of sale or sharing of personal data (we do not sell or share)
• Be free from discrimination for exercising your privacy rights

To exercise your rights, email contact@harmattan.ai or use the contact form. We will respond within 45 days.

9. DATA RETENTION

We retain personal data only as long as necessary for the purposes described in this policy. Contact data stored in our CRM is reviewed annually. Analytics data is retained unless you withdraw consent earlier.

10. SECURITY

We implement appropriate administrative, technical, and physical safeguards to protect your data. However, no method of transmission over the Internet is completely secure.

11. CHILDREN’S PRIVACY

Harmattan AI’s website is intended for a professional audience and is not directed at children who are considered as minors under applicable data protection laws. Minors are not permitted to use this website or submit any personal data through it.

If we become aware that personal data has been submitted by a minor, we will delete that information as soon as possible.

12. THIRD‑PARTY LINKS

Our website may contain links to external sites that are not operated by Harmattan AI. We are not responsible for the content or privacy practices of such third-party sites. Please review their privacy policies before interacting with them.

13. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We encourage you to revisit this page periodically to stay informed about how we protect your personal data.

CONTACT

Deep Mine SAS – contact@harmattan.ai – https://www.harmattan.ai/contact

Last updated: 25 June 2025