Privacy Policy

The data controller is Zozio SAS, a simplified joint-stock company registered in the Trade and Companies Register, with its registered office at 12, rue Chabanais, 75002 Paris, France.

For any question relating to this policy or the exercise of your rights, write to privacy@zozio.tech or by post to the registered office address, for the attention of the Data Protection Officer.

We only collect the data necessary for the purposes described below. We do not sell any personal data and do not carry out advertising profiling.

Data you provide to us

• Contact and demo forms — surname, first name, business email address, company, job title, telephone number if you provide it, and the content of your message or of your industrial context.
• Resource downloads — name, business email address and company, so that we can send you the requested document.
• Sales and support exchanges — history of our conversations by email, telephone or video conference.
• Job applications — CV, cover letter and any document you attach of your own accord.

Data collected automatically

• Browsing data — pages viewed, date and time, length of visit, referring page, type of device and browser, language.
• IP address, truncated or anonymised as soon as the purpose allows.
• Cookie identifiers and similar technologies, under the conditions described in our cookie policy.

ROBIN account data

• Identification — surname, first name, business email, role and scope of access rights.
• Usage logs — logins and actions performed in the application, for traceability and security purposes.

Each processing activity relies on a legal basis within the meaning of Article 6 of the GDPR.

ROBIN processes scheduling and operations tracking data: work orders (WO), routings, workloads, capacities, WIP location, skills and authorisations, time spent.

Some of this data can be linked to an identified operator — assignment to a workstation, operation times, skills held. In this context, our industrial client is the data controller and determines the purposes: planning, production tracking, skills management. Zozio acts as a data processor, on the client's instructions, under the conditions set out in the contract and its data protection addendum concluded pursuant to Article 28 of the GDPR.

If you are an operator or employee of a company that uses ROBIN and wish to exercise your rights over this data, send your request to your employer, the data controller. We assist them in handling your request.

We never use this data to assess an employee's individual performance on our own behalf, nor to train models for other clients without prior written agreement.

Your data is accessible to the internal Zozio teams who need it: sales, marketing, product, support and administration. Access is restricted by role.

We use technical service providers acting as processors, bound by contract and subject to confidentiality and security obligations:

Your data may also be disclosed to our legal and accounting advisers, or to the competent authorities upon legal request.

We favour service providers that host data within the European Union. Where a transfer to a third country is necessary, it is governed by one of the mechanisms provided under Chapter V of the GDPR: an adequacy decision by the European Commission, or standard contractual clauses supplemented by additional technical measures following a transfer impact assessment.

The list of transfers currently in place and the associated safeguards can be obtained upon request at privacy@zozio.tech.

We keep data for the period strictly necessary for the purpose pursued, then delete or anonymise it.

We implement technical and organisational measures proportionate to the risk:

• Encryption of data in transit and at rest.
• Individual authentication, role-based access management and the principle of least privilege.
• Logging of accesses and sensitive actions.
• Segregation of development, test and production environments.
• Regular backups and tested restoration procedures.
• Periodic access reviews and staff awareness training.

In the event of a data breach likely to result in a risk to your rights and freedoms, we notify the CNIL within 72 hours and, where the risk is high, we inform the individuals concerned.

In accordance with the GDPR and the French Data Protection Act, you have the following rights:

• Access — obtain confirmation that your data is being processed and receive a copy of it.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request the deletion of your data, within the limits of our legal obligations.
• Restriction — request the temporary freezing of a contested processing operation.
• Objection — object to processing based on legitimate interest, in particular direct marketing.
• Portability — receive the data you have provided to us in a structured format.
• Withdrawal of consent — at any time, where processing is based on your consent.
• Post-mortem directives — arrange what happens to your data after your death.

Send your request to privacy@zozio.tech. We reply within one month, extendable by two months for complex requests. Proof of identity may be requested if there is reasonable doubt about your identity.

If the reply does not satisfy you, you may lodge a complaint with the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or online at cnil.fr.

The website uses cookies and similar technologies. Non-essential cookies are only placed after your consent, which you can withdraw at any time.

Details of the cookies, their purpose and their duration are set out in our dedicated policy.

Cookie policy

This policy may change in line with our services, tools, or regulations. The date of the last update appears at the top of the page. In the event of a material amendment, we will inform you by an appropriate means, including by email if you are a client or subscriber.