Privacy Policy — Yuno

Last updated: September 1, 2025

At Yuno (SAS) — 508 avenue du 8 mai 1945, 69300 Caluire-et-Cuire — we pay particular attention to the protection of your personal data. This policy describes the personal data processing operations we implement through our website yunohr.com and the safeguards applied to protect your rights, in compliance with GDPR and French legislation.

Definitions

• Personal data: any information relating to an identified or identifiable natural person.
• Data subject: the natural person whose data we process.
• Processing: any operation applied to personal data (collection, recording, storage, consultation, deletion, etc.).
• Processor: provider who processes data on our behalf.
• Cookie / tracker: small file or identifier stored on your device during browsing.

1. Who is responsible for processing?

Yuno (SAS)
508 avenue du 8 mai 1945, 69300 Caluire-et-Cuire — France
GDPR contact email: william.peninon@yunohr.com

We have not designated a Data Protection Officer (DPO) to date. We will reassess this need under Article 37 of the GDPR if our activity changes.

2. Scope of application

• Website (product presentation, content, forms)
• Demo or contact requests
• Newsletter subscription
• Audience analysis and marketing optimization related to the showcase site

Note: Processing performed by our clients through the SaaS solution is covered by separate contracts; we then act as a processor.

3. Data collected and sources

A. Identification and contact data

First name, last name, email address, phone number (e.g., forms, newsletter).

B. Navigation / technical data

IP address, pages viewed, visit duration, device type and browser, timestamp, logs. Collected via cookies and analytical trackers.

C. Marketing data

Interactions with our communications (opens, clicks) and data from advertising campaigns if you interact.

D. Data you do not provide

We do not collect sensitive data (health, racial origin, political opinions, religious beliefs, sexual orientation, biometric data, etc.).

4. Processing purposes and legal bases

• Responses to contact / demo requests: connection and commercial follow-up. Basis: consent / pre-contractual measures.
• Newsletter subscription management: information and email prospecting. Basis: consent.
• Audience measurement and site optimization: analyze and improve user experience. Basis: consent for non-essential cookies.
• Marketing actions: advertising campaigns and conversion tracking. Basis: consent or legitimate interest depending on context.
• Security and fraud prevention: ensure site integrity and availability. Basis: legitimate interest.

5. Data recipients / processors

• Internal Yuno teams according to access needs
• Technical providers and mandated tools (hosting, CRM, emailing, analytics)

We choose reliable processors and do not transfer your data outside the EU without contractual guarantees.

6. Retention periods

• Contact data: 3 years from last contact
• Newsletters: until unsubscribe
• Navigation data / analytical cookies: 13 months for cookies, max. 25 months for trackers
• Accounting / invoice data: 10 years
• Consent evidence: 3-year history, evidence kept minimum 6 months

7. Security and confidentiality

• TLS/HTTPS encryption
• Hosting in France / EU
• Access control and authorization management
• Multi-factor authentication (MFA)
• Access logs and monitoring
• Backups and recovery plans
• Updates and vulnerability management
• Training and confidentiality clauses for employees and processors
• Incident management procedures

8. Cookies and trackers

• Strictly necessary cookies: site operation (session, preferences)
• Analytical cookies: measure and improve traffic (Google Analytics)
• Marketing cookies: personalize ads, only with consent

Consent banner available from first visit and modifiable via "Manage my cookies".

9. Your rights

Right of access, rectification, erasure, restriction, opposition, portability, withdrawal of consent, complaint to the CNIL.

To exercise your rights: korentin.mozon@yunohr.com

10. Transfers outside the European Union

Currently none. If future need, only with contractual guarantees and prior information.

11. Incident notifications

Yuno notifies the CNIL and data subjects in case of data breach presenting a high risk.

12. Evidence retention & legal obligations

Certain information (accounting, billing, contractual evidence) retained according to legislation: 10 years for accounting documents.

13. Subcontracting and contractual obligations

We only share your data for contract execution or if required by law. Processors sign strict GDPR clauses.

14. Complaints and claims

Initial contact: william.peninon@yunohr.com
If dissatisfied, contact the CNIL.

15. Policy modifications

We reserve the right to update this policy to follow regulatory, technical or organizational developments. The date of the last update will be indicated.

Annex A — Summary table of processing