1. Data Controller

The data controller for personal data is:

4D CONCEPT
41-43 avenue du Centre
78180 Montigny-le-Bretonneux
Telephone: 01 61 08 50 20
Website: https://www.4dconcept.fr
Data protection contact: dpo@4dconcept.fr

2. Personal Data Collected

Depending on the services used and the information you provide to us, 4D CONCEPT may collect the following categories of data:

• last name and first name;
• email address and telephone number;
• job title, company, and other professional information;
• content of requests sent to 4D CONCEPT;
• preferences regarding our communications;
• data relating to the sending, receipt, opening, and use of our emails;
• curriculum vitae, cover letter, and information provided as part of an application;
• technical data relating to visits to our website.

4D CONCEPT strives to collect only the data necessary for the purposes described in this policy.

3. Contact Forms

Information provided through our forms is used to process your request and provide you with a response.

Depending on the nature of your request, processing is based on:

• 4D CONCEPT’s legitimate interest in responding to requests addressed to it;
• the performance of pre-contractual measures taken at your request;
• the performance of a contract or service to which you have subscribed;
• your consent, where required.

Following this exchange, your data may be stored in our customer or prospect database when necessary to continue the relationship, perform a contract, or, subject to applicable regulations, send professional communications.

4. Applications

Curriculum vitae, cover letters, and other information provided as part of an application are used to review the application and manage the recruitment process.

This data is accessible to authorized personnel at 4D CONCEPT and, where applicable, to its service providers involved in the recruitment process.

Unless early deletion is requested, data relating to an unsuccessful application may be retained for a maximum period of two years from the last contact with the candidate.

5. Professional Communications and Newsletters

When you subscribe to a newsletter or agree to receive our communications, 4D CONCEPT may use your email address and professional information to send you news, invitations, information about its offerings, or other professional content.

Depending on the situation, these communications are based on:

• your consent;
• 4D CONCEPT’s legitimate interest in communicating with its professional customers and prospects, when the subject of the communication is related to their business and regulations permit.

You can unsubscribe at any time using the link provided for this purpose in each message or by writing to dpo@4dconcept.fr.

6. Use of Tracking Pixels in Our Emails

Some emails sent by 4D CONCEPT may contain tracking pixels.

A tracking pixel is a very small image, usually invisible, loaded from a remote server when the message is opened.

Depending on the configuration used, this device may collect the following information:

• the fact that an email has been opened;
• the date and, where applicable, time of opening;
• the type of device, software, or email client used;
• the IP address and an approximate geographic location that may be derived from it;
• the identifier associated with the recipient or the campaign concerned.

The same email may be viewed on multiple devices. The choice expressed regarding the use of pixels is associated with the email address concerned and applies to the different devices from which emails may be viewed.

6.1 Purposes

Depending on the communications concerned, pixels may be used to:

• measure the audience and effectiveness of our communications;
• establish opening statistics;
• improve the relevance of our content;
• adapt the content or frequency of our mailings;
• identify recipients who have become inactive;
• maintain the deliverability of our emails.

Data that has been effectively anonymized may be used to produce aggregate statistics.

6.2 Consent and Exempt Pixels

When the use of a pixel is not strictly necessary for the requested service, particularly when it is used to individually measure marketing performance, personalize communications, or adjust mailing frequency, its use is subject to your prior consent.

This consent may be collected when you provide your email address or subsequently by means of a message without tracking devices subject to consent.

Your silence or lack of response does not constitute consent.

Some pixels may be used without consent when they are strictly necessary for an expressly requested service, particularly to ensure the security or deliverability of emails, subject to compliance with the conditions provided by regulations.

When the pixel is used exclusively to manage deliverability and identify inactive recipients, the information collected is limited to what is strictly necessary.

6.3 Exercising Your Choice

When consent is required, you can accept or refuse the use of pixels just as easily. Your choice is recorded to be respected in subsequent mailings.

You can withdraw your consent or object to the use of pixels at any time:

• using the preference management link in our emails;
• by writing to dpo@4dconcept.fr.

Refusing or withdrawing consent to tracking pixels does not automatically unsubscribe you from our communications. You can continue to receive our messages without being individually tracked.

Complete unsubscription remains separately accessible using the link in each email.

After you withdraw your consent, the tracking operations concerned cease for future emails. 4D CONCEPT also takes reasonably necessary measures to prevent subsequent use of pixels present in previously sent messages.

6.4 Retention Period for Data from Pixels

Individualized data collected through tracking pixels for campaign measurement and optimization purposes is retained for a maximum period of six months from collection.

At the end of this period, it is deleted or effectively anonymized.

When the pixel is used exclusively to manage the deliverability of our communications and identify inactive recipients, only the date of the last known opening, recorded by day without time retention, is kept. This date replaces the previously recorded date.

The last opening date is deleted when the recipient is removed from the mailing list or when their contact data reaches the end of its retention period.

Aggregate statistics, when they have been effectively anonymized and no longer allow identification of a recipient, may be retained longer for business analysis purposes.

6.5 Service Provider Used

4D CONCEPT uses Brevo to manage its contacts and send its electronic communications.

In this context, Brevo acts as a processor on behalf of 4D CONCEPT and may process the data necessary for:

• managing contacts and mailing lists;
• sending messages;
• managing consents, preferences, unsubscriptions, and objections;
• managing deliverability;
• producing authorized statistics.

According to information provided by Brevo, the servers used for processing and storing its databases are located in the European Union.

7. Embedded Content from Other Websites

Pages and articles on this website may include embedded content from other websites, such as videos, images, or articles.

Embedded content behaves in the same way as if the visitor went directly to the third-party website.

These websites may collect data about you, set or read cookies and other trackers, and monitor your interactions with this content, particularly if you have an account connected to the service concerned.

When regulations require it, this content and trackers are only activated after obtaining your consent.

8. Statistics and Website Audience Measurement

This website uses Google Analytics to measure its audience and better understand its use.

When its use requires the setting or reading of cookies or other non-exempt trackers, Google Analytics is only activated after obtaining your consent through our cookie management tool.

You can accept, refuse, or withdraw your consent at any time using the cookie management module available on the website.

To learn more, you can consult the Google Analytics privacy policy.

9. Recipients and Processors

Personal data is accessible, within the limits of their duties, to authorized personnel at 4D CONCEPT.

It may also be processed by service providers that 4D CONCEPT uses to ensure:

• the operation and hosting of the website;
• audience measurement;
• application management;
• contact management;
• sending and authorized tracking of electronic communications.

These service providers, including Brevo and Google, operate within the scope of their respective missions and in accordance with applicable contractual provisions.

4D CONCEPT does not sell the personal data entrusted to it.

When certain processing involves a transfer of data outside the European Economic Area, 4D CONCEPT ensures that this transfer is based on a mechanism recognized by applicable regulations and is accompanied by appropriate safeguards.

10. Retention Periods

Personal data is retained for a period proportionate to the purpose of the processing:

• Contact requests and prospects: for the time necessary to process the request, then for a maximum of three years from data collection or the last contact from the prospect.
• Customers: for the duration of the contractual relationship, then for the applicable legal limitation and archiving periods.
• Prospecting to customers: during the business relationship, then for three years from its end.
• Unsuccessful applications: for a maximum of two years from the last contact with the candidate.
• Subscriptions and communication preferences: until consent is withdrawn, objection, unsubscription, or expiration of the period applicable to prospecting data.
• Individualized data from tracking pixels: six months from collection.
• Data limited to deliverability: retention of only the last opening date, replaced with each new opening and deleted upon removal from the mailing list or when the contact’s data reaches its expiration date.
• Proof of consents, withdrawals, and objections: for the period necessary to enable 4D CONCEPT to demonstrate compliance with its obligations.

Simply opening an email is not considered a new contact from the prospect allowing extension of the retention period of their data for prospecting purposes.

11. Your Rights

Depending on applicable regulations and the legal basis for processing, you may exercise the following rights:

• right of access to your data;
• right of rectification;
• right to erasure;
• right to restriction of processing;
• right to object;
• right to data portability;
• right to withdraw your consent at any time;
• right to define directives regarding the fate of your data after your death;
• right not to be subject to a decision based solely on automated processing producing legal effects concerning you or significantly affecting you.

You can exercise your rights by writing to:

dpo@4dconcept.fr

or by mail to:

4D CONCEPT – Data Protection
41-43 avenue du Centre
78180 Montigny-le-Bretonneux

To protect your data, proof of identity may be requested if there is reasonable doubt about your identity. This proof will only be requested when necessary and proportionately.

You also have the right to lodge a complaint with the Commission nationale de l’informatique et des libertés: www.cnil.fr.

12. Protection of Your Data

4D CONCEPT implements appropriate technical and organizational measures to protect personal data against destruction, loss, alteration, unauthorized disclosure, or unauthorized access.

Access to data is limited to individuals and service providers who need it to perform their duties.

13. Procedure Applicable in Case of Data Breach

Any personal data breach is analyzed and documented by 4D CONCEPT.

When a breach is likely to result in a risk to the rights and freedoms of individuals, it is notified to the CNIL as soon as possible and, if possible, within a maximum period of 72 hours after its discovery.

When the breach is likely to result in a high risk to the individuals concerned, they are informed as soon as possible, except as provided by regulations.

14. Automated Decisions and Profiling

You have the right to object, under the conditions provided by regulations, to a decision based solely on automated processing producing legal effects concerning you or significantly affecting you.

When 4D CONCEPT implements personalization or segmentation of its communications based on your interactions, the corresponding information is presented in this policy and the necessary choices are offered to you.

15. Changes to the Privacy Policy

4D CONCEPT may modify this policy to reflect regulatory, technical, or organizational changes.

In the event of a significant change affecting how personal data is used, appropriate information will be communicated to the individuals concerned.

Last updated: September 2026