Privacy Policy

Last updated: September 5, 2025

1. Introduction

This Privacy Policy explains how Paatch SAS (“Paatch”, “we”, “us”, or “our”) collects, uses, and protects the personal data you provide when using our website paatch.ai and our services.

Paatch SAS is a company registered with the Paris Trade and Companies Register under number [to be completed], with its registered office at 24 rue de Clichy, 75009 Paris, France.

We are committed to protecting your data in accordance with the GDPR (Regulation EU 2016/679).

2. Data Controller

The data controller is Paatch SAS.

You can contact us regarding any data protection questions:

Mail: Paatch SAS, 24 rue de Clichy, 75009 Paris, France
Email: privacy@paat.ch

Paatch has not appointed a Data Protection Officer (DPO) as it is not required under GDPR.

3. Data We Collect

We collect the following categories of personal data:

Identification Data

• Name
• Surname
• Email address
• Phone number

Professional Data

• Job title
• Company name
• Industry
• Professional status (employee, freelancer, etc.)
• AI-related interests

Event & Community Data

• Event registrations
• Feedback
• Community participation (profile, messages)
• Photos/videos taken during events

Billing Data

• Billing information
• Payment history (via our payment providers)

Browsing & Communication Data

• Cookies
• Technical logs (IP address, browser)
• Content submitted via forms or email exchanges

4. Purposes of Data Processing

Your personal data is processed for the following purposes:

Service delivery: event registration, access to community spaces, training organization
Commercial operations: quotes, contracts, invoicing, customer follow-up
Communication & marketing: newsletters, updates, promotions, event announcements
Service improvement: analytics, usage statistics
Legal compliance: accounting, tax obligations

5. Legal Bases for Processing

We rely on the following legal bases:

Contract performance: when you register for a service or event
Consent: for newsletters, marketing communication, cookies
Legitimate interest: customer relationship management, service improvement, website security
Legal obligations: accounting, financial record-keeping

6. Data Recipients

Your data may be shared with trusted service providers acting as processors. These include:

• Website hosting: Webflow
• CRM & Emailing: HubSpot
• Event management: Luma, Eventbrite
• Online community: Circle.so
• Payments: Stripe
• Productivity & storage: Google Workspace, Notion

All processors are required to provide adequate guarantees of data protection.

7. International Data Transfers

Some processors are located outside the EU, particularly in the United States.
We ensure that such transfers comply with GDPR requirements through mechanisms such as the European Commission’s Standard Contractual Clauses (SCCs).

8. Data Retention

We retain your data only for the necessary duration:

Clients: duration of contract + legal retention (generally 5 years)
Prospects: 3 years after your last interaction
Cookies: up to 13 months

9. Data Security

We apply appropriate technical and organizational measures to protect your data from:

• Destruction
• Loss
• Alteration
• Unauthorized access
• Unauthorized disclosure

10. Your Rights

Under GDPR, you may exercise the following rights:

• Right of access
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to data portability
• Right to object

To exercise your rights, email privacy@paat.ch with proof of identity.

You may also file a complaint with the CNIL (French Data Protection Authority).

11. Cookies

We use cookies to:

• Improve your browsing experience
• Analyse website traffic
• Support marketing activities

You can manage your consent at any time through our cookie banner.

12. Changes to This Policy

We may update this Privacy Policy from time to time.
The most recent version will always be available on our website.
We encourage you to consult it regularly.