Privacy policy
Updated on 28/05/2026
Factory Software Group (the “Group”) is committed to protecting your personal data and respecting your privacy.
This Privacy Policy explains how personal data is collected and processed by Factory Software Group (France), as well as its affiliated entities operating within the European Economic Area (EEA), including Factory Software (France), Aveva Select Benelux B.V. (the Netherlandands) and Wonderware Scandinavia A.B. (Sweden).
Depending on the nature of your interaction, these entities may act as independent or joint data controllers within the meaning of applicable data protection laws.
This Policy describes the purposes for which your personal data is collected and used, the legal bases for such processing, the measures implemented to ensure its security, and the ways in which you can exercise your rights.
For more information on personal data protection, you may consult the website of the French supervisory authority (CNIL) at www.cnil.fr or the competent authority in your country of residence.
1. Identity of the Data Controllers
This Privacy Policy applies to all entities of the Group operating within the European Economic Area (EEA).
Depending on your interaction, your personal data is processed by one or more of the following entities acting as independent or joint data controllers within the meaning of Article 26 GDPR:
-
Factory Software Group SAS – 19 rue Albert Einstein 77420 Champs-sur-Marne (France)
-
Factory Software S.A.S. – 19 rue Albert Einstein 77420 Champs-sur-Marne (France)
-
Aveva Select Benelux B.V. – Minervum 7139, 4817 ZN Breda (The Netherlands)
-
Wonderware Scandinavia A.B.– Hyllie Vattenparksgata 12C, 215 32 Malmö (Sweden)
For certain processing activities (e.g. website management, CRM, marketing), these entities act as joint controllers. For any questions, you may contact: rgpd@factorygroupe.fr
2. Categories of Data Collected
We may collect the following categories of personal data:
- Identification data: first name, last name
- Contact details: email address, phone number
- Professional data: job title, company name, address, company registration number
- Interaction data: requests submitted via forms, communications
- Website usage data: IP address, browsing behavior, cookies
- Recruitment data: CV, application details
- CRM data: history of interactions, requests, support tickets
- We only collect data strictly necessary for the purposes described below.
3. Purposes and Legal Bases
Your data is processed for the following purposes:
|
Purpose |
Legal basis |
|
Responding to contact requests |
Legitimate interest |
|
Managing client and prospect relationships |
Legitimate interest |
|
Performing contracts and support services |
Contractual necessity |
|
Conducting marketing communications (B2B) |
Legitimate interest |
|
Managing recruitment processes |
Legitimate interest |
|
Website analytics and improvement |
Consent |
|
Targeted advertising |
Consent |
|
Compliance with legal obligations |
Legal obligation |
We ensure that our legitimate interests do not override your fundamental rights and freedoms.
4. Data Collection Methods
Your data is collected:
- Via contact forms on our website
- Through direct communications (email, phone)
- When interacting with our services or support
- Through cookies and tracking technologies (see section 9)
5. Mandatory Information
Fields marked with an asterisk in our forms are mandatory.
Failure to provide such information may prevent us from processing your request.
6. Data Retention Periods
We retain personal data only for as long as necessary:
- Prospects: 3 years from last contact
- Clients: duration of relationship + applicable legal retention
- Recruitment data: up to 2 years after last contact
- Cookies: maximum 13 months
- Technical logs: up to 12 months
7. Recipients of Data
Your personal data may be shared with:
-
IT hosting providers
-
CRM and marketing solution providers
-
Communication tools providers
-
Recruitment service providers
-
These processors act strictly on our instructions and are contractually bound to ensure security and confidentiality. We do not sell your personal data.
8. International Data Transfers
Some of our service providers are located outside the EEA, particularly in the United States.
When transfers occur, we ensure appropriate safeguards such as:
- European Commission adequacy decisions
- Standard Contractual Clauses (SCCs)
- Additional technical and organizational measures
9. Cookies Policy
Information related to your browsing may be recorded in files called "Cookies" when you visit our websites. We primarily use cookies to enhance and analyze your experience on our website for marketing purposes. Because we respect your right to privacy, you can choose not to allow certain types of cookies. Blocking certain types of cookies may negatively impact your experience on our websites and limit the services we can provide.
Types of cookies used:
- Strictly necessary cookies
- Analytics cookies
- Personalization cookies
- Advertising cookies
Consent
Non-essential cookies are only placed after obtaining your explicit consent via our cookie banner. You can accept, refuse, or customize your choices at any time.
Cookie retention
Cookies are stored for a maximum duration of 13 months.
Managing preferences
You can modify your choices at any time via:
- The cookie management tool on our website
- Your browser settings
10. Data Security
We implement appropriate technical and organizational measures, including:
- Encrypted connections (HTTPS)
- Access restrictions
- Secure hosting within the EEA
- Internal policies and staff training
11. Profiling and Automated Decision-Making
We may use limited profiling (e.g. website behavior analysis) to improve our services and marketing.
No automated decision producing legal or significant effects is carried out.
12. Your Rights
In accordance with the GDPR, you have the following rights:
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction
- Right to object
- Right to data portability
- Right to withdraw consent at any time
You may exercise your rights by contacting: rgpd@factorygroupe.fr
You also have the right to lodge a complaint with a supervisory authority.
In France, this authority is: CNIL – www.cnil.fr. You may also contact the authority in your country of residence.
13. Data Protection Officer
You can contact our Data Protection Officer at: rgpd@factorygroupe.fr
14. Updates
This policy may be updated periodically to reflect legal, technical, or business developments.