Privacy policy
1. Introduction
PESAEAS is an initiative of AKIOUD AI, a French société par actions simplifiée (SAS), SIREN 924 929 730, with registered office in Paris. This privacy policy describes how personal data are processed in connection with the website pesaeas.org and related contact and event activities, under the GDPR, the French Data Protection Act (Loi Informatique et Libertés), and other applicable law.
2. Data controller
The controller is:
AKIOUD AI
8 B Rue Abel, 75012 Paris, France
SIREN: 924 929 730
Email: contact@pesaeas.org
For privacy requests, write to the same address with a clear description of your request.
AKIOUD AI
8 B Rue Abel, 75012 Paris, France
SIREN: 924 929 730
Email: contact@pesaeas.org
For privacy requests, write to the same address with a clear description of your request.
3. Data we process
We process personal data that you provide voluntarily, and limited technical data generated by the operation of the website.
Contact form: name, email address, message content, and metadata of the submission (e.g. time of sending).
“Notify me” (event alerts): email address and related submission metadata.
Event registration: if you register via Eventbrite, Eventbrite processes registration data under its own terms and privacy policy. We may receive attendee lists or related information needed to organize a meetup.
Technical / server data: our hosting provider may process technical logs (which can include IP address, user-agent, timestamps, and similar) for security, availability, and operation of the site. We do not use advertising cookies, marketing trackers, or profiling tools on this website.
Contact form: name, email address, message content, and metadata of the submission (e.g. time of sending).
“Notify me” (event alerts): email address and related submission metadata.
Event registration: if you register via Eventbrite, Eventbrite processes registration data under its own terms and privacy policy. We may receive attendee lists or related information needed to organize a meetup.
Technical / server data: our hosting provider may process technical logs (which can include IP address, user-agent, timestamps, and similar) for security, availability, and operation of the site. We do not use advertising cookies, marketing trackers, or profiling tools on this website.
4. Purposes and legal bases
We process data only for the following purposes:
Responding to contact messages — GDPR Art. 6(1)(f) (legitimate interest in communicating with persons who contact us).
Sending event opening notifications when you use “Notify me” — Art. 6(1)(a) (consent). You may withdraw consent at any time by emailing us; withdrawal does not affect prior lawful processing.
Organizing meetups (including use of attendee information we receive) — Art. 6(1)(b) and/or 6(1)(f) as applicable, and subject to Eventbrite’s role when you register there.
Security and proper operation of the website — Art. 6(1)(f).
We do not use personal data for automated decision-making producing legal or similarly significant effects, and we do not create marketing profiles.
Responding to contact messages — GDPR Art. 6(1)(f) (legitimate interest in communicating with persons who contact us).
Sending event opening notifications when you use “Notify me” — Art. 6(1)(a) (consent). You may withdraw consent at any time by emailing us; withdrawal does not affect prior lawful processing.
Organizing meetups (including use of attendee information we receive) — Art. 6(1)(b) and/or 6(1)(f) as applicable, and subject to Eventbrite’s role when you register there.
Security and proper operation of the website — Art. 6(1)(f).
We do not use personal data for automated decision-making producing legal or similarly significant effects, and we do not create marketing profiles.
5. Retention
We keep data only as long as needed for the purposes above, unless a longer period is required by law:
• Contact messages: generally up to 12 months after the last relevant exchange, then deleted or archived in a restricted form if needed for legal claims.
• Event notification emails: until you ask to be removed, or we stop the notification list.
• Event-related lists we hold: generally deleted or minimized within 6 months after the relevant event, unless needed for proof of organization or legal obligations.
• Technical logs: according to the host’s configuration and security needs, for a limited period.
Eventbrite retains data under its own policy.
• Contact messages: generally up to 12 months after the last relevant exchange, then deleted or archived in a restricted form if needed for legal claims.
• Event notification emails: until you ask to be removed, or we stop the notification list.
• Event-related lists we hold: generally deleted or minimized within 6 months after the relevant event, unless needed for proof of organization or legal obligations.
• Technical logs: according to the host’s configuration and security needs, for a limited period.
Eventbrite retains data under its own policy.
6. Recipients, processors, and transfers
We do not sell your personal data. Data may be accessed only by persons authorized by AKIOUD AI on a need-to-know basis, and by service providers acting on our instructions or as independent providers, including:
Vercel Inc. (United States) — hosting of the website. Processing may involve transfer outside the EU/EEA. Where applicable, transfers rely on mechanisms recognized under the GDPR (for example the EU-US Data Privacy Framework and/or standard contractual clauses), as described by the provider.
FormSubmit (formsubmit.co) — technical processing of contact and notification forms, which are then delivered by email to AKIOUD AI. The public address displayed on the site is contact@pesaeas.org. Form submissions are delivered to AKIOUD AI’s operational mailbox. FormSubmit may process data outside the EU/EEA. We do not control FormSubmit’s infrastructure; see FormSubmit’s privacy policy. Using a form involves transmission through this service.
Eventbrite — if you choose to register for an event there, Eventbrite processes your data under its terms and privacy policy (separate relationship).
Where a transfer outside the EU/EEA cannot rely solely on an adequacy decision, we rely on appropriate safeguards required by the GDPR to the extent available for the service used, and we minimize data shared with providers. For questions about transfers, contact us at the address above.
Vercel Inc. (United States) — hosting of the website. Processing may involve transfer outside the EU/EEA. Where applicable, transfers rely on mechanisms recognized under the GDPR (for example the EU-US Data Privacy Framework and/or standard contractual clauses), as described by the provider.
FormSubmit (formsubmit.co) — technical processing of contact and notification forms, which are then delivered by email to AKIOUD AI. The public address displayed on the site is contact@pesaeas.org. Form submissions are delivered to AKIOUD AI’s operational mailbox. FormSubmit may process data outside the EU/EEA. We do not control FormSubmit’s infrastructure; see FormSubmit’s privacy policy. Using a form involves transmission through this service.
Eventbrite — if you choose to register for an event there, Eventbrite processes your data under its terms and privacy policy (separate relationship).
Where a transfer outside the EU/EEA cannot rely solely on an adequacy decision, we rely on appropriate safeguards required by the GDPR to the extent available for the service used, and we minimize data shared with providers. For questions about transfers, contact us at the address above.
7. Your rights
Under the GDPR and French law, you may have the right to:
• access your data (Art. 15);
• rectification (Art. 16);
• erasure (Art. 17);
• restriction of processing (Art. 18);
• data portability where applicable (Art. 20);
• object to processing based on legitimate interest (Art. 21);
• withdraw consent at any time where processing is based on consent (Art. 7);
• define directives regarding your data after death (French Data Protection Act);
• lodge a complaint with the CNIL (cnil.fr), 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.
To exercise your rights: contact@pesaeas.org. We will respond within the time limits set by the GDPR (in principle one month, extendable where permitted). We may request information needed to verify your identity.
• access your data (Art. 15);
• rectification (Art. 16);
• erasure (Art. 17);
• restriction of processing (Art. 18);
• data portability where applicable (Art. 20);
• object to processing based on legitimate interest (Art. 21);
• withdraw consent at any time where processing is based on consent (Art. 7);
• define directives regarding your data after death (French Data Protection Act);
• lodge a complaint with the CNIL (cnil.fr), 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.
To exercise your rights: contact@pesaeas.org. We will respond within the time limits set by the GDPR (in principle one month, extendable where permitted). We may request information needed to verify your identity.
8. Minors
This website and our events are directed to adults (18+). We do not knowingly collect personal data from minors. If you believe a minor has provided data, contact us and we will take appropriate steps to delete it where required.
9. Security
We implement appropriate technical and organizational measures given the nature of the data and the risks (including HTTPS for the website, access limited to authorized persons, and use of reputable providers). No method of transmission or storage is completely secure. We cannot guarantee absolute security of data transmitted over the internet.
10. Changes
We may update this policy to reflect legal, technical, or operational changes. The updated version is published on this page with a revised date. For material changes, we may provide additional notice on the website where appropriate.
Last updated: 22 July 2026.
Last updated: 22 July 2026.