Privacy policy

Date of last update: March 2023

In the context of its activity, Invoke is required to collect personal data. 

In this capacity, Invoke implements a set of measures to protect all of your personal data, in compliance with the applicable European* and French regulations and thus undertakes to observe all of the processing of personal data covered by this policy. 

Moreover, these measures will be subject to change, with Invoke always following developments in terms of personal data protection in order to meet the obligations of the legislation. 

This personal data protection is intended to inform you about the purposes and conditions under which we process the personal data which we may collect through our various channels, notably including: 

• the Invoke website (“the Invoke website”) [https://www.invoke-software.com];
• forms attached to the Invoke website;
• social networks (Twitter, YouTube, LinkedIn);
• when registering for any events organised by Invoke;
• when you participate in Invoke surveys or surveys;
• through the registration of Invoke’s newsletters.

We invite you to read our policy in order to have all of the information that allows you to understand how and why Invoke processes your personal data and what your relevant rights are. 

*References to the “GDPR” also refer to the UK Data Protection Act 2018 implemented by the United Kingdom. 

Which data do we collect?

This policy applies to your personal data that may be processed by Invoke, with or about you, with the following categories:  

1. Personal data relating to Invoke's customers: 

When necessary for the performance of its business, Invoke may collect the following personal data:

• Identity data: surname, first names, postal address, telephone number, electronic contact details; 
• Data relating to the professional situation: professional contact details, position; 
• Recording of video-conferencing and webinars organised by Invoke;
• Browsing data (see the page on Invoke Cookies);
• Content of the exchanges held with Invoke.

We point out that the data cited above is not systematically collected by Invoke. The data collected varies according to the needs of the activity concerned and the corresponding forms. 

2. Personal data relating to Invoke's prospects:  

The following data may be collected by Invoke: 

• Identity data: surname, first names, postal address, telephone number, electronic contact details;
• Data relating to your professional situation: professional contact details, position; 
• Recording of videoconferencing and webinars organised by Invoke;
• Browsing data (see cookie page);
• Content of the exchanges held with Invoke.

The data cited above is not systematically collected by Invoke. The data collected varies according to the needs of the activity concerned and the corresponding forms. 

3. Personal data relating to applications:  

The following data may be collected by Invoke: surname, first names, address, telephone number, e-mail and Curriculum Vitae.

For what purpose do we collect your data for how long will it be stored?

We collect and use personal data about you for the main purposes described below. We retain your personal data only for as long as is necessary for the fulfilment of the different purposes, except in cases where the law allows or requires us to retain it for longer.

These maximum periods apply unless you request erasure or cessation of use of your data before it expires, for a reason consistent with any legal obligation that may be imposed on Invoke. 

What is the legal basis for the processing of personal data carried out by Invoke? 

In accordance with applicable regulations, we only process your data where we have a legal basis for doing so. This may include contractual performance (a), legitimate interest (b), legal obligation (c) or your consent (d).

a) Processing purposes based on contractual (or pre-contractual) performance:  

• Management of prospects and/or customers;
• Management of suppliers;
• Management of partners;
• Management of billing.

b) Processing purposes based on legitimate interest: 

• Managing requests made via e-mail;
• Management of Invoke’s external communications;
• Managing contacts and prospects;
• The management of pre-litigation and litigation, establishment of evidence.

c) The purposes of processing based on the legal obligation: 

• Compliance with legal and regulatory obligations when the processing of personal data is made mandatory by a legislative text (accounting, invoicing, prevention of money laundering and the financing of terrorism, anti-corruption, etc.);
• The management of requests to exercise rights (access, rectification, opposition, etc.) by way of the GDPR.

d) Processing purposes based on your consent: 

• The management of cookies, with the exception of strictly necessary cookies;
• Recording of video conferences and webinars.

How can your data be transferred and to whom? 

Your personal data may be notified by Invoke:

• Within Invoke: the authorised services of Invoke which need to know about these for the aforementioned purposes.

• Within the Invoke Group: we may share your personal data with the subsidiaries of Invoke, in order to ensure the continuity of our services and on a need-to-know basis.

• To business partners: we may disclose your personal data to business partners (distributors, business introducers, subcontractors, service providers) of Invoke, notably in order to ensure the proper functioning of our website or services in the context of the aforementioned purposes and on the basis of an existing contract between Invoke and the business partner, including obligations relating to the protection of personal data. These latter parties are located within the European Union (hereinafter, the “EU”) or located in a country which has formed the object of a favourable adequacy decision by the European Commission.

• To third parties for legal reasons: we may disclose your personal data to third parties in the event that we are required to comply with laws and regulations, legal requests and orders, or if permitted by law (i.e., for the protection and defence of rights, situation that threatens life, health and safety, etc.). 

In any event, we always require these recipients to provide sufficient guarantees of confidentiality and security and to take the physical, organisational and technical measures necessary for the protection and security of your personal data, in accordance with the legislation in effect. 

All of your data is processed and hosted in France. Data transfers may nevertheless be made outside the EU. Invoke undertakes to ensure that any transfer of your data outside the EU is made with appropriate guarantees, which comply with the applicable regulations on this matter, either because the recipient countries benefit from a compliance resolution or because these transfers are governed by the implementation of Standard Contractual Clauses validated by the European Commission

What are the security and retention measures for personal data implemented by Invoke?  

Invoke ensures the security of your data by taking the necessary physical, organisational and technical measures to prevent unauthorised access, use, disclosure, modification or destruction, in accordance with the regulations in effect.

In both the European Union and the UK, personal data is protected by data protection laws.

These measures notably include: 

• Storage on secure servers in France;
• Limited access to your data on a “need-to-know” basis;
• Implementation of organisational measures internally in order to protect your data. 

Your personal data is collected and stored in a secure environment. Anyone interacting with Invoke on a daily basis is required to observe the confidentiality of your information. Since no mechanism provides maximum security, however, a risk component is still present when using the Internet to transmit personal information. 

What are your rights to your personal data?  

Pursuant to the provisions of the GDPR and the French Data Protection Act, you may access your data held by Invoke at any time and request its limitation, portability, rectification or erasure. 

In this way, you may request the rectification, completion, clarification, updating or erasure of your personal data which is inaccurate, incomplete, ambiguous, outdated or the collection or use, communication or retention of which is prohibited.

For more information on your rights, you may consult the CNIL website: www.cnil.fr 

You may exercise all of these rights by sending a written request, accompanied by a copy of proof of identity, to the following e-mail address: dpo@invoke.fr. Please inform us of any correction, modification, omission or refusal of use. 

We will endeavour to respond to your request as soon as possible and under the conditions provided by the applicable regulations. In some cases, however, we may not be able to respond favourably in order to comply with our legal or contractual obligations.

Without prejudice to any other legal route, you have the right to lodge a complaint with the supervisory authority of the country of the European Union in which you reside, work, or in which you consider that an infringement of your rights has been committed.  

Amendment of the personal data protection and cookie management policy:

Invoke reserves the right to make changes to its personal data protection and cookie management policy. We encourage you to check this page regularly in order to note the changes and to stay informed about the measures we take to protect your personal data.  

Contact us:

To exercise your rights or to ask any questions relating to the processing of your personal data, please contact our Data Protection Officer at this e-mail address: dpo@invoke.fr  

Management of Cookies: 

What is a cookie?   

Cookies are small text files placed on your device (computer, smartphone, digital reader, video game console connected to the Internet, etc.) when you browse websites. We mainly use these cookies to make your browsing on our sites more pleasant, and to improve the use and functionality of our sites; for example, to recognise you during your next login and to present you with content likely to meet your expectations. On an ancillary basis, we also use these files to establish statistics on visits to our websites and to determine how you became aware of our site. 

Which cookies do we use?  

We use cookies to guarantee you the best experience and improve the performance of our site. For this purpose, we use a dedicated cookie consent collection tool.

Our cookies are data that is downloaded to or stored on your computer in order to provide you with a better user experience. For more information, see our Privacy Commitment and Cookie Policy. 

a) Analytical cookies: 

Cookies exempted from obtaining consent since they are “strictly necessary for the provision of a service expressly requested by the user.” 

We also use the data generated by these browsing analysis cookies concerning the use of the website: websites visited, frequency, number and repetition of visits, duration of browsing, searches carried out, browser used, operator providing the service, location linked to the IP address, etc.

Overall, the Invoke SAS website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses cookies, which are text files placed on your computer, to help the website analyse how users use the site. The data generated by the cookies about your use of the site (including your IP address) will be transmitted and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for its publisher and providing other services relating to website activity and use of the Internet. Google may disclose this data to third parties in the event of a legal obligation or when these third parties process this data on behalf of Google, notably including the publisher of this website. Google will not cross-check your IP address with any other data held by Google. You can disable the use of cookies by selecting the appropriate settings of your browser. Such disabling could nevertheless prevent the use of certain features of this site. By using this website, you expressly consent to the processing of your personal data by Google under the conditions and for the purposes described above. 

b) Marketing cookies:  

Cookies which allow you to personalise your user experience and display content adapted to your search and navigation (for example, display of personalised banners outside the Invoke website, product recommendations, etc.).   

c) Advertising cookies:  

Advertising targeting cookies disseminated by business partners or targeted advertising providers (such as Google Adwords and its partners). As they are managed by the advertising partners, Invoke has no power of action over these cookies. Nevertheless, you may read or change the information in this cookie. The purpose of these cookies is to provide you with information in connection with your purchases and the products consulted. See the cookie table.  

How to set cookies via your Internet browser?    

The default settings of Internet browsers are usually set to accept cookies, but you can easily change these settings by changing your browser settings. If you choose to disable cookies via your browser, however, you may no longer be able to benefit from all the features that we offer through our websites. 

For Internet Explorer™ : http://windows.microsoft.com/fr-FR/windows-vista/Block-or-allow-cookies

For Safari™ : http://support.apple.com/kb/ht1677?viewlocale=fr_FR
For Chrome™ : https://support.google.com/chrome/answer/95647?hl=fr
For Firefox™ : https://support.mozilla.org/fr/kb/activer-desactiver-cookies
For Opera™ : http://help.opera.com/Windows/10.20/fr/cookies.html