PERSONAL DATA
Privacy policy and personal data at viglia.ai
Updated: 12 October 2026
Data controller
HEPHX controls the data processed through this website. Send any request to contact@viglia.ai.
Data and purposes
This website creates no user account. Audience measurement on the public pages is self-hosted at HEPHX, without a cookie, without an identifier that follows you from one site to another and without combination with other processing: it falls under the consent exemption for audience measurement. Session recording and advertising trackers only load after your consent, category by category, and you can withdraw it at any time from “Cookie preferences” at the bottom of the page.
Free-tool calculations and diagnostics run locally in your browser. No answer, assumption or result is sent to HEPHX or Cal.com or stored by the website.
- Perimeter watch (if you ask for it): the e-mail address you enter, the public perimeter concerned (company, buyer, department, CPV code, segment or observation) and the confirmation date, in order to tell you about new awards published on that perimeter. The watch only starts after the confirmation link sent by e-mail is opened; an address that is never confirmed receives no message. Every message carries a one-click stop, with no account.
- “Your opportunities in 48h” request (if you make one): the company, its website, the sector and the e-mail address you enter, the consent sentence you ticked and its date, plus the page it was sent from and its utm_* campaign parameters, so that a team member prepares a selection of public tenders for your company and sends it to you. Nothing is sent automatically, and the request does not sign you up to any mailing list.
- Audience measurement (consent-exempt): the public page you read with no address parameter other than the utm_* campaign parameters, the referring site, device type, language, the country derived from the IP address, and the perimeter the page publishes, in aggregate, without your e-mail address and without any client-workspace data. The IP address is not stored.
- Session recording and click maps (if you accept them): your clicks, scrolling and the layout of the public pages, with input fields masked, self-hosted at HEPHX and kept for 30 days, in order to make the website easier to read.
- Advertising (if you accept it): Google (Google tag) and Meta (Meta Pixel) receive the page you read, the campaign parameters and the identifiers of their own cookies, in order to measure how our campaigns perform. These trackers never load on a page whose address contains anything other than campaign parameters.
- Booking a meeting: no personal data is provided to Cal.com before you explicitly choose to follow the external Cal.com link. After that click, Cal.com receives technical data about the visit and the contact and professional information you choose to enter in order to arrange the meeting.
- Direct contact by email: your address, message and any professional information you provide, in order to answer your request.
- Technical security logs: IP address, date, requested resource and browser data, in order to protect and maintain the website.
Legal bases and retention
Audience measurement relies on our legitimate interest in knowing how the public pages are used; its statistics are kept for at most 25 months. Session recording and advertising rely on your consent, valid for six months. Contact requests are processed at your initiative and under our legitimate interest in responding to business prospects. They are retained for the exchange and for no more than three years after the last contact. Technical logs are retained for a limited period appropriate to service security.
Recipients and transfers
Data is available only to HEPHX and the technical providers required for hosting, email and, when you choose to follow its external link, booking. Cal.com is the provider required for that booking service and processes the information you enter on its service. If you accept the advertising category, Google Ireland Ltd and Meta Platforms Ireland Ltd receive the data described above as controllers of their own processing; it may be transferred to the United States under the Data Privacy Framework. Data is never sold or used to train external models.
Your rights
You may request access, correction, deletion, restriction or objection by emailing contact@viglia.ai. You may also complain to your local data protection authority; in France, this is the CNIL at cnil.fr.