Last updated: August 12, 2026
Mr Zine Dine Piro(hereinafter the “Publisher”) — a French sole trader (entrepreneur individuel) trading under the business name Qualivio, registered with the French National Business Register (RNE) under SIREN number 108 663 402, whose business address is 12 rue de la Part-Dieu, 69003 Lyon — operates the Qualivio service.
Depending on the nature of the data processed, the Publisher acts either as a data controller or as a data processor under the GDPR:
Contact: contact@qualivio.fr — 12 rue de la Part-Dieu, 69003 Lyon, France.
Users (controller: the Publisher): first and last name, professional email, login credentials, technical data (logs, IP address), billing data processed by Stripe.
Third-party candidates (controller: the Customer; the Publisher = processor): data contained in CVs, LinkedIn profiles or other documents imported by the Customer (identity, contact details, professional background, education, skills), together with the scores and AI analyses generated by Qualivio.
Performance of the contract (Art. 6.1.b GDPR) for the provision of the service · Legitimate interest (service improvement and security, fraud prevention) · Legal obligation (billing, accounting retention) · Consent for any marketing communications.
For candidate data processed by the Publisher as a processor, the legal basis is determined by the Customer acting as controller, who is responsible for demonstrating the lawfulness of the processing (typically pre-contractual measures at the candidate's request or legitimate interest).
The Publisher relies on the following subprocessors to operate the service. All transfers of personal data outside the European Union are governed by Standard Contractual Clauses (SCCs) adopted by the European Commission:
The Customer is notified by email of any addition or replacement of a subprocessor, and has a right to object under the terms provided by the GDPR.
In accordance with Articles 15 to 22 of the GDPR, data subjects have the following rights: access, rectification, erasure, portability, objection, restriction of processing, and the right to issue post-mortem directives.
For user data, these rights are exercised directly with the Publisher at contact@qualivio.fr.
For candidate data, requests should be addressed as a matter of priority to the Customer acting as data controller. At the Customer's request, the Publisher can assist in handling data subject requests.
Data subjects may also lodge a complaint with the French data protection authority (CNIL, www.cnil.fr) or with their local supervisory authority.
The Publisher implements appropriate technical and organizational measures to ensure the security of data: HTTPS/TLS encryption in transit, encryption at rest, authentication, customer-level data isolation (multi-tenant), access controls, log monitoring, encrypted backups.
In the event of a personal data breach, the Publisher notifies the Customer without undue delay, in accordance with Article 33 of the GDPR, so that the Customer can comply with its own notification obligations.
qualivio.fr uses Google Analytics 4 for audience measurement. Consent is managed through Google Consent Mode v2: by default, no measurement cookie is placed (the analytics_storage signal is denied). A banner lets you accept or reject these cookies; they are only placed after explicit acceptance, and your choice is stored. No advertising or tracking cookies are placed (the ad_storage, ad_user_data and ad_personalization advertising signals remain permanently denied).
The Publisher may update this policy. Any material change will be notified to the Customer by email at least 30 days before taking effect.