Last updated: April 23, 2026
QUALIVIO SAS — a French company currently undergoing registration with the Paris Trade and Companies Register, headquartered at 231 rue Saint-Honoré, 75001 Paris — operates the Qualivio service.
Depending on the nature of the data processed, QUALIVIO SAS acts either as a data controller or as a data processor under the GDPR:
Contact: contact@qualivio.fr — QUALIVIO SAS, 231 rue Saint-Honoré, 75001 Paris, France.
Users (controller: QUALIVIO SAS): first and last name, professional email, login credentials, technical data (logs, IP address), billing data processed by Stripe.
Third-party candidates (controller: the Customer; QUALIVIO SAS = processor): data contained in CVs, LinkedIn profiles or other documents imported by the Customer (identity, contact details, professional background, education, skills), together with the scores and AI analyses generated by Qualivio.
Performance of the contract (Art. 6.1.b GDPR) for the provision of the service · Legitimate interest (service improvement and security, fraud prevention) · Legal obligation (billing, accounting retention) · Consent for any marketing communications.
For candidate data processed by QUALIVIO SAS as a processor, the legal basis is determined by the Customer acting as controller, who is responsible for demonstrating the lawfulness of the processing (typically pre-contractual measures at the candidate's request or legitimate interest).
QUALIVIO SAS relies on the following subprocessors to operate the service. All transfers of personal data outside the European Union are governed by Standard Contractual Clauses (SCCs) adopted by the European Commission:
The Customer is notified by email of any addition or replacement of a subprocessor, and has a right to object under the terms provided by the GDPR.
In accordance with Articles 15 to 22 of the GDPR, data subjects have the following rights: access, rectification, erasure, portability, objection, restriction of processing, and the right to issue post-mortem directives.
For user data, these rights are exercised directly with QUALIVIO SAS at contact@qualivio.fr.
For candidate data, requests should be addressed as a matter of priority to the Customer acting as data controller. At the Customer's request, QUALIVIO SAS can assist in handling data subject requests.
Data subjects may also lodge a complaint with the French data protection authority (CNIL, www.cnil.fr) or with their local supervisory authority.
QUALIVIO SAS implements appropriate technical and organizational measures to ensure the security of data: HTTPS/TLS encryption in transit, encryption at rest, authentication, customer-level data isolation (multi-tenant), access controls, log monitoring, encrypted backups.
In the event of a personal data breach, QUALIVIO SAS notifies the Customer without undue delay, in accordance with Article 33 of the GDPR, so that the Customer can comply with its own notification obligations.
qualivio.fr only uses technical cookies required for the service to function and aggregated audience measurement. No advertising or tracking cookies are placed.
QUALIVIO SAS may update this policy. Any material change will be notified to the Customer by email at least 30 days before taking effect.