PRIVACY POLICY
Last updated: August 11, 2026
Article 1 INTRODUCTION
OUDAVONE SAS, publisher of the web application "GO FUSION" (the "Application"), is a French simplified joint-stock company with a share capital of €1,000, registered with the Paris Trade and Companies Register under number 984 177 311, with its registered office at 58 rue de Monceau, 75008 Paris ("We", "OUDAVONE").
OUDAVONE has adopted this privacy policy (the "Policy") to explain how it collects, processes, stores, uses and shares the personal data (the "Data") provided by the Player (the "Player", "You") or collected during Your use of the Application and Services.
OUDAVONE acts as data controller for Your Data processed as part of Your use of the Application, such as Account management and support, within the meaning of Regulation (EU) 2016/679 of April 27, 2016 ("GDPR") and the French Data Protection Act No. 78-17 of January 6, 1978 as amended, and any other applicable French or European regulation. Our Data Protection Officer (DPO) can be reached at it.admins@gofusion.fr.
OUDAVONE reserves the right to amend the Policy at any time. If the Policy is amended, changes will be posted on the Application and use of the Application will constitute acceptance of these changes.
Article 2 DATA PROCESSED
Data refers to information that identifies You directly or indirectly. As part of Your use of the Application, we may process the following Data:
● Profile data: when You create an account, You provide us with Your last name, first name, professional email address, Your affiliated entity (the company, school, local authority or event You are affiliated with) and, where applicable, Your team or department.
● Connection data: when You connect to the Application and use the Services, You provide us with Your IP address.
● Challenge data: when You participate in a Challenge, We collect information about Your profile, Your actual participation and Your result. Special case for sentiment surveys (barometers): You may choose to answer anonymously; Your response and any comment are then recorded with no link to Your account, only Your participation being counted for point attribution.
● Communication data: all data You provide when contacting Us.
● Content data: Go Fusion first offers a library of standardized content (challenges, quizzes, events) available off the shelf. The Customer can use this content directly. When the Customer requests specific adaptations based on their themes (safety, wellbeing, innovation, etc.), Go Fusion may then use Mistral AI models, run on Scaleway's sovereign infrastructure (data centers located in France), in back-office only, to transform these themes into playful and tailored content. No personal or confidential data is transmitted to Mistral AI or Scaleway: the prompts sent relate only to generic topics defined by the Customer or taken from public sources. All generated content is systematically reviewed and validated by Go Fusion and then by the Customer before being released.
Article 3 PURPOSES AND LEGAL BASES FOR PROCESSING
We process Your Data to properly perform the contract with You, in particular to:
● manage the creation of Your Account and access to Your personal space on the Application;
● give You access to the Application;
● manage Your participation in Challenges and Your Rankings: rankings are displayed in pseudonymized form (first name and last-name initial), so Your full identity is never shown to other Players;
● send You notifications;
● maintain Our relationship with You, including handling Your complaints and support requests.
We process Your Data when necessary for Our legitimate interests, including to: allow You to browse the Application and detect malfunctions; improve Your user experience; produce anonymous statistics and analytics to understand how You use the Application.
Article 4 COOKIES
The Application only uses cookies strictly necessary to deliver the Services: secure session cookies (login, session protection), inaccessible to third-party scripts. These cookies, required for the Application to function, do not require Your consent and are not used for advertising tracking or profiling.
The showcase website www.gofusion.fr may use audience measurement cookies; consent is managed there by the Axeptio tool (accept, refuse or customize choices). Your consent will not exceed 6 months. Cookies will be kept for a maximum of 13 months and the data collected via these cookies for a maximum of 25 months. You may also configure Your browser to accept or refuse cookies. For more information, please refer to http://www.allaboutcookies.org.
Article 5 DATA RECIPIENTS
The Data is accessible to the following recipients:
i. OUDAVONE's internal staff, authorized based on their duties and within the scope of their assignments, in particular staff responsible for Player relations and for the management, administration and improvement of the Application;
ii. Customers (companies, local authorities, schools or event organizers) who collaborate with us to set up challenges tailored to their needs: each Customer only accesses data from their own entity, with this partitioning technically enforced at the database level;
iii. OUDAVONE's external subcontractors: Scaleway SAS (hosting of the Application and backups, data centers in France) and Mistral AI (content generation models run on Scaleway's infrastructure in France, back-office only, with no transmission of personal data);
iv. third parties authorized by law, including judicial officers, ministerial officers, public, administrative or judicial authorities or any other person or entity authorized under a law, regulation or decision of a competent administrative or judicial authority. Unless required by law or by the court, OUDAVONE is not obliged to inform Players of these Data disclosures.
When OUDAVONE transfers Data to its external subcontractors, OUDAVONE ensures that they provide equivalent guarantees to its own and adhere to its Policy. OUDAVONE also ensures that they provide sufficient guarantees to implement appropriate technical and organizational measures so that the processing meets the requirements of this Policy and, more broadly, applicable Data protection regulations.
OUDAVONE will never share the Data with third parties other than the providers listed above without Your consent, except to share only non-personal or irreversibly anonymized data. The only third-party links kept in the Application are ADEME (awareness content) and Ethikdo (ethical rewards). Videos displayed in the Application are self-hosted: no third-party video player is called from Your browser.
Article 6 DATA RETENTION
OUDAVONE stores the Data in storage facilities located in France for a period no longer than necessary for the purposes for which the Data was collected and processed, and in any case in accordance with legal requirements.
Data will be stored in OUDAVONE's active database for the entire duration of the contractual relationship and the provision of the Application and Services. In particular:
● Challenge participation data (responses, results, free-text comments from barometers) is deleted or irreversibly anonymized at the latest 12 months after collection;
● connection data (technical logs, IP addresses) is kept for a maximum of 12 months;
● Your Account data is deleted upon closure of the Account or at the end of the contract with the Customer to which You are affiliated; a destruction certificate can be provided to the Customer.
Afterwards, some Data may be archived in an intermediate database with restricted access when OUDAVONE is legally required to keep it longer (evidence of its rights, tax, accounting or audit obligations). The duration of this storage will depend on the applicable legal limitation or retention periods, after which the Data will be permanently deleted or irreversibly anonymized.
Article 7 DATA PROTECTION
OUDAVONE has implemented technical and organizational measures to protect Your Data, in particular against potential breaches likely to result, accidentally or unlawfully, in the destruction, loss, alteration, unauthorized access or disclosure of Your Data. These measures include in particular: encryption of Data in transit (TLS) and at rest (AES-256), strict partitioning of each Customer's data enforced at the database level, multi-factor authentication for administrators, tamper-proof logging of administrative actions, encrypted and immutable backups, and exclusive hosting in France.
OUDAVONE also guarantees that members of its staff and any person involved in processing Data comply with internal rules and procedures relating to the processing of personal data, in particular the technical and organizational security measures implemented to protect Your Data.
However, despite Our efforts to protect Your Data, there is always a risk that an unauthorized third party may find a way to circumvent Our security systems or that transmissions of Your Data over the internet may be intercepted. We invite You to take all necessary precautions to protect Your Data when You are on the internet or use the Application.
In any event, when We become aware of a breach of Your Data likely to result in a high risk to Your rights and freedoms, We will notify You of this breach as soon as possible so that You can take the necessary measures to protect Yourself, in addition to having previously informed the French Data Protection Authority (the "CNIL").
Article 8 YOUR RIGHTS
You have the following rights over Your Data and its processing: right of access; right to rectify inaccurate Data; right to erasure (except where processing is necessary for the exercise of the right to freedom of expression and information, compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defense of legal claims); right to restriction of processing; right to data portability (to receive a copy of Your Data in a structured electronic format or to request its transfer to another controller where technically feasible); right to object for reasons relating to Your particular situation; right to withdraw Your consent at any time when processing is based on consent, without compromising the lawfulness of past processing.
You may request the permanent deletion of Your account or Your personal data at any time via the secure online form available in the site's FAQ (question "Is my data secure and can I delete it?"). Any request will be handled within 30 days, in accordance with the GDPR. You may also exercise Your rights by sending a clear and specific request to contact@gofusion.fr or to our DPO: it.admins@gofusion.fr.
We endeavor to respond to Your request within one month in accordance with Our GDPR obligations. If You request the deletion of Your Data, it will be erased, unless its processing is necessary to comply with Our legal or contractual obligations or to pursue Our compelling legitimate interests. You can also access and update Your Data at any time from Your Personal Space.
You also have the right to lodge a complaint with the CNIL: CNIL, 3 Place de Fontenoy, TSA 80715, 75334 PARIS CEDEX 07, France.
Article 9 LINKS TO THIRD-PARTY SITES
Links to third-party sites such as ADEME or Ethikdo may be present on the Application. The presence of a link to a third-party site does not in any way constitute an endorsement, authorization or affiliation with that site. If You click on a link that redirects You to a third-party site, You will leave the Application. As We have no influence over the activities of third parties, We disclaim any liability regarding the use of Your Data by such third parties and invite You to consult the data protection policy of the relevant site before transmitting Your Data.
Article 10 TERMS OF USE
The content of this Policy is linked to that of the Terms of Use ("Terms") and all capitalized terms in this Policy have the meaning given to them in the Terms.
Article 11 POLICY UPDATES
OUDAVONE reserves the right to amend this Policy at any time. In the event of an amendment, OUDAVONE will post the changes on the Application and its use will constitute acceptance of these changes. The "last updated" date at the top of this Policy reflects the effective date of the changes made.
Article 12 HOW TO CONTACT OUDAVONE
For any questions or concerns regarding this Policy, You can contact Us by email at contact@gofusion.fr (DPO: it.admins@gofusion.fr) or by post: OUDAVONE SAS, 58 rue de Monceau, 75008 Paris, France.