Privacy policy

The website www.lebrain.com is operated under the responsibility of Novelis, represented by Mehdi NAFE.

This section informs users of the commitments made by Novelis, acting as data controller, regarding the data collected on this website.

Data protection officer (DPO): dpo@novelis.io.

Contents

• Processing of your data
• Bot protection (reCAPTCHA)
• Recipients
• Transfers outside the European Union
• Security of your data
• Retention periods
• Your rights
• Cookies

Processing of your data

What data?

• Contact form: full name, organization, job title (optional), work email, topic and context of your request, page from which it was sent, date
• Bot protection: technical signals analyzed by reCAPTCHA (see below) and the resulting trust score
• Technical server logs: IP address, date, page requested, browser

The website does not measure its audience and contains no advertising tracking tools.

For what purposes and on what legal bases?

Bot protection (reCAPTCHA)

The contact form is protected by reCAPTCHA v3, a Google service. Its script is loaded only when you first use the form (when you start filling it in), never simply when a page is opened. It analyzes technical signals (IP address, browser, interactions with the page) to tell a human visitor from a bot, without asking you to solve a challenge. In doing so, Google may set a cookie and local storage data (for example _GRECAPTCHA) that are necessary for this protection.

Data processed by Google is handled in accordance with its Privacy Policy and its Terms of Service.

Recipients

Access to the data is strictly limited to persons authorized by Novelis to carry out the purposes stated to you. The data is also processed by our technical service providers, who are bound by contract: website hosting, Microsoft 365 (notifying our team of your request by email) and Google (reCAPTCHA). This data may be disclosed to the legally competent authorities.

We do not sell or rent your data.

Transfers outside the European Union

Google (reCAPTCHA) and, for occasional technical access, Microsoft may process data in the United States. These transfers are governed by the European Commission's adequacy decision of July 10, 2023 (EU-US Data Privacy Framework) for certified companies and, failing that, by the European Commission's standard contractual clauses. You may obtain a copy by writing to dpo@novelis.io.

Security of your data

Protective measures are in place to ensure the security, integrity and confidentiality of your data: encrypted communications (HTTPS), access to requests restricted to the Novelis private network with authentication, and rate limiting. However, the risk of loss or destruction cannot be entirely ruled out.

Retention periods

Your rights

You may exercise your rights by writing to our data protection officer: dpo@novelis.io.

Please include your full name and the contact address concerned in your request. We will ask you to verify your identity only if we have reasonable doubts about it. We respond within 1 month (this period may be extended by 2 months if the request is complex, in which case we will let you know).

• Right of access and rectification
• Right to be informed
• Right to object, in particular to processing based on our legitimate interest
• Right to restriction of processing
• Right to data portability
• Right to erasure
• Right to set instructions regarding the handling of your data after your death
• Right to lodge a complaint with the CNIL (French data protection authority) (www.cnil.fr)

Cookies

The website does not set any audience measurement or advertising cookies. Fonts are hosted on our own servers: displaying them does not send any data to a third party.

Only the bot protection on the contact form may lead Google to set cookies or local storage data, which are necessary for this protection: