CityMoodData protection
Privacy policy
Prepared in accordance with Regulation (EU) 2016/679 (GDPR) and French Law No. 78-17 of 6 January 1978, as amended.
Last updated: September 2026
1. Data controller
The data controller for the processing described below is:
CITYMOOD, a French simplified joint-stock company (SAS) with share capital of €1,000
60 rue François Ier, 75008 Paris
SIRET 990 680 431 00014, RCS Paris
Contact: contact@citymood.io
2. Data collected and purposes
We carry out two separate data processing activities on this website. No other processing takes place, and no data is collected without your knowledge.
2.1 Contact form and demo requests
| Data | Purpose | Legal basis |
|---|---|---|
| First and last name | Identify the contact and personalise the response | Legitimate interest (Art. 6(1)(f)) |
| Work email address | Respond to the request | Legitimate interest (Art. 6(1)(f)) |
| Phone number | Call you back if requested | Consent (Art. 6(1)(a)) |
| Local authority, role | Tailor the response to the context | Legitimate interest (Art. 6(1)(f)) |
| Free-text message | Handle your request | Legitimate interest (Art. 6(1)(f)) |
2.2 Online assessment
The assessment is intended for local authority professionals. Fields marked as optional may be left blank: the assessment works without them.
| Data | Purpose | Legal basis |
|---|---|---|
| Organisation type, population range | Place your answers in the context of local authorities of a similar size | Legitimate interest (Art. 6(1)(f)) |
| Local authority name, role | Provide context for the assessment and any subsequent discussion | Legitimate interest (Art. 6(1)(f)) |
| Email address (optional) | Send you your summary and contact you again about managing your requests | Legitimate interest (Art. 6(1)(f)) |
| Answers to the ten questions | Calculate your maturity score and priorities | Legitimate interest (Art. 6(1)(f)) |
| Source page and campaign parameters | Measure the reach of our publications | Legitimate interest (Art. 6(1)(f)) |
Our legitimate interest, explained. You are a professional, you have just answered ten questions about managing your local authority's requests, and our business addresses that need. We therefore consider it legitimate to contact you individually about this topic. This is a personal exchange: we do not add you to a mailing list. You may object at any time, without giving a reason, by writing to contact@citymood.io. Our assessment of how this interest is balanced against your rights is documented and available on request.
No automated decision producing legal effects concerning you is made. The maturity score is provided for guidance only.
3. Retention periods
- Prospect data, from both the contact form and the assessment: 3 years from the last contact, in accordance with CNIL recommendations.
- Customer data, where a contract exists: 5 years from the end of the contract, to meet accounting and tax obligations.
After these periods, the data is deleted or anonymised.
4. Recipients and processors
Your data is available only to CITYMOOD personnel who need it. It is never sold, rented or transferred to third parties for commercial purposes.
It is processed on our behalf by the following providers, acting on our instructions:
| Provider | Role | Location |
|---|---|---|
| Scaleway SAS | Website hosting | France |
| Supabase | Assessment storage | France |
| Brevo (Sendinblue) | Email delivery | France |
| Vercel Inc. | Form processing | United States |
| Calendly LLC | Appointment scheduling, if you use this module | United States |
5. Transfers outside the European Union
Website hosting, assessment storage and email delivery are provided in France.
Two providers are based in the United States: Vercel, which runs the functions handling form submissions, and Calendly, if you use the booking module. These transfers are governed by the appropriate safeguards provided for in Chapter V of the GDPR, including the European Commission's standard contractual clauses or participation in the EU–US Data Privacy Framework.
6. Your rights
Under the conditions provided for in the GDPR, you have the following rights:
- Access (Art. 15): obtain a copy of the data we process about you.
- Rectification (Art. 16): have inaccurate or incomplete data corrected.
- Erasure (Art. 17): request the deletion of your data.
- Restriction (Art. 18): request that processing be restricted.
- Portability (Art. 20): receive your data in a structured, machine-readable format.
- Objection (Art. 21): object to processing based on our legitimate interest. For direct marketing, you may exercise this right without giving a reason, and we will act on it without delay.
To exercise these rights, write to contact@citymood.io. Proof of identity may be requested where there is reasonable doubt. We respond within one month.
7. Complaints to the CNIL
If, after contacting us, you believe your rights are not being respected, you may lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or online at www.cnil.fr.
8. Trackers and local storage
This website uses no advertising trackers or audience measurement tools. No consent banner is therefore required.
The assessment stores two pieces of information in your browser: your answers in progress, so you can resume where you left off, and an indicator preventing the same assessment from being sent twice. This information remains on your device and falls within the exemption in point 2 of the final paragraph of Article 82 of French Law No. 78-17 for storage strictly necessary to a service you expressly requested. You may delete it at any time by clearing your browser's site data.
9. Security
Communications with this website are encrypted in transit (HTTPS). Access to saved assessments is restricted: the public key used by the website only allows new answers to be saved, never read. Administrative access is limited to people who need it.
10. Changes
This policy may be updated to reflect changes to the website or regulations. The last update date appears at the top of this page. If a substantial change affects your rights, we will inform those concerned.