External Data Protection Policy

External Data Protection Policy

Version History 


Version: V1

Date: 29/02/2024

Author: Legal department

Object: Creation




Distribution methods: Publication on the GDPR page of Pasqal’s website


Reference documents 


Name of the document:

  • External Data Protection Policy
  • Internal Data Protection Policy
  • Data Processing Register
  • Policy on the management and use of cookies



About our policy 


PASQAL has created this document to communicate its policy and practices regarding the collection use and disclosure of information n the course of conduct its business. PASQAL takes the respect of privacy and the protection of personal data seriously and aims to provide transparency and clarity regarding its data processing through this policy. 


PASQAL thus collects and processes personal data in compliance with Regulation (EU) No. 2016/679 on the General Data Protection Regulation (hereinafter referred to as “GDPR”), which has been in force since May 25, 2018, and the provisions of the Data Protection Act No.78-17 of January 6, 1978 and the Data Protection Act No. 2018-493 enacted on June 20, 2018. 


This policy applies to all of PASQAL’s offices. 



How do we collect your personal data? 


In the course of its activities, PASQAL collects and processes some of your personal data. The provision of your personal data is voluntary and does not constitute a condition for using the website. This personal data may be collected directly from you or indirectly. 


For example, PASQAL collects information about you: 

  • When you browse our website, including its mobile version; 
  • When you send us a contact form; 
  • When you register for conferences or events we organize in France or abroad; 
  • When you subscribe to our newsletters, marketing alerts or other information; 
  • When you request the download of a study paper published on our website; 
  • When you register to apply for a job on the PASQAL recruitment portal. 



What personal data do we collect? 


The data w collect includes, by way of example: 

  • Identification data: surname, first name, title; 
  • Contact information: address, telephone number, email address; 
  • Professional information: company, position; 
  • Information submitted with job applications; 
  • Information that you do not enter directly: IP addresses, http protocol elements, site browsing patterns, cookies. 


If it appears necessary for us to collect or use particular categories of personal data (“sensitive data”), we will request your express consent on the matter. 


We are careful to protect the privacy of minors. We do not intentionally collect personal data from minors. 



How do we use your personal data? 


We only use personal data if there is at least one legal basis for such use, as specified below: 

  • Compliance with a legal obligation incumbent on PASQAL; 
  • To protect PASQAL’s legitimate interests; 
  • The performance of a contract entered into or pre-contractual measures, taken at the request of the person concerned by the data processing; 
  • Consent given by the person concerned by the data processing. 


We process your personal data in order to: 

  • Respond to your requests for information; 
  • Publish your comments;  
  • Manage your registration requests for conferences and events; 
  • Assess job applications and recruit; 
  • Distribute newsletters, articles, information and alerts; 
  • Keep you informed about our products and services that may be of interest to you; 
  • Improve the quality of our service; 
  • Distribute B2B commercial offers. 



The processing of personal data in the context of our commercial activities 


We may also process personal data as part of the services we provide for our clients, in accordance with our contractual commitments. In this case, the data is processed exclusively within the scope of our contractual obligations. We implement organisational and technical security measures to limit access to data and guarantee the confidentiality of information processed within the specific framework inherent to our services. 



Who are the recipients of your personal data? 


Your data is intended for use in the context of PASQAL’s services. It may also be transmitted to third partes, such as service providers to whom we entrust some of our activities (e.g. job application management). 


PASQAL may be required to transmit personal data by and to relevant authorities. 


PASQAL ensures that it has sufficient guarantees (including from its partner and service providers) in terms of personal data protection for each data transfer. 



Who is responsible for your personal data in the event of a link to a third party site? 


If PASQAL provides a link to a third party site, the rules and policies applicable to that site will apply. 


PASQAL cannot be held responsible for the processing of your personal data by third party sites. 



Where is your personal data processed and stored? 


As data protection legislation is not the same in all countries, PASQAL has chosen to host and process data in France or, where applicable, in a European Union country, or to contract with a company that complies with the European Commission’s Standard Contractual Clauses. 



How long is your personal data stored? 


Your data is stored in accordance with a set of established rules. PASQAL only processes data that is adequate, relevant and limited to what is strictly necessary for the purposes for which it is processed. In particular, this means ensuring that data is kept to a strict minimum. This retention period is variable and depends on the nature of the data, its purpose and the legal and regulatory aspects to which it is subject. 



How is your personal data protected? 


PASQAL ensures that the processing of personal data benefits from the highest level of security. PASQAL guarantees the implementation of “appropriate technical and organisational measures”, taken according to the nature of the data, the purposes o the processing and the associated risks. In the event of an incident leading to a breach of personal data, PASQAL will notify the incident to the competent supervisory authority and, if necessary, inform the persons concerned as soon as practically possible. 



What are your rights? 


In accordance with applicable data protection regulations, you have the following rights: 

  • A right of access to and communication of information concerning you and the associated data processing; 
  • A right of rectification with the possibility of completing and updating your information; 
  • A right to portability in order to transmit the information concerning the person making the request to a third party when this is technically possible, it being specified that this right is only applicable to data provided directly by the person; 
  • A right to determine the fate of your data in the event of death; 
  • A right to the erasure of your data; 
  • A right to object to the processing of your data; 
  • A right to withdraw the consent for the use of your data. 


We would like to emphasize that PASQAL reserves the right, in exceptional cases, where required by law, in case of contractual obligations, public interest or legitimate interest, not to honour certain requests (in connection with a request for deletion, restriction or objection). 


Furthermore, in cases of manifestly unfounded or excessive requests, in particular due to their repetitive nature, PASQAL may either: 

  • Require payment of a reasonable fee that takes into account the administrative costs incurred in providing the information, making the communications or taking the actions requested; 
  • Refuse to comply with such requests. 


It is, however, PASQAL’s responsibility to demonstrate that such requests are manifestly unfounded or excessive. 



How can you exercise your rights? 


You may exercise your rights by enclosing a copy of proof of identity with your request, either: 

  • By post, to the attention of DPO PASQAL at the following postal address: 7 rue Léonard de Vinci, 91300 Massy, France; 
  • By email:  


PASQAL has one month to reply. In the event of a complex request or a large number of requests, this period may be extended to three months. PASQAL will keep you informed if this is the case. 


Furthermore, with regard to marketing communications, you may withdraw your consent at any time by sending an email to Your request will be processed as soon as possible and in any event, within a maximum delay of 7 working days.  



How to file a complaint? 


If, despite all the care that PASQAL takes in processing your data, you find that PASQAL does not satisfy your request, you may submit a complaint to the CNIL (Commission Nationale de l’Informatique et des Libertés):; 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07. 



How are cookies managed? 


A cookie is a small text file sent to your Internet browser which serves as a connection indicator. Cookies may be placed on your computer as your browse a site. 


When you first log on to the website, you have the option of accepting or rejecting cookies, and of configuring your choices. You can also configure your browser so that no cookie are stored. 


For more information, please refer to our Cookie Management and Use Policy.