Privacy Policy for the Simeo Go Mobile Application

Effective date: September 3, 2025

1. Introduction

This Privacy Policy explains how Oxand ("we", “our company”) collects, uses, shares, and protects the personal data of users of the Simeo Go mobile application. We are committed to transparency and respect for your privacy.

2. About the Company

Oxand is a company specializing in predictive asset management and investment optimization, founded in 2002 as a spin-off from EDF. It provides software solutions (Oxand Simeo™) and consulting services for asset lifecycle management and predictive maintenance.

• Registered Office: 198 avenue de France, 75013 Paris, France
• Website: www.oxand.com

3. Data We Collect

3.1 Data you provide

• Login credentials (via SSO or email)
• Profile information (name, role, organization, etc.)
• Inspection data collected on site (asset condition, photos, comments, etc.)

3.2 Data collected automatically

• Technical and usage data (logs, app performance, device type, app version, errors)
• Geolocation data (if enabled by the user)

3.3 External data sources

• Data imported through integrations (spreadsheets, CMMS, BIM, API connections) when linked to Simeo Go.

4. Purpose of Processing

Collected data is used to:

• Enable collection, synchronization, and storage of inspection data
• Generate reports and visualize asset condition and performance
• Forecast asset evolution and simulate scenarios (budgets, performance, durability)
• Ensure app security and functionality
• Provide user support and improve the application

5. Legal Basis

We process personal data in compliance with the GDPR (EU Regulation 2016/679). Legal bases include:

• Contract performance (licensing, synchronization, core services)
• Legitimate interest (security, product improvement)
• User consent (e.g., geolocation, photos)

6. Data Sharing and Transfers

• We do not sell personal data to third parties.
• Data may be shared with:
  • Technical service providers (hosting, analytics, support)
  • Public authorities (only when legally required)
• Data is hosted in the European Union on ISO 27001-certified infrastructure, with AES-256 encryption at rest and TLS 1.3 encryption in transit.
• Access is restricted through role-based controls and SSO authentication.

7. Security

We apply strict security measures to protect your data, including encryption, role-based access control, secure hosting infrastructure, and regular audits.

8. Data Retention

• Inspection and audit data are retained as long as your account remains active.
• Technical logs are archived for a limited period (a few months).
• Retention may be extended when required by law or contractual obligations.

9. Your Rights

Under the GDPR, you have the right to:

• Access your personal data
• Request correction, deletion, or portability
• Object to or restrict certain processing activities
• Withdraw consent at any time (e.g., for geolocation)
• Lodge a complaint with a supervisory authority (e.g., CNIL in France)

To exercise your rights, please contact us at dpo@oxand.com (Data Protection Officer).

10. Changes to this Policy

We may update this Privacy Policy from time to time. Updated versions will be published on this website, with the revision date clearly indicated.

11. Contact

If you have any questions or requests about this Privacy Policy, please contact us at:

Oxand – Data Protection Officer
198 avenue de France, 75013 Paris, France
Email: dpo@oxand.com