This privacy policy aims to inform users of the Software about : 

• How their personal data is collected and processed. 
• Personal data includes any information that can identify a user, such as name, surname, age, postal or email address, location, or IP address (non-exhaustive list). 
• The rights users have regarding their personal data. 
• The person responsible for processing collected personal data. 
• The recipients of this data. 
• The software’s cookie policy. 

                                                      ARTICLE 1 : PRINCIPLES RELATING TO THE COLLECTION AND PROCESSING OF PERSONAL DATA 

In accordance with Articles 4, 5, and 6 of Law No. 2004-63 of July 27, 2004, relating to the protection of personal data, personal data refers to all information, regardless of its origin or form, that allows a natural person to be identified, directly or indirectly, excluding information related to public life or considered as such by law.  

A natural person is considered identifiable if they can be identified, directly or indirectly, through several data points or symbols that relate to their identity, physical, physiological, genetic, psychological, social, economic, or cultural characteristics.  

Personal data processing means any operation, whether automated or manual, carried out by a natural or legal person, for purposes such as collection, recording, storage, organization, use, transmission, distribution, destruction, or consultation of personal data, as well as any operation related to database or file management or interconnection.  

Processing is lawful only if at least one of the following conditions is met: 

•  The data subject has consented to the processing for one or more specific purposes; 
•  The processing is necessary for the performance of a contract to which the data subject is a party; 
•  The processing is required by law; 
•  The processing is necessary to protect the vital interests of the data subject or another person; 
•  The processing is necessary for the performance of a task carried out in the public interest or under official authority; 
•  The processing is necessary for the legitimate interests pursued by the controller or a third party, unless overridden by the fundamental rights and freedoms of the data subject. 

                                                         ARTICLE 2 : PERSONAL DATA COLLECTED AND PROCESSED WHEN USING THE SOFTWARE

  2.1 Data Collected 

The personal data collected in the course of our activity include : 

• Professional contact information: name, surname, position, department, email address, phone number, LinkedIn, etc. 
• Connection data such as IP addresses and activity logs. 
• Technical cookies for authentication and navigation, as well as anonymous cookies for audience measurement. 

Data will be deleted upon request to delete an account, within a maximum of 30 days. Once deleted, data cannot be restored. Anonymous data may be retained for statistical purposes. 

The collection and processing of this data serve the following purposes : 

• Managing user accounts (creation, activation of access types, etc.) based on our Terms of Use. 
• Providing services and functionalities such as ticketing, tenant management, and support messaging. 
• Ensuring the security and quality of our services and platform. 
• Installing cookies in accordance with our cookie policy. 

  2.2 Method of Data Collection

When using our site, the following data are automatically collected: IP address and geographic position. 

Other data (name, company, email, phone number) are collected when you request a demo or contact us. 

Data are retained securely for at least the duration of the subscription contract. 

  2.3 Data Hosting 

The Attunea software is hosted by “OVH”, and client data are stored in France. 

OVH SARL — MF: 1111538F/A/M/000 RC: B24122392009 

Contact: support-tn@ovh.com — Website: [www.ovh.tn](http://www.ovh.tn) 

  2.4 Data Transmission to Third Parties 

Data may be transmitted only to our technical partners, such as our maintenance provider "Satoripop", for corrective and evolutionary maintenance. 

Except for these partners, we do not sell or transfer personal data to any third parties. 

Data are used exclusively by our internal teams and the partner mentioned above. 

  2.5 Cookies Policy 

During the use of our application, cookies or similar technologies may be placed on your device to improve your experience or ensure the proper functioning of services. 

Types of cookies used : 

• Technical cookies (authentication, security, navigation). 
• Audience measurement cookies used anonymously for analytics and tailored content. 

                                                                                    ARTICLE 3 : DATA CONTROLLER AND DATA PROTECTION OFFICER 

  3.1 Data Controller 

  Personal data are collected by Ortusoft SARL, ,registered under number 1876170S. 

 The Data Controller can be contacted as follows : 

•  By mail: Avenue Habib Mellouli, 4002 Sousse, Tunisia 
•  By email: contact@attunea.com 

                                                                          ARTICLE 4 : USER RIGHTS REGARDING DATA COLLECTION AND PROCESSING 

  In accordance with Law No. 2004-63 of July 27, 2004, users have the following rights: 

•  Right of access, rectification, and erasure of data (Articles 31–41). 
•  Right to data portability (Articles 47–52). 
•  Right to object to processing (Articles 42–43). 
•  Right to file a complaint with the "INPDP" (National Authority for the Protection of Personal Data). 

 Data are retained for the duration necessary for their processing purposes or as required by law. 

To exercise these rights, contact : 

INPDP, 1 Rue Mohamed Moalla, 1002 Mutuelleville, Tunis, B.P. 525, Tunisia. 

Email: inpdp@inpdp.tn 

                                                                                            ARTICLE 5 : MODIFICATION OF THE PRIVACY POLICY 

The publisher of the Attunea Software reserves the right to modify this Policy at any time to ensure compliance with applicable laws. 

Any modifications will not affect ongoing licenses already accepted by the client. 

Users are encouraged to review the Policy regularly. 

                                                                                                                       ARTICLE 6 : CONSENT 

By using the Software, you consent to the collection, processing, and transfer of your personal data in accordance with this Policy. You may withdraw your consent at any time. 

                                                                                                              ARTICLE 7 : SECURITY MEASURES 

We implement appropriate technical and organizational security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. 

                                                                                                                         ARTICLE 8 : CONTACT 

For any questions or complaints regarding this privacy policy, please contact :  

Email : contact@attunea.com  

This policy was issued on August 1, 2025.