Legal Notice

Website Publisher

The website noe-app.fr is published by:

B CONSULTANT
Simplified joint-stock company (SAS)
Share capital: €13,890.00 (Pappers)
Registered office: 350 Avenue Eugène Avinée, 59120 Loos, France (Pappers)
SIREN: 893 516 088 (Pappers)
SIRET (registered office): 893 516 088 00042 (Pappers)
Trade Register: Lille Métropole (893 516 088) (Pappers)
EU VAT number: FR30893516088 (Pappers)
APE/NAF code: 71.12B — Engineering, technical studies (Pappers)
Email: hello@noe-app.fr

Publication Director: The President (Suybeng Bopha). (Pappers)


Hosting

The website is hosted by:
Framer B.V.
Kabelweg 57, 1014 BA Amsterdam, Netherlands
Website: https://www.framer.com


Intellectual Property

All content on this website (texts, visuals, images, videos, illustrations, graphic elements, structure) is protected by intellectual property law.
Any reproduction, representation, modification, distribution or exploitation, in whole or in part, is prohibited without prior written authorization.


Liability

B CONSULTANT strives to provide accurate and up-to-date information but cannot guarantee the absence of errors or omissions. Users access and use the website under their sole responsibility.


Privacy Policy

This privacy policy describes how NOÉ, a solution developed by
B CONSULTANT, collects, uses, protects, and shares the personal data of
users of its website and, where applicable, its services.

It applies to all data processed via the website https://noe-app.fr/ and the associated services.

Our priority is to ensure confidentiality, security, and transparency in the processing of your data, in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

Data Controller

The controller of personal data is:

B CONSULTANT – NOÉ Solution
French SAS (simplified joint-stock company)
Contact: hello@noe-app.fr

Regulatory Framework

This policy is established in accordance with:

  • Regulation (EU) 2016/679 (GDPR),

  • the amended French Data Protection Act (Informatique et Libertés),

  • the recommendations of the CNIL.

NOÉ is designed for professional use in healthcare and scientific research, with particular attention paid to confidentiality, security, and traceability.

Personal Data Processed

3.1 Data collected via the website

When browsing the website https://noe-app.fr, the following data may be collected automatically:

  • IP address (partially anonymized),

  • browsing data (pages viewed, duration),

  • browser type and operating system.

This data is collected strictly for statistical and security purposes.

3.2 Data collected during voluntary contact

When you contact NOÉ (via form or email), the following data may be processed:

  • first and last name,

  • professional email address,

  • phone number,

  • organization and job title.

This data is provided voluntarily by the user.

3.3 Data processed via the NOÉ platform

As part of the use of the NOÉ platform, the following data may be processed:

  • bibliographic search parameters,

  • public scientific references (titles, abstracts, metadata),

  • analytical results, summaries, and reports generated by the user or by automated processes.

NOÉ does not process personal health data relating to identifiable patients, within the meaning of Article 9 of the GDPR.

Confidentiality and Project Isolation

4.1 Logical isolation of projects

Each project created in NOÉ is logically isolated.

The data, search parameters, results, summaries, and deliverables associated with a project:

  • are never shared between clients,

  • are accessible only to authorized users within the client organization,

  • are not visible or exploitable by other clients or third parties.

4.2 Data ownership and results

The input data provided by the user, as well as all results generated in NOÉ (reference lists, summaries, syntheses, reports), are the exclusive property of the user or the client organization.

NOÉ does not claim any ownership rights over this content.
The technical foundation of NOÉ (architecture, software, algorithms, AI components, know-how) remains the exclusive property of B CONSULTANT.

Purposes and Legal Bases for Processing

Personal data is processed for the following purposes:


PurposeLegal basis Management of requests and contactsConsentAccess to and use of the platformPerformance of a contractSecurity and proper functioningLegitimate interestService improvementLegitimate interestProfessional communicationsConsent or legitimate interest

6. Use of Artificial Intelligence

NOÉ uses artificial intelligence models (LLMs) exclusively as assistance tools for:

  • publication screening,

  • structuring information extraction,

  • generating summaries.

Key commitments:

  • No client data is used to train third-party AI models.

  • Processed data is used solely to provide the service requested by the user.

  • Final decisions and interpretations remain exclusively the responsibility of the user (human-in-the-loop).

Data Related to Incidents, Bugs, and Complaints

Technical data relating to:

  • incidents,

  • bugs,

  • or complaints
    may be collected solely for internal service improvement purposes.

This data:

  • is strictly limited to technical information,

  • does not include scientific, strategic, or confidential content specific to client projects.

Data Recipients

Personal data is accessible only to:

  • authorized personnel within B CONSULTANT,

  • technical subcontractors strictly necessary for operating the service (hosting, maintenance).

Subcontractors are contractually bound to:

  • comply with the GDPR,

  • maintain confidentiality,

  • implement appropriate security measures.

No data is sold, transferred, or used for third-party commercial purposes.


Transfers Outside the European Union

As a general principle, data is hosted within the European Union.

In the event of a transfer outside the EU, appropriate safeguards (standard contractual clauses) are implemented in accordance with the GDPR.


Data Retention

Type of data

Retention period Contact data 3 years after the last interaction

Browsing data Maximum of 13 months

Project data Contract duration + legal obligations


11. Data Security

NOÉ implements technical and organizational measures adapted to professional healthcare use to ensure the confidentiality, integrity, and availability of data.

Technical security

  • Encryption of data in transit via HTTPS / TLS.

  • Secure hosting on professional infrastructures.

  • Logical separation of environments (development, testing, production).

Logical separation of application data
Application data is organized according to strict logical separation:
each user is identified by a unique identifier (User ID) and each project or review by a distinct identifier (Review ID), stored in separate data structures, in order to limit any risk of unauthorized correlation between users and content.

Access and authentication

  • Secure credential-based authentication.

  • Generation of authentication tokens.

  • Strong password policy.

  • Logging of access and key actions (audit trail).

Backups and business continuity

  • Regular backups of application data.

  • Restoration procedures in case of incidents.


Cookies and Trackers

The NOÉ website uses:

  • strictly necessary cookies,

  • anonymized audience measurement cookies.

In accordance with CNIL recommendations:

  • non-essential cookies are subject to prior consent,

  • users may modify their preferences at any time.


Rights of Data Subjects

In accordance with Articles 15 to 22 of the GDPR, you have the following rights:

  • right of access,

  • right to rectification,

  • right to erasure,

  • right to restriction of processing,

  • right to object,

  • right to data portability.


Exercise of rights: hello@noe-app.fr
Response time: maximum of 1 month.

Complaint to the CNIL

In the event of difficulty, you may lodge a complaint with:
CNIL – Commission Nationale de l’Informatique et des Libertés
https://www.cnil.fr


Policy Updates

This policy may be updated to reflect:

  • legal developments,

  • functional developments of NOÉ.

Last update: [22/12/2025]

Legal Notice

Website Publisher

The website noe-app.fr is published by:

B CONSULTANT
Simplified joint-stock company (SAS)
Share capital: €13,890.00 (Pappers)
Registered office: 350 Avenue Eugène Avinée, 59120 Loos, France (Pappers)
SIREN: 893 516 088 (Pappers)
SIRET (registered office): 893 516 088 00042 (Pappers)
Trade Register: Lille Métropole (893 516 088) (Pappers)
EU VAT number: FR30893516088 (Pappers)
APE/NAF code: 71.12B — Engineering, technical studies (Pappers)
Email: hello@noe-app.fr

Publication Director: The President (Suybeng Bopha). (Pappers)


Hosting

The website is hosted by:
Framer B.V.
Kabelweg 57, 1014 BA Amsterdam, Netherlands
Website: https://www.framer.com


Intellectual Property

All content on this website (texts, visuals, images, videos, illustrations, graphic elements, structure) is protected by intellectual property law.
Any reproduction, representation, modification, distribution or exploitation, in whole or in part, is prohibited without prior written authorization.


Liability

B CONSULTANT strives to provide accurate and up-to-date information but cannot guarantee the absence of errors or omissions. Users access and use the website under their sole responsibility.


Privacy Policy

This privacy policy describes how NOÉ, a solution developed by
B CONSULTANT, collects, uses, protects, and shares the personal data of
users of its website and, where applicable, its services.

It applies to all data processed via the website https://noe-app.fr/ and the associated services.

Our priority is to ensure confidentiality, security, and transparency in the processing of your data, in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

Data Controller

The controller of personal data is:

B CONSULTANT – NOÉ Solution
French SAS (simplified joint-stock company)
Contact: hello@noe-app.fr

Regulatory Framework

This policy is established in accordance with:

  • Regulation (EU) 2016/679 (GDPR),

  • the amended French Data Protection Act (Informatique et Libertés),

  • the recommendations of the CNIL.

NOÉ is designed for professional use in healthcare and scientific research, with particular attention paid to confidentiality, security, and traceability.

Personal Data Processed

3.1 Data collected via the website

When browsing the website https://noe-app.fr, the following data may be collected automatically:

  • IP address (partially anonymized),

  • browsing data (pages viewed, duration),

  • browser type and operating system.

This data is collected strictly for statistical and security purposes.

3.2 Data collected during voluntary contact

When you contact NOÉ (via form or email), the following data may be processed:

  • first and last name,

  • professional email address,

  • phone number,

  • organization and job title.

This data is provided voluntarily by the user.

3.3 Data processed via the NOÉ platform

As part of the use of the NOÉ platform, the following data may be processed:

  • bibliographic search parameters,

  • public scientific references (titles, abstracts, metadata),

  • analytical results, summaries, and reports generated by the user or by automated processes.

NOÉ does not process personal health data relating to identifiable patients, within the meaning of Article 9 of the GDPR.

Confidentiality and Project Isolation

4.1 Logical isolation of projects

Each project created in NOÉ is logically isolated.

The data, search parameters, results, summaries, and deliverables associated with a project:

  • are never shared between clients,

  • are accessible only to authorized users within the client organization,

  • are not visible or exploitable by other clients or third parties.

4.2 Data ownership and results

The input data provided by the user, as well as all results generated in NOÉ (reference lists, summaries, syntheses, reports), are the exclusive property of the user or the client organization.

NOÉ does not claim any ownership rights over this content.
The technical foundation of NOÉ (architecture, software, algorithms, AI components, know-how) remains the exclusive property of B CONSULTANT.

Purposes and Legal Bases for Processing

Personal data is processed for the following purposes:


PurposeLegal basis Management of requests and contactsConsentAccess to and use of the platformPerformance of a contractSecurity and proper functioningLegitimate interestService improvementLegitimate interestProfessional communicationsConsent or legitimate interest

6. Use of Artificial Intelligence

NOÉ uses artificial intelligence models (LLMs) exclusively as assistance tools for:

  • publication screening,

  • structuring information extraction,

  • generating summaries.

Key commitments:

  • No client data is used to train third-party AI models.

  • Processed data is used solely to provide the service requested by the user.

  • Final decisions and interpretations remain exclusively the responsibility of the user (human-in-the-loop).

Data Related to Incidents, Bugs, and Complaints

Technical data relating to:

  • incidents,

  • bugs,

  • or complaints
    may be collected solely for internal service improvement purposes.

This data:

  • is strictly limited to technical information,

  • does not include scientific, strategic, or confidential content specific to client projects.

Data Recipients

Personal data is accessible only to:

  • authorized personnel within B CONSULTANT,

  • technical subcontractors strictly necessary for operating the service (hosting, maintenance).

Subcontractors are contractually bound to:

  • comply with the GDPR,

  • maintain confidentiality,

  • implement appropriate security measures.

No data is sold, transferred, or used for third-party commercial purposes.


Transfers Outside the European Union

As a general principle, data is hosted within the European Union.

In the event of a transfer outside the EU, appropriate safeguards (standard contractual clauses) are implemented in accordance with the GDPR.


Data Retention

Type of data

Retention period Contact data 3 years after the last interaction

Browsing data Maximum of 13 months

Project data Contract duration + legal obligations


11. Data Security

NOÉ implements technical and organizational measures adapted to professional healthcare use to ensure the confidentiality, integrity, and availability of data.

Technical security

  • Encryption of data in transit via HTTPS / TLS.

  • Secure hosting on professional infrastructures.

  • Logical separation of environments (development, testing, production).

Logical separation of application data
Application data is organized according to strict logical separation:
each user is identified by a unique identifier (User ID) and each project or review by a distinct identifier (Review ID), stored in separate data structures, in order to limit any risk of unauthorized correlation between users and content.

Access and authentication

  • Secure credential-based authentication.

  • Generation of authentication tokens.

  • Strong password policy.

  • Logging of access and key actions (audit trail).

Backups and business continuity

  • Regular backups of application data.

  • Restoration procedures in case of incidents.


Cookies and Trackers

The NOÉ website uses:

  • strictly necessary cookies,

  • anonymized audience measurement cookies.

In accordance with CNIL recommendations:

  • non-essential cookies are subject to prior consent,

  • users may modify their preferences at any time.


Rights of Data Subjects

In accordance with Articles 15 to 22 of the GDPR, you have the following rights:

  • right of access,

  • right to rectification,

  • right to erasure,

  • right to restriction of processing,

  • right to object,

  • right to data portability.


Exercise of rights: hello@noe-app.fr
Response time: maximum of 1 month.

Complaint to the CNIL

In the event of difficulty, you may lodge a complaint with:
CNIL – Commission Nationale de l’Informatique et des Libertés
https://www.cnil.fr


Policy Updates

This policy may be updated to reflect:

  • legal developments,

  • functional developments of NOÉ.

Last update: [22/12/2025]

Legal Notice

Website Publisher

The website noe-app.fr is published by:

B CONSULTANT
Simplified joint-stock company (SAS)
Share capital: €13,890.00 (Pappers)
Registered office: 350 Avenue Eugène Avinée, 59120 Loos, France (Pappers)
SIREN: 893 516 088 (Pappers)
SIRET (registered office): 893 516 088 00042 (Pappers)
Trade Register: Lille Métropole (893 516 088) (Pappers)
EU VAT number: FR30893516088 (Pappers)
APE/NAF code: 71.12B — Engineering, technical studies (Pappers)
Email: hello@noe-app.fr

Publication Director: The President (Suybeng Bopha). (Pappers)


Hosting

The website is hosted by:
Framer B.V.
Kabelweg 57, 1014 BA Amsterdam, Netherlands
Website: https://www.framer.com


Intellectual Property

All content on this website (texts, visuals, images, videos, illustrations, graphic elements, structure) is protected by intellectual property law.
Any reproduction, representation, modification, distribution or exploitation, in whole or in part, is prohibited without prior written authorization.


Liability

B CONSULTANT strives to provide accurate and up-to-date information but cannot guarantee the absence of errors or omissions. Users access and use the website under their sole responsibility.


Privacy Policy

This privacy policy describes how NOÉ, a solution developed by
B CONSULTANT, collects, uses, protects, and shares the personal data of
users of its website and, where applicable, its services.

It applies to all data processed via the website https://noe-app.fr/ and the associated services.

Our priority is to ensure confidentiality, security, and transparency in the processing of your data, in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

Data Controller

The controller of personal data is:

B CONSULTANT – NOÉ Solution
French SAS (simplified joint-stock company)
Contact: hello@noe-app.fr

Regulatory Framework

This policy is established in accordance with:

  • Regulation (EU) 2016/679 (GDPR),

  • the amended French Data Protection Act (Informatique et Libertés),

  • the recommendations of the CNIL.

NOÉ is designed for professional use in healthcare and scientific research, with particular attention paid to confidentiality, security, and traceability.

Personal Data Processed

3.1 Data collected via the website

When browsing the website https://noe-app.fr, the following data may be collected automatically:

  • IP address (partially anonymized),

  • browsing data (pages viewed, duration),

  • browser type and operating system.

This data is collected strictly for statistical and security purposes.

3.2 Data collected during voluntary contact

When you contact NOÉ (via form or email), the following data may be processed:

  • first and last name,

  • professional email address,

  • phone number,

  • organization and job title.

This data is provided voluntarily by the user.

3.3 Data processed via the NOÉ platform

As part of the use of the NOÉ platform, the following data may be processed:

  • bibliographic search parameters,

  • public scientific references (titles, abstracts, metadata),

  • analytical results, summaries, and reports generated by the user or by automated processes.

NOÉ does not process personal health data relating to identifiable patients, within the meaning of Article 9 of the GDPR.

Confidentiality and Project Isolation

4.1 Logical isolation of projects

Each project created in NOÉ is logically isolated.

The data, search parameters, results, summaries, and deliverables associated with a project:

  • are never shared between clients,

  • are accessible only to authorized users within the client organization,

  • are not visible or exploitable by other clients or third parties.

4.2 Data ownership and results

The input data provided by the user, as well as all results generated in NOÉ (reference lists, summaries, syntheses, reports), are the exclusive property of the user or the client organization.

NOÉ does not claim any ownership rights over this content.
The technical foundation of NOÉ (architecture, software, algorithms, AI components, know-how) remains the exclusive property of B CONSULTANT.

Purposes and Legal Bases for Processing

Personal data is processed for the following purposes:


PurposeLegal basis Management of requests and contactsConsentAccess to and use of the platformPerformance of a contractSecurity and proper functioningLegitimate interestService improvementLegitimate interestProfessional communicationsConsent or legitimate interest

6. Use of Artificial Intelligence

NOÉ uses artificial intelligence models (LLMs) exclusively as assistance tools for:

  • publication screening,

  • structuring information extraction,

  • generating summaries.

Key commitments:

  • No client data is used to train third-party AI models.

  • Processed data is used solely to provide the service requested by the user.

  • Final decisions and interpretations remain exclusively the responsibility of the user (human-in-the-loop).

Data Related to Incidents, Bugs, and Complaints

Technical data relating to:

  • incidents,

  • bugs,

  • or complaints
    may be collected solely for internal service improvement purposes.

This data:

  • is strictly limited to technical information,

  • does not include scientific, strategic, or confidential content specific to client projects.

Data Recipients

Personal data is accessible only to:

  • authorized personnel within B CONSULTANT,

  • technical subcontractors strictly necessary for operating the service (hosting, maintenance).

Subcontractors are contractually bound to:

  • comply with the GDPR,

  • maintain confidentiality,

  • implement appropriate security measures.

No data is sold, transferred, or used for third-party commercial purposes.


Transfers Outside the European Union

As a general principle, data is hosted within the European Union.

In the event of a transfer outside the EU, appropriate safeguards (standard contractual clauses) are implemented in accordance with the GDPR.


Data Retention

Type of data

Retention period Contact data 3 years after the last interaction

Browsing data Maximum of 13 months

Project data Contract duration + legal obligations


11. Data Security

NOÉ implements technical and organizational measures adapted to professional healthcare use to ensure the confidentiality, integrity, and availability of data.

Technical security

  • Encryption of data in transit via HTTPS / TLS.

  • Secure hosting on professional infrastructures.

  • Logical separation of environments (development, testing, production).

Logical separation of application data
Application data is organized according to strict logical separation:
each user is identified by a unique identifier (User ID) and each project or review by a distinct identifier (Review ID), stored in separate data structures, in order to limit any risk of unauthorized correlation between users and content.

Access and authentication

  • Secure credential-based authentication.

  • Generation of authentication tokens.

  • Strong password policy.

  • Logging of access and key actions (audit trail).

Backups and business continuity

  • Regular backups of application data.

  • Restoration procedures in case of incidents.


Cookies and Trackers

The NOÉ website uses:

  • strictly necessary cookies,

  • anonymized audience measurement cookies.

In accordance with CNIL recommendations:

  • non-essential cookies are subject to prior consent,

  • users may modify their preferences at any time.


Rights of Data Subjects

In accordance with Articles 15 to 22 of the GDPR, you have the following rights:

  • right of access,

  • right to rectification,

  • right to erasure,

  • right to restriction of processing,

  • right to object,

  • right to data portability.


Exercise of rights: hello@noe-app.fr
Response time: maximum of 1 month.

Complaint to the CNIL

In the event of difficulty, you may lodge a complaint with:
CNIL – Commission Nationale de l’Informatique et des Libertés
https://www.cnil.fr


Policy Updates

This policy may be updated to reflect:

  • legal developments,

  • functional developments of NOÉ.

Last update: [22/12/2025]

Legal Notice

Website Publisher

The website noe-app.fr is published by:

B CONSULTANT
Simplified joint-stock company (SAS)
Share capital: €13,890.00 (Pappers)
Registered office: 350 Avenue Eugène Avinée, 59120 Loos, France (Pappers)
SIREN: 893 516 088 (Pappers)
SIRET (registered office): 893 516 088 00042 (Pappers)
Trade Register: Lille Métropole (893 516 088) (Pappers)
EU VAT number: FR30893516088 (Pappers)
APE/NAF code: 71.12B — Engineering, technical studies (Pappers)
Email: hello@noe-app.fr

Publication Director: The President (Suybeng Bopha). (Pappers)


Hosting

The website is hosted by:
Framer B.V.
Kabelweg 57, 1014 BA Amsterdam, Netherlands
Website: https://www.framer.com


Intellectual Property

All content on this website (texts, visuals, images, videos, illustrations, graphic elements, structure) is protected by intellectual property law.
Any reproduction, representation, modification, distribution or exploitation, in whole or in part, is prohibited without prior written authorization.


Liability

B CONSULTANT strives to provide accurate and up-to-date information but cannot guarantee the absence of errors or omissions. Users access and use the website under their sole responsibility.


Privacy Policy

This privacy policy describes how NOÉ, a solution developed by
B CONSULTANT, collects, uses, protects, and shares the personal data of
users of its website and, where applicable, its services.

It applies to all data processed via the website https://noe-app.fr/ and the associated services.

Our priority is to ensure confidentiality, security, and transparency in the processing of your data, in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

Data Controller

The controller of personal data is:

B CONSULTANT – NOÉ Solution
French SAS (simplified joint-stock company)
Contact: hello@noe-app.fr

Regulatory Framework

This policy is established in accordance with:

  • Regulation (EU) 2016/679 (GDPR),

  • the amended French Data Protection Act (Informatique et Libertés),

  • the recommendations of the CNIL.

NOÉ is designed for professional use in healthcare and scientific research, with particular attention paid to confidentiality, security, and traceability.

Personal Data Processed

3.1 Data collected via the website

When browsing the website https://noe-app.fr, the following data may be collected automatically:

  • IP address (partially anonymized),

  • browsing data (pages viewed, duration),

  • browser type and operating system.

This data is collected strictly for statistical and security purposes.

3.2 Data collected during voluntary contact

When you contact NOÉ (via form or email), the following data may be processed:

  • first and last name,

  • professional email address,

  • phone number,

  • organization and job title.

This data is provided voluntarily by the user.

3.3 Data processed via the NOÉ platform

As part of the use of the NOÉ platform, the following data may be processed:

  • bibliographic search parameters,

  • public scientific references (titles, abstracts, metadata),

  • analytical results, summaries, and reports generated by the user or by automated processes.

NOÉ does not process personal health data relating to identifiable patients, within the meaning of Article 9 of the GDPR.

Confidentiality and Project Isolation

4.1 Logical isolation of projects

Each project created in NOÉ is logically isolated.

The data, search parameters, results, summaries, and deliverables associated with a project:

  • are never shared between clients,

  • are accessible only to authorized users within the client organization,

  • are not visible or exploitable by other clients or third parties.

4.2 Data ownership and results

The input data provided by the user, as well as all results generated in NOÉ (reference lists, summaries, syntheses, reports), are the exclusive property of the user or the client organization.

NOÉ does not claim any ownership rights over this content.
The technical foundation of NOÉ (architecture, software, algorithms, AI components, know-how) remains the exclusive property of B CONSULTANT.

Purposes and Legal Bases for Processing

Personal data is processed for the following purposes:


PurposeLegal basis Management of requests and contactsConsentAccess to and use of the platformPerformance of a contractSecurity and proper functioningLegitimate interestService improvementLegitimate interestProfessional communicationsConsent or legitimate interest

6. Use of Artificial Intelligence

NOÉ uses artificial intelligence models (LLMs) exclusively as assistance tools for:

  • publication screening,

  • structuring information extraction,

  • generating summaries.

Key commitments:

  • No client data is used to train third-party AI models.

  • Processed data is used solely to provide the service requested by the user.

  • Final decisions and interpretations remain exclusively the responsibility of the user (human-in-the-loop).

Data Related to Incidents, Bugs, and Complaints

Technical data relating to:

  • incidents,

  • bugs,

  • or complaints
    may be collected solely for internal service improvement purposes.

This data:

  • is strictly limited to technical information,

  • does not include scientific, strategic, or confidential content specific to client projects.

Data Recipients

Personal data is accessible only to:

  • authorized personnel within B CONSULTANT,

  • technical subcontractors strictly necessary for operating the service (hosting, maintenance).

Subcontractors are contractually bound to:

  • comply with the GDPR,

  • maintain confidentiality,

  • implement appropriate security measures.

No data is sold, transferred, or used for third-party commercial purposes.


Transfers Outside the European Union

As a general principle, data is hosted within the European Union.

In the event of a transfer outside the EU, appropriate safeguards (standard contractual clauses) are implemented in accordance with the GDPR.


Data Retention

Type of data

Retention period Contact data 3 years after the last interaction

Browsing data Maximum of 13 months

Project data Contract duration + legal obligations


11. Data Security

NOÉ implements technical and organizational measures adapted to professional healthcare use to ensure the confidentiality, integrity, and availability of data.

Technical security

  • Encryption of data in transit via HTTPS / TLS.

  • Secure hosting on professional infrastructures.

  • Logical separation of environments (development, testing, production).

Logical separation of application data
Application data is organized according to strict logical separation:
each user is identified by a unique identifier (User ID) and each project or review by a distinct identifier (Review ID), stored in separate data structures, in order to limit any risk of unauthorized correlation between users and content.

Access and authentication

  • Secure credential-based authentication.

  • Generation of authentication tokens.

  • Strong password policy.

  • Logging of access and key actions (audit trail).

Backups and business continuity

  • Regular backups of application data.

  • Restoration procedures in case of incidents.


Cookies and Trackers

The NOÉ website uses:

  • strictly necessary cookies,

  • anonymized audience measurement cookies.

In accordance with CNIL recommendations:

  • non-essential cookies are subject to prior consent,

  • users may modify their preferences at any time.


Rights of Data Subjects

In accordance with Articles 15 to 22 of the GDPR, you have the following rights:

  • right of access,

  • right to rectification,

  • right to erasure,

  • right to restriction of processing,

  • right to object,

  • right to data portability.


Exercise of rights: hello@noe-app.fr
Response time: maximum of 1 month.

Complaint to the CNIL

In the event of difficulty, you may lodge a complaint with:
CNIL – Commission Nationale de l’Informatique et des Libertés
https://www.cnil.fr


Policy Updates

This policy may be updated to reflect:

  • legal developments,

  • functional developments of NOÉ.

Last update: [22/12/2025]