Data protection

Protection of information

Within the scope of its business, Wavestone collects and processes information, some of which is classified as personal data. Wavestone attaches great importance to the respect of privacy, and only uses data in a responsible and confidential manner, for a specific purpose and in accordance with the regulations applicable to the protection of personal data, notably the European General Data Protection Regulation.

Wavestone has defined a global compliance policy with the European regulation, applicable to all its subsidiaries, even for non-EU citizens and strives to protect your personal information from loss, misuse and unauthorized alteration. Wavestone has reasonably effective administrative, technical and physical safeguards in place to protect your personal information.


Data collected

We collect the following personal data via the contact form on the website, the forms for downloading content or registering for events or subscribing to newsletters on certain pages of the site:

  • Identification data given by you and in response to a service request: first and last name, company or organization, email, possibly a phone number if you wish to be contacted quickly.
  • Data collected automatically: During your visits, once you have given your consent, we may collect “web analytics” information relating to your browsing, the duration of your visit, your location, your browser type and version. The technology used is the cookie.


Processing of personal data in the context of recruitment

Depending on the office you are applying to, the application process may vary. In any case, we would like to assure you that the security and protection of our applicants and employees data are a priority in our company.

For more information, please visit and


Use of the data

The data you directly provide to us is used to contact you and/or in the context of the request that you make to us (registration, subscription, download). Web analytics data is collected anonymously by Google Analytics, and allows us to measure the audience of our web site, the consultations and possible errors in order to constantly improve the user experience. This data is used by Wavestone, the data controller, and will never be transferred to a third party or used for any other purpose than those detailed above.


Legal basis

Personal data is collected only after mandatory consent from the user. This consent is collected legitimately (buttons and check boxes), free, clear and unequivocal.


Retention period

Email addresses and personal data received via contact forms are subject to data processing in order to address the issue raised. These data are kept for a maximum of 12 months.


Rights of individuals

You have the right to consult, request a modification or erase all your personal data.

You can at any time exercise your rights (access, amend, delete, contradict, limit processing and portability) at any time on the data concerning you by writing to the Data Protection Officer via the address and attaching some proof of identity.

You have the possibility of filing a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL).


Verification or updating of personal information

To ensure that you have as much control as possible over the personally identifiable information and other information you provide, you may, in accordance with the General Data Protection Regulations (GDPR), make a request to We will process any changes you request within a reasonable time. However, requests for deletion of information are subject to Wavestone’s internal disclosure and retention policies and all applicable legal obligations.


International transfers

We are an international firm and your data could be transferred to our offices anywhere in the world, including countries outside the European Economic Area (US, UK, Morocco, Hong Kong, Singapore). Please visit to know our locations. The website is hosted on servers located in France.


Page updated on May 24, 2024