Participant data is kept for a maximum of 5 years from sign-up on the Praditus platform, or 3 months after the end of the Praditus service for the relevant customer — whichever comes first. Technical data is kept for 1 year, cookies for 30 days.

Beyond those periods, data is either deleted or irreversibly anonymised. On termination or expiry of the contract, data is deleted or returned, at the customer's choice.

Individual reports (self-awareness, 360 Feedback, coaching journey) are available to the participant and, where applicable, to one specifically named person — coach, manager or HR representative — whose identity is disclosed to the participant before any sharing. No individual report is shared automatically or without the participant's knowledge.

The Team Dynamics report is shared with the facilitator in a form anonymised at group level.

No. Our inventories are built on scientifically validated frameworks from work and organisational psychology — the Big Five personality model, emotional and social competencies (ESCI/EQ), RIASEC vocational interests and multi-rater 360 Feedback — and are designed exclusively for professional development.

No Praditus instrument is designed or validated for clinical diagnosis: no inference is made about any pathology, cognitive disorder or mental health condition. The data processed therefore constitutes neither health data nor special category data under Article 9 GDPR.

There is profiling within the meaning of Article 4(4) GDPR: questionnaires involve automated processing intended to evaluate certain professional aspects. Participants are explicitly informed of this in the privacy notice and consent to it at sign-up.

There is, however, no automated decision-making under Article 22: no score alone triggers a hire, a promotion or an exclusion. Results are always intended to inform development conversations led by humans.

Every individual has the rights of access, rectification, erasure, restriction and portability, the right to object and to withdraw consent at any time, and the right not to be subject to a decision based solely on automated processing.

These rights are exercised with dataprotection@praditus.com or by post (Praditus SAS, Data Protection Officer, 10 rue de Penthièvre, 75008 Paris, France). Our appointed Data Protection Officer is Yohan Ruso. If our answer is not satisfactory, a complaint may be lodged with the French supervisory authority, the CNIL.

Yes, for resource recommendations and the generation of coaching content. Our language model provider is Mistral AI, a French company: data remains processed within the EEA.

Praditus does not use customer data in identifiable form for its own purposes. Only irreversibly anonymised data, as defined by the CNIL, is used for service improvement, statistics and research.

Yes. The DPA provides an audit right: you may, at your own cost, carry out audits and inspections to verify our compliance and that of our sub-processors. Such audits are subject to reasonable notice, take place during normal business hours and follow arrangements that preserve the confidentiality of other customers' data.

We inform you of any addition or replacement of a sub-processor at least 10 business days before it takes effect, stating its identity, the processing activities concerned and the locations of processing. You may object on reasonable data protection grounds.

Every authorised sub-processor is bound by written obligations offering a level of protection at least equivalent to ours, and Praditus remains fully liable to you for their performance.

The Praditus data privacy policy is available online and presented to every participant at sign-up. The data protection agreement (DPA) is annexed to the commercial contract and sent on request to dataprotection@praditus.com.

Platform availability is published continuously on watch.praditus.com.