Privacy Policy

Version 1.0 of April 30, 2026

SIGMA is the platform used by HBD Consulting to build and maintain a pool of independent consultant profiles in order to meet client needs.

The platform allows the Consultant, or you, to keep your CV, skills, and availability up to date so you can receive relevant mission opportunities.

Who is the data controller?

HBD Consulting, or we, acts as the data controller. HBD Consulting is represented by Hamza Benkaid.

This document explains how HBD Consulting processes your personal data, for which purposes, and reminds you of your rights.

The terms data and personal data refer to personal data as defined in Article 4 of the European Regulation of April 27, 2016 on the protection of personal data and the free movement of such data (GDPR).

What data do we collect?

Authentication data

  • Email address *
  • Full name

Connection data

  • Internet IP address *
  • Connection logs *
  • Date and time of consent *

Any data extracted from the CV file (.pdf, .docx, etc.), in particular where applicable

  • Identity data: full name *, nationality, date or year of birth, city of residence, country of residence
  • Contact data: email address *, phone number
  • Professional data: professional experience, education, skills, certifications, languages, availability, type of mission sought (time and materials, fixed-price, permanent employment), expected daily rate
  • Other data: interests

* Required

Why do we process your data?

PurposeLegal basis
Create your profile and collect your CVConsent
Send marketing emailsConsent
Propose missionsContractual pre-contractual measures
Present your profile to a prospect or clientContractual pre-contractual measures

How long do we keep your data?

Data related to independent consultant accounts

  • 2 years from the last contact, meaning your last connection to your Sigma account.
  • You will be notified by email one month before this deadline. Without a new interaction, your data will be deleted from the platform.

Connection data

  • 6 months from collection.

Who can access your data?

Your data may be accessed by the following people:

  • Collaborators (partners, employees, interns),
  • Partners (consultants, business introducers),
  • Service providers (processors) handling the technical management and security of the platform.

Access to data is limited to what each person needs for their role, is contractually governed, and is subject to a confidentiality obligation.

Your data is only shared with a prospect or client when you have agreed to offer your services for a mission.

Your data is not sold to third parties.

What are your rights?

In accordance with the GDPR and the French Data Protection Act, you have:

  • A right to information and a right of access to your data;
  • A right to rectification;
  • A right to erasure;
  • A right to data portability;
  • A right to object;
  • A right to restriction of processing.

To exercise these rights, you can:

Because these are personal rights, we will only process your request if we can identify you. If we cannot identify you, we may ask for proof of identity.

To help you with your request, the CNIL provides a template letter here: https://www.cnil.fr/fr/modele/courrier/exercer-son-droit-dacces

We undertake to respond within a reasonable period and no later than 1 month from receipt of your request.

What cookies are placed?

A cookie is a file placed on your device when you visit a website. It collects information about your browsing and provides services suited to your device, whether computer, mobile, or tablet.

Under Article 5(3) of Directive 2002/58/EC as amended, transposed into Article 82 of French Law No. 78-17 of January 6, 1978, trackers and cookies follow two distinct regimes.

Cookies that are strictly necessary for the service or whose sole purpose is to facilitate communication by electronic means are exempt from prior consent under Article 82 of French Law No. 78-17 of January 6, 1978.

Cookies that are not strictly necessary for the service or whose sole purpose is not to facilitate communication by electronic means must be consented to by the user.

This consent of the data subject for one or more specific purposes constitutes a legal basis within the meaning of the GDPR and must be understood within the meaning of Article 6(1)(a) GDPR and the free movement of data.

We only use cookies that are strictly necessary for the operation of the platform (session, authentication, security, performance).

Cookie lifetime is adapted to their purpose and does not exceed 13 months.

For more information, you can consult the guidance provided by the French Data Protection Authority (CNIL):

How is your data processed?

When you upload your CV, our platform uses a language model to automatically extract the structured information in your profile, such as professional experience, education, skills, certifications, and languages.

The goal is to save time by pre-filling your profile so you do not have to re-enter each item manually. We retain full control: all extracted data is reviewed and corrected manually before being saved.

This processing is based on the consultant's consent and does not constitute automated decision-making within the meaning of Article 22 GDPR. Any question may be sent to contact@hbdconsulting.fr

Who helps us process your data?

Some data is sent to other actors, referred to as data processors, so they can help us handle it. We ensure that they strictly comply with the GDPR and provide sufficient security guarantees.

The platform, including processing and storage, is fully hosted in France by Scaleway SAS, whose registered office is located at 8 rue de la Ville-l'Évêque, 75008 Paris.

What security measures do we implement?

HBD Consulting implements appropriate technical and organizational measures in accordance with Article 32 GDPR to ensure a level of security appropriate to the risk.

Updates to this policy

We reserve the right to modify this privacy policy at any time and therefore invite you to review it regularly. Changes and clarifications take effect as soon as they are published on the website.

If we make material changes to this policy, we will inform you here that it has been updated so that you know what information we collect, how we use it, and in what circumstances, if any, we use and/or disclose it.

Contact us

For more information or if you have any questions, contact us by email at contact@hbdconsulting.fr