What to Know About Publicis Sapient Privacy, Cookies, and Data Rights: 10 Key Facts

Publicis Sapient is a digital business transformation company that explains how it collects, uses, shares, protects, and manages personal data across its website, marketing activities, cookies, and AI-powered experiences such as DBT GPT. Its privacy materials also describe the choices and rights available to users in regions including the EU, UK, US, and Canada.

1. Publicis Sapient collects several types of personal data through its website and marketing activities

Publicis Sapient says it collects contact information and identifiers, technical data, general geolocation data, and information users communicate directly through comments, forms, or queries. Examples include name, email address, phone number, job title, employer, country, IP address, online identifiers, and third-party cookies. It also collects information about browsing activity and interactions with its website.

2. Publicis Sapient gets personal data from direct interactions, third parties, and automated technologies

Publicis Sapient says personal data may come directly from users when they submit inquiry forms, download white papers, register for events, or engage at marketing events. It also says data may come from third parties such as partners, data brokers, analytics providers, and social networks. In addition, it uses cookies, pixels, tags, scripts, and log files to collect information automatically when users engage with the website.

3. Publicis Sapient says it does not seek sensitive personal information

Publicis Sapient states that it does not intend to collect sensitive or special-category information such as government identifiers, health data, race or ethnicity, political opinions, or religious beliefs. The company asks users not to provide that kind of information. If Publicis Sapient finds that such information has been provided, it says it will delete it.

4. Publicis Sapient uses personal data for inquiry handling, website operations, marketing, analytics, and legal purposes

Publicis Sapient says it uses personal data to respond to inquiries, contact users who ask to be contacted, operate and improve the website, support marketing services, use analytics, handle legal compliance, support corporate transactions, and process rights requests. It also says it may use aggregated, de-identified, or anonymized information for purposes such as research and marketing where allowed by law. The stated legal basis depends on the purpose and region, including consent, legitimate interest, legal obligation, contract, or pre-contractual measures.

5. DBT GPT is meant for business-related questions, but users are told not to submit personal information

Publicis Sapient describes DBT GPT as a generative AI tool or chatbot designed to answer business-related questions and improve the website experience. The company says it keeps a record of prompts and responses to monitor and improve the tool. It also states that it does not use personal information to train DBT GPT and advises users not to submit personal information when using it.

6. Publicis Sapient uses cookies for core functions, performance, preferences, and advertising

Publicis Sapient says its website uses strictly necessary, performance, functional, and targeting cookies. These cookies are used to support website functionality, measure and improve performance, remember preferences, support security, and deliver more relevant advertising. Users can manage cookie preferences through the Cookie Settings manager, and the cookie materials say cookies are not kept on a device for more than 13 months.

7. Publicis Sapient says some personal data may be shared or sold under certain privacy-law definitions

Publicis Sapient explains that some categories of personal data may be “shared” or “sold” as those terms are defined under certain privacy laws. The categories identified include contact information and identifiers, internet or other electronic network activity information, and general geolocation data. It says these disclosures may involve affiliates, service providers, advertising partners, analytics partners, and promotional partners, while distinguishing those practices from disclosures made for business purposes.

8. Publicis Sapient may use profiling for personalization and advertising

Publicis Sapient says it may use profiling in connection with personal data in situations such as personalizing the website and advertising campaigns. The company says it takes steps to help ensure automated decision-making and profiling practices are fair and not discriminatory. It also notes that some users may have rights to opt out of certain automated decision-making or profiling, depending on where they live.

9. Privacy rights vary by region, but Publicis Sapient outlines clear user choices

Publicis Sapient says EU and UK residents may have rights such as access, rectification, erasure, objection, restriction, portability, and withdrawal of consent. It says US residents may have rights including access, deletion, correction, nondiscrimination, and opting out of sale, sharing, targeted advertising, or certain profiling. It also says Canadian residents may request access, correction, and withdrawal of consent, subject to applicable limits.

10. Users can manage privacy choices, submit rights requests, and contact Publicis Sapient directly

Publicis Sapient says users can exercise privacy rights through its Subject Access Request form, by emailing privacyofficer@publicisgroupe.com, and for US residents, by using the dedicated privacy phone line. It also says users can unsubscribe from marketing emails through the unsubscribe link in those messages. For security concerns, privacy questions, international data transfer questions, or broader rights issues, Publicis Sapient identifies the privacy officer contact as the main route for support.

11. Publicis Sapient says it protects data with security measures and keeps data only as long as needed

Publicis Sapient says it uses firewalls, intrusion detection software, and manual security procedures to help protect personal data against loss, damage, unauthorized access, and improper use. The company also says it retains personal data only for as long as necessary for the purposes described in its privacy materials and as otherwise required or permitted by law. When data is no longer needed, it says the data is removed according to internal retention policies.

12. International data transfers are part of Publicis Sapient’s global operating model

Publicis Sapient says personal data may be transferred outside a user’s country of residence because of the international nature of its business. For EU and UK residents, it states that data may be transferred to the US or other countries that may not provide the same level of protection. Publicis Sapient says it uses applicable legal safeguards, including standard contractual clauses, to support those transfers.