CONFIDENTIALITY
Privacy Policy (GDPR standard)
Security and protection of personal data
Warnings
This tool is made available to you free of charge. The tool is based on information based on the firm's professional analysis of GDPR compliance. However, since compliance is a dynamic process and each situation is unique, the information provided must be adapted and can in no way be considered exhaustive or accurate.
Unless you request a review and validation by the Firm, the document generated is considered as simple information. Consequently, you are solely responsible for the interpretations made of the information provided, the advice you deduce from it and the adaptations made for your own business activity. The use and operation of the tool is therefore under your sole responsibility and at your own risk.
Definitions :
The Publisher : The person, natural or legal, who publishes online public communication services.
The Site : All sites, Internet pages and online services offered by the Publisher.
The User : The person using the Site and the services.
Nature of data collected
As part of the use of the Sites, the Publisher may collect the following categories of data concerning its Users:
Civil status, identity, identification data...
Communication of personal data to third parties
No communication to third parties
Your data will not be communicated to third parties. However, you are informed that they may be disclosed in accordance with a law, a regulation or by virtue of a decision of a competent regulatory or judicial authority.
Prior information for the communication of personal data to third parties in the event of merger / takeover
Collection of opt-in (consent) prior to the transmission of data following a merger / acquisition
In the event that we are involved in a merger, acquisition or any other form of asset transfer, we undertake to obtain your prior consent to the transmission of your data
personal data and to maintain the level of confidentiality of your personal data to which you have consented.
Collection of identity data
Perform operations relating to customer management concerning
- contracts; orders; deliveries; invoices; accounting and in particular customer account management
- a loyalty program within one or more legal entities;
- customer relationship monitoring such as carrying out satisfaction surveys, managing complaints and after-sales service
- the selection of clients to carry out studies, surveys and product tests (except with the consent of the persons concerned obtained under the conditions provided for in Article 6, these operations must not lead to the establishment of profiles likely to reveal sensitive data - racial or ethnic origins, philosophical, political, union, religious opinions, sexual life or health of persons)
The development of trade statistics
The organization of competitions, lotteries or any promotional operation excluding online games of chance and gambling subject to the approval of the Online Gaming Regulatory Authority
Managing people's opinions on products, services or content
Data aggregation
Aggregation with non-personal data
We may publish, disclose and use aggregated information (information about all of our Users or specific groups or categories of Users that we combine in such a way that an individual User can no longer be identified or referenced) and non-personal information for industry and market analysis, demographic profiling, promotional and advertising purposes and other business purposes.
Aggregation with personal data available on the User's social accounts.
If you connect your account to another service's account for the purpose of cross-posting, that service may share with us your profile information, login information, and any other information you have authorized to be disclosed. We may aggregate information about all of our other Users, groups, accounts, with the personal data available about the User.
Collection of identity data
Free consultation
Consultation of the Site does not require registration or prior identification. It can be done without you providing any personal data about you (name, first name, address, etc.). We do not record any personal data for the simple consultation of the Site.
Collection of identification data
Use of user ID only for access to services
We use your electronic identifiers only for and during the execution of the contract.
Terminal data collection
No collection of technical data
We do not collect or store any technical data from your device (IP address, Internet service provider, etc.).
Cookies
Cookie retention period
In accordance with the recommendations of the CNIL, the maximum duration of storage of cookies is 13 months maximum after their first deposit in the User's terminal, as is the duration of the validity of the User's consent to the use of these cookies. The lifespan of cookies is not extended with each visit. The User's consent must therefore be renewed at the end of this period.
Purpose of cookies
Cookies may be used for statistical purposes, in particular to optimize the services provided to the User, based on the processing of information concerning the frequency of access, the personalization of pages as well as the operations carried out and the information consulted.
You are informed that the Publisher may place cookies on your device. The cookie records information relating to navigation on the service (the pages you have viewed, the date and time of viewing, etc.) that we can read during your subsequent visits.
Opt-in for the deposit of cookies
We do not use cookies. If we were to use them in the future, you would be informed in advance and would have the opportunity to disable these cookies.
Retention of technical data
Duration of retention of technical data
Technical data is kept for the period strictly necessary to achieve the purposes referred to above.
Period of retention of personal data and anonymization
Data retention for the duration of the contractual relationship
In accordance with Article 6-5° of Law No. 78-17 of 6 January 1978 relating to information technology, files and freedoms, personal data subject to processing are not kept beyond the time necessary for the execution of the obligations defined when the contract is concluded or the predefined duration of the contractual relationship.
Retention of anonymized data beyond the contractual relationship / after account deletion
We keep personal data for the period strictly necessary to achieve the purposes described in these T&Cs. Beyond this period, they will be anonymized and kept for exclusively statistical purposes and will not give rise to any exploitation of any nature whatsoever.
Deletion of data after account deletion
Data purging methods are implemented to provide for their effective deletion as soon as the retention or archiving period necessary for the accomplishment of the determined or imposed purposes is reached. In accordance with law n°78-17 of January 6, 1978 relating to information technology, files and freedoms, you also have a right to delete your data that you can exercise at any time by contacting the Publisher.
Data deletion after 3 years of inactivity
For security reasons, if you have not authenticated yourself on the Site for a period of three years, you will receive an email inviting you to log in as soon as possible, otherwise your data will be deleted from our databases.
Account deletion
Account deletion on request
The User has the possibility to delete his Account at any time, by simple request to the Publisher OR via the Account deletion menu present in the Account settings where applicable.
Account deletion for violation of the T&Cs
In the event of a violation of one or more provisions of the T&Cs or any other document incorporated herein by reference, the Publisher reserves the right to terminate or restrict, without any prior warning and at its sole discretion, your use of and access to the services, your account and all Sites.
Indications in the event of a security breach detected by the Publisher
User Information in the Event of a Security Breach
We undertake to implement all appropriate technical and organizational measures to guarantee a level of security appropriate to the risks of accidental, unauthorized or illegal access, disclosure, alteration, loss or destruction of your personal data. In the event that we become aware of illegal access to your personal data stored on our servers or those of our service providers, or unauthorized access resulting in the realization of the risks identified above, we undertake to:
- Notify you of the incident as soon as possible;
- Examine the causes of the incident and inform you;
- Take reasonable steps to mitigate the negative effects and harm that may result from said incident.
Limitation of liability
Under no circumstances may the commitments defined in the point above relating to notification in the event of a security breach be equated with any recognition of fault or liability for the occurrence of the incident in question.
Transfer of personal data abroad
No transfer outside the European Union
The Publisher undertakes not to transfer the personal data of its Users outside the European Union.
Modification of the T&Cs and the privacy policy
In the event of modification of these T&Cs, commitment not to lower the level of confidentiality substantially without prior information of the persons concerned.
We undertake to inform you in the event of any substantial modification to these T&Cs, and not to substantially lower the level of confidentiality of your data without informing you and obtaining your consent.
Applicable law and methods of appeal
Arbitration clause
You expressly agree that any dispute that may arise from these T&Cs, in particular their interpretation or execution, will be subject to an arbitration procedure subject to the rules of the arbitration platform chosen by mutual agreement, to which you will adhere without reservation.
Data portability
The Publisher undertakes to offer you the possibility of having all of the data concerning you returned to you upon simple request. The User is thus guaranteed better control over his data, and retains the possibility of reusing it. This data must be provided in an open and easily reusable format.