Confidentiality policy relating to the site

This confidentiality policy defines and informs you of the manner in which the Owner of the Site uses and protects the information that the User transmits, where applicable, when using the Site accessible from the following URL: (hereinafter the ‘Site’).

Please note that this privacy policy may be amended or supplemented at any time, in particular in order to comply with any changes in legislation, regulations, case law or technology. In such a case, the date of the update will be clearly identified at the top of this policy. These changes are binding on the User as soon as they are put online. The User should therefore consult this confidentiality and cookie use policy on a regular basis in order to take note of any changes.

I. Personal data

In general, you may visit the Site without providing any personal information about yourself. In any event, you are under no obligation to pass on this information to the Site Owner.

Nevertheless, if you refuse, you may not be able to benefit from certain information or services that you have requested. In some cases, the Owner may ask you to provide your surname, first name, postal address, e-mail address, telephone number, company and job title and other information about yourself (hereinafter referred to as your ‘Personal Information’). By providing this information, you expressly agree to it being processed by the Site Owner, for the purposes set out in point 2 below and for any other purposes set out at the end of each form.

In accordance with the General Data Protection Regulation (GDPR) adopted by the European Parliament on 14 April 2016, and the amended French Data Protection Act of 6 January 1978, SOS GRPD informs you of the following:

1. Identity of the data controller

The data controller is the Site Owner, whose contact details are indicated on the Site.

2. Purposes of processing

The SITE Owner may process your Personal Information:

(a) for the purpose of providing you with the information or services you have requested (in particular: sending you the Newsletter, commercial offers, white papers or assessing your level of compliance via a quiz); and/or

(b) for the purpose of collecting information enabling us to improve the Site, products and services (in particular by means of cookies); and/or

(c) for the purpose of being able to contact you about various events relating to the commercial relationship, including in particular product updates and customer support.

3. Recipients

Only the Site Owner is the recipient of your Personal Information. This information, whether in individual or aggregated form, is never passed on to a third party, notwithstanding the sub-contractors used by the Site Owner (you will find more information about them in point 7 below). Neither the Site Owner nor any of its subcontractors market the personal data of visitors and Users of its Site.

4. Retention period

Your Personal Information is kept by the Site Owner only for the time corresponding to the purpose of the collection as indicated in 2 above, which in any event may not exceed 24 months.

5. Data Protection Rights

You have the following rights concerning your Personal Information, which you may exercise by writing to us at the postal address given on the Site or by filling in the Site’s contact form.

Right of access and communication of data
You have the right to access your Personal Information.

However, due to the Site Owner’s obligation of security and confidentiality in the processing of personal data, you are informed that your request will be processed provided that you can prove your identity, in particular by producing a scan of your valid identity document (in the event of a request via our form) or a signed photocopy of your valid identity document (in the event of a request in writing).

The Site Owner informs you that it will have the right, if necessary, to oppose manifestly abusive requests (due to their number, repetitive or systematic nature).

To help you in your approach, particularly if you wish to exercise your right of access by sending a written request to the postal address mentioned in point 1, you will find by clicking on the following link a model letter drawn up by the Commission Nationale de l’Informatique et des Libertés (the ‘CNIL’).

www.cnil.fr/fr/modele/courrier/exercer-son-droit-dacces

Right to rectify data
Under this right, you are entitled by law to request the rectification, updating, blocking or deletion of any data concerning you that may be inaccurate, incorrect, incomplete or obsolete.

You may also define general and specific directives concerning the fate of your personal data after your death. Where applicable, the heirs of a deceased person may request that the death of their relative be taken into account and/or that the necessary updates be made.

To help you with your request, in particular if you wish to exercise your right to rectification on your own behalf or on behalf of a deceased relative, please send a written request to the postal address mentioned in point 1 by clicking on the following link. You will find a model letter drawn up by the CNIL.

www.cnil.fr/fr/modele/courrier/rectifier-des-donnees-inexactes-obsoletes-ou-perimees

Right to object
This right may only be exercised in one of the following two situations:

When the exercise of this right is based on legitimate grounds; or
When the purpose of exercising this right is to prevent the data collected from being used for commercial prospecting purposes.
To help you in your approach, particularly if you wish to exercise your right to object by means of a written request sent to the postal address indicated in point 1, you will find a model letter drawn up by the CNIL by clicking on the following link.

www.cnil.fr/fr/modele/courrier/supprimer-des-informations-vous-concernant-dun-site-internet

6. Response times

The Site Owner undertakes to reply to your request for access, rectification or opposition or any other additional request for information within a reasonable period of time, which may not exceed 1 month from receipt of your request.

7. Authorised service providers and transfer to a non-EU country

The Owner hereby informs you that it has recourse to its authorised service providers to facilitate the collection and processing of the data you have communicated to us. These service providers are located within the European Union and have access to the data collected via the various forms on the Site.

The Site Owner has previously ensured that its service providers provide adequate guarantees and comply with strict conditions in terms of confidentiality, use and data protection.