Privacy policy (RGPD standard)

Security and protection of personal data

Definitions :

The Publisher: The natural or legal person who publishes the online public communication services.

The Site: All the sites, web pages and online services offered by the Publisher.

The User: The person using the Site and the services.

Nature of the data collected

In the course of using the Sites, the Publisher may collect the following categories of data concerning its Users:

Aggregation of data

Aggregation with non-personal data

We may publish, disclose and use Aggregate Information (information about all of our Users or specific groups or categories of Users that we combine so that an individual User can no longer be identified or referred to) and Non-Personal Information for industry and market analysis, demographic profiling, promotional and advertising purposes and other business purposes.

Aggregation with personal data available on the User’s social accounts

If you connect your account to an account of another service for the purpose of cross-mailing, that service may share your profile information, login information, and any other information you have authorized to be shared with us. We may aggregate information about all of our other Users, groups, accounts, with the personal data available about the User.

Cookies

Cookie retention period

In accordance with CNIL recommendations, cookies are kept for a maximum of 13 months after they are first placed on the User’s terminal, as is the period of validity of the User’s consent to the use of these cookies. The lifespan of cookies is not extended with each visit. The User’s consent must therefore be renewed at the end of this period.

Purpose of cookies

Cookies may be used for statistical purposes, in particular to optimise the services provided to the User, based on the processing of information concerning the frequency of access, the personalisation of pages, the operations carried out and the information consulted.

You are informed that the Publisher may place cookies on your terminal. The cookie records information relating to navigation on the service (the pages you have consulted, the date and time of consultation, etc.) which we can read during your subsequent visits.

Retention of technical data

Duration of storage of technical data

Technical data is kept for the time strictly necessary to achieve the purposes set out above.

Storage period for personal data and anonymisation

Deletion of data after account deletion

Data purging procedures are in place to ensure that data is effectively deleted as soon as the retention or archiving period required to fulfil the specified or imposed purposes has been reached. In accordance with the French Data Protection Act no. 78-17 of 6 January 1978, you also have the right to delete your data, which you may exercise at any time by contacting the Publisher.

Deletion of data after 3 years of inactivity

For security reasons, if you have not logged on to the Site for a period of three years, you will receive an e-mail inviting you to log on as soon as possible, failing which your data will be deleted from our databases.

Account deletion

Account deletion on request

The User may delete his/her Account at any time, by simply requesting the Publisher to do so OR by using the Account deletion menu in the Account settings, if applicable.

Account deletion in the event of a breach of the GTCU

If you breach any provision of the TOS or any other document incorporated herein by reference, the Publisher reserves the right to terminate or restrict your use of and access to the Services, your Account and all Sites at its sole discretion, without prior notice.

Indications in the event of a security breach detected by the Publisher

Informing the User in the event of a security breach

We undertake to implement all appropriate technical and organisational measures in order to guarantee a level of security appropriate to the risks of accidental, unauthorised or illegal access, disclosure, alteration, loss or destruction of your personal data. In the event that we become aware of unlawful access to your personal data stored on our servers or those of our service providers, or of unauthorised access resulting in the risks identified above, we undertake to :

Notify you of the incident as soon as possible;

Examine the causes of the incident and inform you of them;

Take reasonable steps to mitigate any negative effects and damage that may result from the incident.

Limitation of liability

Under no circumstances may the undertakings set out in the point above relating to notification in the event of a security breach be assimilated to any acknowledgement of fault or responsibility for the occurrence of the incident in question.

Modification of the GCU and the privacy policy

In the event of modification of these GCU, we undertake not to lower the level of confidentiality substantially without first informing the persons concerned.

We undertake to inform you in the event of substantial modification of these GTU, and not to lower the level of confidentiality of your data substantially without informing you and obtaining your consent.