Privacy Policy

Whenever we collect Data, you will be informed of which Data is mandatory and which Data is optional. Data from fields marked with an asterisk on forms is mandatory. If you fail to provide it, your request might not receive a full response.

TO WHOM DO WE SEND THE DATA WE COLLECT, AND FOR WHAT PURPOSES DO WE SEND IT?

• Data transferred to government authorities and/or public entities

In accordance with applicable law, the Data may be sent to government authorities upon request – including to government entities, court officers, ministerial officers, and debt-collection entities – solely for the purposes of complying with legal obligations or assisting with investigations into online crimes.

• Data Transferred to Third Parties

We work closely with certain third-party companies who may be given access to your Data. These companies include:

– Google, a partner we work with for audience measurement purposes, to display targeted ads, and to conduct behavioural retargeting on other websites;
– LinkedIn, a partner we work with to enable the display of targeted advertising on other websites for visitors who have a LinkedIn profile;
– Hubspot, a partner we work with to handle the collection of your Data from the forms on the Website, analyse your click path on our Website, and send messages about offers that might interest you;
– Infostrat, a partner we work with for the MyCashBox service in which you enter your Data on your project;
– our business partners, in order to send you offers tailored to the requests you submit on the Website;
– all of our group’s subsidiaries.

We send these third parties only the Data they need to provide their services, and we require them to not use the Data for any other purposes. These third parties act solely in accordance with our instructions, and they are contractually required to treat your Data with the same level of confidentiality and security as we do, as well as to comply with all applicable data protection laws.

HOW LONG IS YOUR DATA STORED?

Your Data is stored for no longer than is strictly necessary to fulfil the purposes set out in the Policy and in accordance with the GDPR and applicable law:

• Form Data is stored for 3 years after the last time we contact you for business purposes and receive no response;
• Browsing Data is stored for the periods specified in our Cookie Policy;
• Any Data used to process requests to exercise your rights is stored for the time needed to process your request, and is immediately erased afterwards.

Your Data is erased when these storage periods expire. However, in some cases, your Data may be archived for longer periods to assist in investigating, gathering evidence on, and bringing charges for criminal offences; in this case, the sole purpose of such collection is to provide judicial authorities with your Data. Once archived, your Data will no longer be accessible online, but will be extracted and stored on a distinct, secure medium.

DO WE TRANSFER YOUR DATA, AND IF SO, HOW AND WHERE CAN IT BE TRANSFERRED?

Your Data may be transferred from an EU country to a country outside the European Union.

If we transfer your Data outside of the European Union, we will always do so in a secure and legal manner:

• By transferring the Data to a recipient in a country that has received an “adequacy decision” from the European Commission declaring it to have an adequate level of protection;
• By implementing European Commission model contracts approved by the European Commission to ensure an adequate level of protection for your Data;
• By implementing Binding Corporate Rules approved by a competent data protection authority in the EU;
• Or by providing all appropriate safeguards pursuant to GDPR art. 46.

HOW IS YOUR DATA PROTECTED?

We take adequate technological and organisational steps to prevent unauthorised access, modification, disclosure, loss, or destruction of your Data. It is important for you to ensure the confidentiality of your login credentials to prevent unauthorised use of your account.

WHAT RIGHTS DO YOU HAVE TO YOUR DATA?

Under applicable data protection law, you have certain rights to your Data, namely:

• A right of access and information: you have the right to receive information on how your Data is processed in a concise, transparent, intelligible, and easily accessible form. You also have the right (i) to obtain confirmation as to whether or not your personal Data is being processed, and, if it is, (ii) access the Data and obtain a copy.
• A right to rectification: you have the right to have inaccurate Data about you corrected. You also have the right to have incomplete Data about you completed by providing a supplementary statement. Should you exercise this right, we promise to send any corrections to all recipients of your Data.
• A right to erasure: in some cases, you have the right to have your Data erased. However, this is not an absolute right and we can continue to store your Data for legal or legitimate purposes.
• A right to restriction of processing: in some cases, you have the right to restrict the processing of your Data.
• A right to Data portability: you have the right to have the Data you send to us returned to you in a structured, commonly used, and machine-readable format, for personal use or for use by a third party of your choosing. This right only applies when the processing of your Data is based on your consent or on a contract, or if the processing is carried out by automated means.
• A right to object to processing: you have the right to object to the processing of your Data at any time whenever processing is based on our legitimate interest or on a task carried out in the public interest, as well as whenever it is for direct marketing purposes. This is not an absolute right and we are entitled to reject your request for legal or legitimate purposes.
  The right to withdraw consent at any time: you can withdraw your consent to the processing of your Data at any time for processing based on your consent. Withdrawal of consent has no effect on the legality of prior processing on the basis of consent.
• The right to submit a complaint to a supervisory authority: you have the right to contact your data protection authority to complain about our data protection practices.
• The right to provide instructions on what should be done with your Data after your death: you have the right to tell us what you would like to be done with your Data if you die.

You can request to exercise these rights by clicking on the following link: [Exercise your rights form – drop-down menu with the contact reasons: access, rectification, erasure, object to processing, other]. You can also use the cookie consent banner to accept or refuse Cookies.

Please note that we may require you to prove your identity when you send a request to exercise these rights.

CHANGES TO OUR PRIVACY POLICY

We may occasionally modify this Policy, including, in particular, to comply with changes in applicable law, court rulings, editorial policies, and technological advances. When we do so, we will change the “last updated on” date, replacing the existing date with the one on which the changes were made. When necessary, we will inform you and/or ask for your consent. We advise you to visit this page from time to time to learn about any changes or updates that may have been made to the Policy.

If you have any questions about this Policy, you can send them to us by clicking on the following link: [Exercise your rights form – drop-down menu with the contact reasons: access, rectification, erasure, object to processing, other].

Last updated on 30 April 2010.