Personal data

Personal Data Protection Policy (applicable as of May 25, 2018)

MY PERSONAL INFORMATION

We are committed to protecting your personal information, being transparent about the data we hold and giving you control over how we use it. The purpose of our privacy policy is to:

- explain clearly and simply how we use the information we collect when you use our services;

- detail the options we offer to control the use of your data, the rights you have over it and how to exercise them.

Who is responsible for processing my data? Which services are concerned?

ROUVENAT is responsible for processing your data (RCS Créteil 901 001 651) Head office: 416 rue St Honoré 75008 Paris

The present policy of protection of personal data applies to www.rouvenat.com as well as its possible declinations, on various supports.

What data do you collect about me? By what means?

You provide us with certain personal information about yourself:

Through our website

- Through our online forms as well as when you register for some of our services (in particular when you subscribe to one of our newsletters or participate in one of our contests), information about you may be requested provided that it is necessary, appropriate, proportionate and legitimate in view of the purpose. You will be systematically informed of this objective, of the way we will use your information, of the obligatory or optional character of our request and of the possible consequences of a lack of answer.

Through social networks

- It is possible to register for some of our services through social networks. When you do so, you will be notified of any information about you that may be shared with us. You retain the freedom to edit and limit the information you wish to share with us when you register for any of our services via your social network account.

- Once you have registered and by going to the privacy settings of your social network, you can always go back to your initial choice in order to limit or remove the sharing of your personal information.

We automatically collect certain data when you interact with our services

- Data collected without the use of cookies or other similar technologies (browser and device used, redirection URL to one of our services, non-nominal computer traces called "log files", IP address).

- Data from the use of cookies and other similar technologies that may in some cases be associated with personal information you provide when you register for one of our services (see the"cookies" section for more information).

For what reasons do you process my data? On what basis? For how long?

Processing on the legal basis of your consent

Use of cookies and other similar technologies

(13 months maximum)

- To carry out audience measurements, to offer you services and advertisements adapted to your centers of interest and to offer you sharing buttons and content feedback on social networks (see the " cookies" section for more information).

Our commercial prospecting

(3 years maximum from the date of collection or your last contact)

- To send you by direct communication (email) messages promoting our products / services and those of our partners. In no case your personal data will be transferred to these partners.

Commercial prospecting of our partners

(3 years maximum from the date of collection or your last contact)

- So that our partners can send you messages by direct communication (email) promoting their products or services. The personal data you provide in this context will be transferred to these partners, solely for the purposes mentioned above. The identity of these partners will appear systematically in the form of collection of your personal information, you keep at any time the control of the transfer of your data.

Processing on the legal basis of our legitimate interest

Statistical analysis

(For the duration of the retention of your personal information)

- To make our services more attractive to you and to all our users. To do this, we produce global and aggregated audience statistics from the personal information provided when you register for one of our services and from information collected during your use of our services. We do not evaluate, predict or draw any conclusions about any individual, including their interests.

Other processing carried out on the basis of our legitimate interest

(For the strict duration necessary for the purpose pursued / 3 years to manage the exercise of your right of opposition / 1 year to manage the exercise of your right of access and rectification)

- To prevent and fight against fraud, to carry out optional satisfaction surveys, to allow you to contact us and answer your requests, to manage the exercise of your right to oppose receiving advertising.

Processing on the legal basis of the contract

Participation in a contest

(For the time necessary to validate, record, process your entry and manage the awarding of prizes)

Supply of products and services

(Your personal information will be kept for the duration of the commercial relationship and for a period of 3 years after its end for commercial prospecting purposes).

Some data is essential to provide you with the service you have subscribed to and/or the product you have purchased on our site. Failure to fill in the required fields may impact our ability to offer you the products and services concerned. We use this data to process and follow up on your order (including managing any contact you have with us regarding your order).

As a result, we may share some of your data with our subcontractors or service providers in order to process your orders. Our subcontractors and service providers are required to respect the confidentiality and security of the data that may be communicated to them and to use it only in the context of the execution of their subcontracting or service provision mission.

Please note that payment information is not collected by us but directly by the payment service providers. Our payment service provider, Stripe, collects and processes your bank details for the strict purposes of payment. This provider is PCI-DSS certified. This standard is an international security standard whose objectives are to ensure the confidentiality and integrity of cardholder data, and thus to secure the protection of card and transaction data.

Do you need to transfer data about me? For which reasons?

Within the framework of our activities, we have recourse to the services provided by several specialized companies, subcontractors or co-processors of the processing of your data (mailing services, push notifications, customer relationship management, access and customer identity management, audience analysis, payment), the list of which can be communicated to the persons concerned on request to serviceclient@rouvenat.com

In this context, we contractually ensure the compliance of the use of your personal information and the security standards used by these companies. If they use servers outside the European Union, we have entered into specific contracts with them and standard contractual clauses established by the European Commission to govern and secure the transfer of your data to these service providers.

We will never transfer your personal information to commercial or advertising entities without your prior consent.

What security measures are in place to protect my data?

We implement all technical and organizational measures to ensure the security of the processing of your personal information and its confidentiality.

In this respect, we take all the necessary precautions, with regard to the nature of your data and the risks presented by the processing, in order to preserve the security of your data and, in particular, to prevent them from being distorted, damaged or accessed by unauthorized third parties (physical protection of the premises, authentication procedures with personal and secure access via confidential identifiers and passwords, logging of connections, encryption or pseudonymization of certain data, etc.).

 

Can I get more information? Can I get help?

You have the right to file a complaint with the Commission Nationale Informatique et Libertés under the conditions indicated on its website: https://www.cnil.fr/fr/agir

COOKIES

What are cookies?

The term "cookies" is to be understood in the broadest sense and covers various technologies for collecting information relating to your navigation and your interactions on our services, subject to the choices you have expressed. We use these technologies for various purposes, in particular to facilitate your navigation, to measure the audience, to offer you content and advertisements that may interest you and to offer you sharing buttons and content feedback on social networks.

These cookies may be used by us or by our partners, third party companies, to identify your interests and to personalize the advertising offer that is sent to you on our site or outside our sites.

What are my choices regarding cookies?

On your websites

We offer you the possibility to change your cookie settings directly on our services.

You always have the possibility to set the cookies on your different browsers as explained below: https://www.cnil.fr/fr/cookies-les-outils-pour-les- master

Similarly, you retain the ability to refuse targeted advertising cookies from our partners by visiting the following interprofessional platforms: http://www.networkadvertising.org/choices/

http://www.youronlinechoices.com/fr/controler-ses-cookies/

Essential cookies

These cookies allow us to monitor the performance of our services and detect navigation or security problems in order to minimize inconvenience to our users. They are also used to provide you with a service you have expressly requested, such as setting your privacy preferences. These cookies do not contain and are not associated with any personally identifiable information.

 

Analytical cookies

These cookies allow us to produce aggregated and anonymous statistics relating to the frequentation of our services (e.g.: number of visits, pages consulted, time spent on the service, region of connection, type of device used...). These cookies make it possible to improve the performance, the functionalities and the services which are proposed to you. These data do not contain and are not associated with any personal information.

 

Personalization cookies

These cookies allow us to track and monitor your exposure to and interaction with the content or advertisements on our services. They help us to identify what information might be of most interest to you in order to provide you with a tailored and personalized editorial experience based on your interests, particularly in the context of the newsletters we send you.

 

This data may be associated with information that you provided when you registered for one of our services in order to personalize your content, services and newsletters.

 

Targeted advertising cookies

Cookies used by us and by our subcontractors

Similar to personalization cookies, these cookies allow us to track and monitor your exposure to and interaction with content or advertisements on our services. They help us identify what information might be of most interest to you so that we can provide you with an advertising experience that is tailored and personalized to your interests.

This data may be associated with information that you provided when you registered for one of our services in order to personalize your ads and prospecting messages.

 

Cookies used by our partners

These cookies are placed on our services by our partners and may be used by these companies to show you advertisements tailored to your interests on our services but also on other services on which they place cookies. Some of our partners may combine the data collected through the cookies they operate on our services with other information you have provided to them or that they have collected from your use of their own services.

These cookies are also used to limit the number of times you see an ad and to measure the effectiveness of advertising campaigns. You will find a list of our partners who place cookies on our services and links to their privacy policies in Appendix 1 of our Privacy Policy.

 

Social network cookies

These cookies may be placed on our services by social networks because of the integration of their applications with our services. These features allow for the sharing of content by our users, such as the Facebook "Share" or "Like" buttons, or the "Twitter" buttons, etc. The social network providing one of these applications is likely to identify you thanks to its buttons and its own cookies, even if you did not use them when consulting our services.

Cookies used by third parties in the context of advertising resulting from programmatic purchases

The list of our partners depositing cookies on our services referred to in Appendix 1 is not an exhaustive list because it does not include certain cookies deposited by third parties in the context of advertising resulting from programmatic purchases (real time bidding or "RTB"). Indeed, the identification of the deposit of cookies in this context can technically only be noted after the deposit and only during the life of the programmatic campaign.

EXERCISE MY RIGHTS

What are my rights with regard to my data?

With regard to commercial prospecting, you have the right to withdraw your consent at any time or to oppose the processing of your data for this purpose, without having to justify any legitimate reason.

In general, you have the right to access, rectify, oppose on legitimate grounds, delete and port your data. You also have the right to limit the processing of your data.

Finally, you have the right to set up instructions on what to do with your personal data after your death.

How do I exercise my rights to my data?

I do not want to receive any more prospecting messages:

For commercial prospecting by email

At the bottom of each advertising email sent, we make a mention summarizing your rights and the possibility of unsubscribing through a link made available to you.

I want to exercise my other rights on my data:

The exercise of your other rights on your data requires the presentation of an identification document by sending an e-mail. Without such identification, we cannot disclose, modify or delete your personal information for your protection.

You can exercise your rights by email, specifying the right you wish to exercise in the subject of your email: serviceclient@rouvenat.com. An answer will be sent to you within 1 month following the reception of your request.

COOKIES USED BY OUR PARTNERS