Privacy and security are of the utmost importance to Signitic. Therefore, we strive to ensure that our technical and organizational measures in place respect your data protection rights.
For greater simplicity, we have grouped all security-related responses into our Data Processing Agreement (DPA).
Preamble
As part of its activity and for the purposes of providing the Services, Signitic is required to collect and process the personal data of its users (hereinafter the “Users”).
This privacy policy, set up by Signitic, is intended to provide Users with summary and global information on the processing of personal data operated by Signitic.
Signitic attaches particular importance to respecting the privacy of Users and the confidentiality of their personal data, and is thus committed to processing data in compliance with applicable laws and regulations, and in particular Law No. 78-17 of January 6, 1978 relating to information technology, files and freedoms (hereinafter the “Data Protection Act”), and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 relating to the protection of natural persons with regard to the processing of personal data personal and to the free movement of this data (hereinafter the “RGPD”).
Definitions
Personal data: personal data is any information relating to an identified or identifiable natural person, i.e. who can be identified, directly or indirectly, by reference to an identification number or to one or more elements specific to that person.
Processing of personal data: any operation or set of operations relating to such data, regardless of the process used, and in particular the collection, recording, organization, storage, adaptation or modification, extraction, consultation or modification, extraction, consultation, use, use, use, communication by transmission, distribution or any other form of provision, reconciliation or interconnection, as well as locking, deleting or destroying, deleting or destroying personal data is any operation or set of operations involving such data, regardless of the process used..
Cookie: a cookie is information placed on the hard drive of an Internet user by the server of the site he is visiting. It contains several data: the name of the server that deposited it, an identifier in the form of a unique number, possibly an expiration date. This information is sometimes stored on the computer in a simple text file that is accessed by a server to read and save information.
Data collected
Signitic collects Users' data in order to provide them with the services for which they have subscribed to the platform.
The mandatory or optional nature of the data entered (in order to be able to finalize the User's registration and provide the User with Signitic services) is indicated during collection by an asterisk.
In addition, some data is collected automatically as a result of the User's actions on the site (see the paragraph relating to cookies).
Purposes
The personal data collected by Signitic during the provision of services is necessary for the execution of contracts concluded with the User, or to allow Signitic to pursue its legitimate interests in accordance with the User's rights. Some data may also be processed based on the collection of the User's consent.
The purposes for which Signitic processes data are as follows:
- commercial and accounting management of the contract;
- the management of marketing activation and animation;
- the detection of malicious behavior (fraud, phishing, spam, etc.);
- improving the user experience of the site;
- more generally, any purpose referred to in article 2 of Deliberation No. 2012-209 of 21 June 2012 creating a simplified standard concerning the automated processing of personal data relating to the management of users and prospects.
Data recipients
The personal data collected is intended for Significtic's sales and accounting departments. They may be transmitted to Significtic subsidiaries, or to subcontractors that Signitic may use in order to perform its services.
In this context, personal data may be transferred to a country that is a member or not of the European Union. Signitic puts in place guarantees ensuring the protection and security of this data, in compliance with regulations.
Signitic does not transfer or rent personal data to third parties for marketing purposes without the express consent of Signitic Users.
Apart from these hypotheses, the disclosure of personal data to third parties may only occur in the following cases:
- with their authorization;
- at the request of the legally competent authorities, upon judicial requisition, or in the context of a judicial dispute.
Data retention period
To meet its legal obligations or in order to have the necessary elements to assert its rights, Signitic may archive the data under the conditions provided for by the regulations.
Thus, the personal data collected by Signitic relating to the identity and contact details of its Users are archived for a maximum period of two years after the cessation of contractual relationships for Customer Users, or from the date of their collection by the Data Controller or from the last contact from the prospective User for data relating to them.
The termination of contractual relationships is understood as the express termination of the contract by the User or the non-use of Signitic's services for a period of five years.
User Rights
In accordance with the regulations, the User has the rights to access and rectify data concerning him, which allow him to rectify, complete, update or delete data that is inaccurate, incomplete, equivocal, outdated or whose collection, use, communication or storage is prohibited.
The User also has the right to request the limitation of processing, and to oppose the processing of his personal data for legitimate reasons. The User may also provide instructions on the fate of his personal data in the event of death.
Where applicable, the User may request the portability of their data, or, when the legal basis for the processing is consent, withdraw their consent at any time.
The User can unsubscribe from the Signitic newsletter or marketing emails by following the unsubscribe links in each of these emails.
In the event of a dispute, the User may file a complaint with the CNIL, whose contact details appear at the internet address https://www.cnil.fr.
The User will be able to access detailed information on the use of their personal data, in particular concerning the purposes of the treatments, the legal bases allowing Signitic to process the data, their retention periods, their recipients and, where applicable, the transfers of such data to a country not a member of the European Union as well as the guarantees implemented.
Cookies
For more information on how Signitic handles cookies, please visit our cookie policy page.
security
Signitic has taken all necessary precautions to maintain the security of personal data and, in particular, to prevent it from being distorted or damaged or from being accessed by unauthorized third parties.
These measures include the following:
- Anti-virus of proven reputation and detection of intrusion attempts,
- Encrypted data transmission using SSL/Https technology
In addition, access to treatments through the services of Signitic recipients requires the authentication of persons accessing the data, using an access code, an individual password and dual-level authentication.
Data transmitted over insecure communication channels are subject to technical measures aimed at making this data incomprehensible to any unauthorized person.
Modification of the Privacy Policy
Signitic reserves the right to change this Privacy Policy in order to comply with changes in applicable laws and regulations.
Changes made will be notified via our website or by email, as far as possible, at least thirty days before they come into force.
