Privacy Policy

1. Who are we?

1.1 DATA CONTROLLER

The following information is provided to you so that you can learn about the personal data protection commitments of Fasterize, which acts as data controller for the personal data processing mentioned in this document.

1.2 OUR DATA PROTECTION OFFICER

Fasterize has appointed a personal data protection officer whose contact details are as follows: dpo@fasterize.com.

2. The personal data we process

As part of the processing of personal data, Fasterize collects and processes in particular the following categories of data:

• your identification data: your title, your first and last names.
• your contact details: your postal address, your landline and mobile telephone number, your email address
• Certain marketing information (e.g. your registration date, date of your last visit, your request history, your browsing history).

We may collect personal data including:

• via our website;
• through orders placed;
• via social media and brand communication channels (e.g. Facebook, Twitter);
• or when you give them to us voluntarily.

3. The purposes and legal bases of our data processing

3.1 THE PURPOSES OF OUR PROCESSING

The processing that we implement is done to ensure the following purposes:

• the management and monitoring of requests for information made by Internet users and the responses to be provided;
• reporting of site access;
• managing our customer base through our CRM;
• measuring quality, satisfaction and attendance;
• subscription to the newsletter and prospecting, particularly commercial.

3.2 THE LEGAL BASIS FOR OUR PROCESSING

We only carry out data processing if at least one of the following conditions is met:

• your consent to the processing operations has been collected;
• the existence of our legitimate interest, or that of a third party, which justifies our carrying out the processing of personal data concerned;
• the performance of a contract between us and you requires us to process the personal data concerned;
• we are bound by legal and regulatory obligations which require the implementation of the processing of personal data concerned.

4. The recipients of your data

The personal data that we collect, as well as those that are collected subsequently, are intended for us in our capacity as data controller, as well as for our partners, subject to having obtained your consent.

We ensure that only authorized persons can have access to this data. Our service providers may be recipients of this data to carry out the services we entrust to them. Some personal data may be sent to third parties or legally authorized authorities in order to meet our legal, regulatory or conventional obligations.

They may be communicated to these entities for the purposes referred to herein. These operations are carried out on the basis of instruments that comply with the applicable regulations and are capable of ensuring the protection and respect of your rights.

5. The periods for which we keep your data

The retention periods that we apply to your personal data are proportionate to the purposes for which they were collected. Consequently, we organize our data retention policy for the strict duration necessary for the processing, in accordance with our retention period policy.

6. Your rights

6.1 YOUR RIGHT TO INFORMATION

You acknowledge that this policy informs you of the purposes, legal framework, interests, recipients or categories of recipients with whom your personal data is shared.

In addition to this information and with the aim of ensuring fair and transparent processing of your data, you declare that you have received additional information concerning:

• the duration of retention of your personal data;
• the existence of the rights which are recognized for your benefit and the terms of their exercise.

If we decide to process data for purposes other than those indicated, all information relating to these new purposes will be communicated to you.

6.2 YOUR RIGHT OF ACCESS AND RECTIFICATION OF YOUR DATA

You have the right to access and rectify your personal data.

In this respect, you have confirmation that your personal data is or is not processed and when it is, and have access to your data as well as to information concerning:

• the purposes of the processing;
• the categories of personal data concerned;
• the recipients or categories of recipients;
• where possible, the envisaged period for which the personal data will be retained or, where this is not possible, the criteria used to determine that period;
• the existence of the right to request from the controller the rectification or erasure of your personal data, the right to request a limitation of the processing of your personal data, a right to the portability of your data, the right to object to this processing;
• the right to lodge a complaint with a supervisory authority;
• information relating to the source of the data when it is not collected directly from the persons concerned;
• the existence of automated decision-making, including profiling, and in the latter case, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for data subjects.

You can ask us to rectify or complete your personal data if it is inaccurate, incomplete, ambiguous or out of date.

6.3 YOUR RIGHT TO ERASURE OF YOUR DATA

You can ask us to erase your personal data where one of the following grounds applies:

• the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
• you withdraw the consent previously given;
• you object to the processing of your personal data where there is no legal ground for such processing;
• the processing of personal data does not comply with the provisions of applicable legislation and regulations;
• your personal data has been collected in connection with the provision of information society services to children under the age of 16.

However, the exercise of this right will not be possible when the retention of your personal data is necessary with regard to legislation or regulations and in particular for example for the establishment, exercise or defense of legal rights.

6.4 YOUR RIGHT TO LIMITATION OF DATA PROCESSING

You may request the limitation of the processing of your personal data in the cases provided for by legislation and regulations.

6.5 YOUR RIGHT TO OBJECT TO DATA PROCESSING

You have the right to object to the processing of personal data concerning you where the processing is based on the legitimate interest of the controller.

6.6 YOUR RIGHT TO DATA PORTABILITY

Since May 25, 2018, you will have the right to the portability of your personal data.

The data on which this right can be exercised are:

• only your personal data, which excludes anonymized personal data or data that does not concern you;
• the declarative personal data as well as the personal operational data mentioned above;
• personal data which do not infringe the rights and freedoms of third parties such as those protected by trade secrets.

This right is limited to processing based on consent or a contract and to personal data that you have personally generated.

This right does not include derived data or inferred data, which is personal data created by Fasterize.

6.7 YOUR RIGHT TO WITHDRAW YOUR CONSENT

When the data processing we implement is based on your consent, you can withdraw it at any time. We then stop processing your personal data without the previous operations for which you had consented being called into question.

6.8 YOUR RIGHT TO BRING A REMEDY

You have the right to lodge a complaint with the CNIL on French territory, without prejudice to any other administrative or legal recourse.

6.9 YOUR RIGHT TO SET POST-MORTEM DIRECTIVES

You have the option of defining guidelines relating to the retention, deletion and communication of your personal data after your death with a trusted third party, certified and responsible for ensuring that the wishes of the deceased are respected in accordance with the requirements of the applicable legal framework.

6.10 HOW TO EXERCISE YOUR RIGHTS

All rights listed above may be exercised at the following email address dpo@fasterize.com.

However, with regard to the exercise of the right to information, we may not be obliged to act on it if:

• you already have this information;
• the recording or communication of your personal data is expressly provided for by law;
• the communication of information proves impossible;
• the communication of information would require disproportionate efforts.

7. Security

The security of personal data is important to Fasterize.

In accordance with legal obligations, Fasterize stores this information under reinforced security conditions and for limited periods of time proportional to the purposes for which you communicated it to us.

Fasterize follows generally accepted standards to protect the personal information submitted to it, both during transmission and once Fasterize receives the information.

8. Update of this privacy policy

This policy may be modified or amended at any time by Fasterize. You are invited to consult it regularly. Last modification: 2018/20/09.