Confidentiality policy
Preamble
The “MISTER PREZ” Site www.mprez.fr (hereinafter referred to as” The Site ”) is operated by MPREZ, a simplified joint stock company with a share capital of 3,000€, whose head office is located 32 bd de Strasbourg - CS30108, 75468 Paris cedex 10, and registered with the Paris Trade and Companies Register under number 823 433 321.
Access to the Site requires the collection and processing of Users' personal data. It was therefore necessary to establish a personal data protection policy in order to comply with the recommendations for use in terms of the processing of personal data as established by applicable law and regulations.
The Data Protection Policy of the Owner and MISTER PREZ has been established in accordance with the recommendations of the National Commission for Informatics and Freedoms (known as “” CNIL ”). Its purpose is to inform Users of the Site of how their personal data is processed and of the commitments and measures we have taken to ensure that the personal data of Users of the Site are respected.
It was established in accordance with the provisions of:
- The Information Technology and Freedom Act of 6 January 1978;
- The European Personal Data Regulation (known as “G.P.D.”) of May 23, 2018;
- The law transposing the European Regulation on the Protection of Personal Data (R.G.P.D.) of June 20, 2018.
The version currently published on the Site is the current version of this policy. MISTER PREZ reserves the right to modify it at any time in order to comply with the legal obligations in force. Any changes made to the Privacy Policy will be communicated to Users in order to obtain their consent to the new policy.
By browsing our Site, the User acknowledges having read, understood and accepted this data protection policy. Any questions regarding this policy may be directed to the following address: antoine.blanc@mprez.fr.
Article 1 — Definitions
1.1 Technical terms relating to the protection of personal data
On our Site, the terms below have the meaning ascribed to them within the meaning of the R.G.P.D. (art. 4):
- Consent: “of the data subject, any free, specific, specific, informed and unequivocal expression of will by which the data subject accepts, by a statement or by a clear positive act, that personal data concerning him or her be processed”;
- Responsible for the treatment: “the natural or legal person, public authority, service or other body which, alone or jointly with others, determines the purposes and means of the processing; where the purposes and means of such processing are determined by Union law or the law of a Member State, the data controller may be appointed or the specific criteria applicable to his appointment may be provided for by Union law or by the law of a Member State,”;
- Subcontractor: “the natural or legal person, public authority, service or other body that processes personal data on behalf of the data controller”;
- Treatment: “any operation or set of operations carried out or not carried out using automated processes and applied to data or sets of personal data, such as collection, recording, organization, structuring, preservation, adaptation or modification, extraction, consultation, modification, extraction, consultation, use, use, use, communication by transmission, dissemination or any other form of provision, approximation or interconnection, limitation, deletion or destruction”;
- Personal data breach: “a security breach resulting, in an accidental or unlawful manner, in the destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored, or otherwise processed.”
1.2 Other terms used herein
- “Site”: refers to the website www.mprez.fr and operated by the Company and made available to Users;
- “Policy”: refers to this Personal Data Protection Policy;
- “User”: refers to any visitor to the Site, using the Site and its functionalities and having access to its content.
Article 2 — What is personal data?
Personal data (“Personal Data”) refers to any information that can directly or indirectly identify a natural person (name, first name, email, telephone number, postal address, etc.).
As such, the GDPR defines personal data as: “any information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”); is deemed to be an “identifiable natural person” a natural person who can be identified, directly or indirectly, in particular by reference to an identifier, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more elements specific to his identity. physical, physiological, genetic, psychological, economic, cultural or social;”.
Article 3 — Data of minors
In accordance with the provisions of article 8 of European Regulation 2016/679 and the Data Protection Act, only minors aged 15 or over can consent to the processing of their personal data.
Any use of the Site by a minor who has not obtained the agreement of his guardian or legal representative cannot engage the responsibility of MISTER PREZ.
Article 4 — The collection of personal data
We are collecting your consent.
While browsing the Site and to be able to use its functionalities, the User must, on several occasions, provide some of his personal data (for the purposes indicated in article 5).
By providing their data, the User therefore consents to the collection and processing of the personal data provided by MISTER PREZ for the exclusive purposes as detailed in article 5 of the Policy. This consent, as well as other reasons, serve as the legal basis for the processing of the data collected.
MISTER PREZ collects and processes the data strictly necessary for the purposes for which they are processed. We undertake to our Users not to process data for purposes other than those mentioned below. If we should offer a new service on the Site, or any other feature of the Site, requiring the collection and processing of data, we undertake to collect the consent of the Users again before offering the new service in question.
Whenever the Site processes personal data, MISTER PREZ takes all reasonable measures to ensure the accuracy and relevance of the personal data in relation to the purposes for which they are processed.
Article 5 — Purpose of the treatments
We collect user data only for the following processing purposes:
5.1 Contact MISTER PREZ
On our site, a contact form as well as a contact email is available to contact MISTER PREZ. We collect the following data: name, first name, email.
Les user data And the communication data are processed for the purposes of:
(1) Process the contact request;
(2) Contact the User.
The legal basis is User Consent.
5.2 Sending a newsletter
Customers of MISTER PREZ agree, by subscribing to the services of MISTER PREZ, to receive the newsletter of the Site and the activities of MISTER PREZ. Any other user can receive the Newsletter by registering on the Site and by ticking the box provided for this purpose. We collect the following data: name, first name, company, email.
Les user data And the communication data are processed for the purposes of:
(1) Validate the subscription to the Newsletter;
(2) Send the Newsletter.
The legal basis is the User's Consent and the Execution of a Contract for Customers.
Users can unsubscribe from the Newsletter at any time by sending a request to MISTER PREZ's DPO or by using the unsubscribe link in the emails received.
5.3 Open Access Content
On the Site, users can have access to free access content. To do so, they must register by email to receive this content.
We collect the following data: name, first name, email. (1) Validate the subscription to the Newsletter;
Les user data And the communication data are processed for the purposes of:
(1) Validate the registration for access to open access content;
(2) Send content to the User
The legal basis is User Consent.
Users can unsubscribe from this access to free content at any time by sending a request to MISTER PREZ's DPO or by using the unsubscribe link in the emails received.
5.4 Chatbot
A Chatbot is available on the site to provide help and assistance to the User. We collect the following data: name, first name and login details.
Les user data And the login data are processed for the purposes of:
(1) Receive the request via the Chatbot
(2) Process and respond to requests via the Chatbot
The legal basis is User Consent.
5.5 Navigation data
Connection data and navigation information are used for statistical studies and user experience studies only.
The legal basis is as follows: The processing is necessary for the purposes of the legitimate interests pursued by MISTER PREZ, in particular to offer Users a smooth and improved browsing experience.
Connection data and navigation information are also used to prevent and fight against computer fraud.
The legal basis is the response to a legal obligation.
Article 6 — Data retention period
We do not exceed the legal data retention periods and User data is kept only for the time necessary to process the purposes for which they were collected.
The storage periods are as follows:
- User data and communication data: they are deleted or anonymized 3 years after the last contact from the User, unless the User has in the meantime formulated a request to exercise the rights that led to the deletion of his data;
- Customer data: they are deleted or anonymized 5 years after the end of the commercial relationship, unless MISTER PREZ is required to keep this data to meet legal or regulatory obligations;
- Login data: they are kept for a maximum period of 13 months (except for the exceptions indicated in article 13).
In establishing our data processing policy, we established a reference grid for the duration of data retention, developed thanks to the recommendations of the CNIL. In addition, MISTER PREZ may keep certain personal data in order to fulfill its legal or regulatory obligations, to allow the exercise of users' rights, or for statistical purposes. At the end of the retention period of personal data, they will be deleted or anonymized.
Article 7 — Access to data
The data collected via the Site is intended exclusively for the following recipients.
7.1 Hosting of the Site
The Site is hosted by OVH, 2 rue Kellermann, 59100 Roubaix.
The host has access to the data within the limits of its respective responsibilities, for the hosting of the Site. It has limited access to Users' data, in the context of the performance of these services and has a contractual obligation to use them in accordance with the provisions of the applicable regulations on the protection of personal data.
For more information, see the Privacy Policy of OVH.
7.2 Third-party providers
The Site and MISTER PREZ rely on certain third-party services to provide certain functionalities. The latter have limited access to Users' data, in the context of the performance of these services and have a contractual obligation to use them in accordance with the provisions of the applicable regulations on the protection of personal data.
7.3 Within MISTER PREZ
Within MISTER PREZ, the following teams have access to User data under limited conditions in accordance with their respective responsibilities:
- Development and Marketing Department. The data is used only for the development and maintenance of the Site and for sending the newsletter.
- After-sales service. The data is used to respond to contact requests made via the Site.
Data may also be transmitted by the Owner to third parties and competent authorities to meet legal, judicial, fiscal or regulatory obligations. The Owner guarantees Users that no transfer of personal data will be made to an unauthorized third party, without the prior, voluntary, informed, express and written consent of the User.
The Owner is prohibited from processing, hosting or transferring the Information collected on its users to a country located outside the European Union or recognized as “” not adequate ” by the European Commission without first informing the owner of the data and without obtaining his agreement.
Data may also be transmitted by MISTER PREZ to third parties and competent authorities to meet legal, judicial, fiscal or regulatory obligations. MISTER PREZ guarantees Users that no transfer of personal data will be made to an unauthorized third party, without the prior, voluntary, informed, express and written consent of the User.
Article 8 — Data protection
MISTER PREZ has taken all useful and necessary precautions, in view of the state of the art in this field, to protect your information in a secure environment in order to avoid any destruction, loss, alteration, alteration, distribution or unauthorized access. No matter how hard you try, no method of transmission over the Internet and no method of electronic storage is completely secure. As a result, we cannot guarantee absolute security. If we become aware of a security breach, we will notify affected users so they can take appropriate action. Our incident notification procedures take into account our legal obligations, whether at the national or European level.
In the event that the integrity and confidentiality of your data are compromised, the data controller undertakes to respect the procedures put in place under the Data Protection Act of January 6, 1978 and the European Data Protection Regulation (“RGPD”).
MISTER PREZ does not sell or outsource User data.
Article 9 — Rights of individuals
With regard to the legal provisions of the Data Protection Act of January 6, 1978 and the European Data Protection Regulation (“R.G.P.D”), Users of the Site have the following rights:
9.1 Right of access, rectification and right to erasure
The User may review, update, modify or request the deletion of data concerning him, by sending an email to the person responsible for processing personal data, specifying the subject of his request and using the contact email address: antoine.blanc@mprez.fr.
9.2 Right to data portability
The User has the right to request the portability of his personal data, held by the Site or by MISTER Prez, to any third party, by making a request for the portability of his personal data to the data controller, by sending an email to the address provided above.
9.3 Right to limitation and opposition to data processing
The User has the right to request the limitation or to oppose the processing of his data by MISTER PREZ without the latter being able to refuse, unless he can demonstrate the existence of legitimate and compelling reasons, which may prevail over the interests and rights and freedoms of the user, which may prevail over the interests and rights and freedoms of the user.
The User must make a request to limit the processing of their personal data to the data controller, by sending an email to the address provided above.
9.4 Right not to be the subject of a decision based exclusively on an automated process
In accordance with the provisions of Regulation 2016/679, the User has the right not to be the subject of a decision based exclusively on an automated process if the decision produces legal effects concerning him, or significantly affects him in a similar way.
9.5 Right to determine the fate of data after death
The User is reminded that he can organize what should be the fate of his data collected and processed if he dies, in accordance with law No. 2016-1321 of October 7, 2016.
Article 10 - Exercise of Rights
To exercise any of your rights, all you need to do is:
- To write a letter to MISTER PREZ, at the address of his head office;
- Or write an email to the following address: antoine.blanc@mprez.fr.
By indicating your name, first name, address and attaching a proof of identity.
Requests will be processed within one month, unless there is an urgent reason advanced and justified by MISTER PREZ justifying an extension of the deadline.
If MISTER PREZ does not satisfy the User's request, the User is entitled to refer the matter to the CNIL (Commission Nationale de l'Informatique et des Libertés, https://www.cnil.fr) in order to enforce his rights.
Article 11 — Cookie Policy
11.1 What is a Cookie?
The User is informed that a cookie is a small file placed on the terminal of any user (computer, tablet, or mobile device), by our Site, during its consultation. It does not contain any personal information, but makes it possible to make the link between the User's device and their preferences for use and experience on our Site (e.g. location, language, font size).
11.2 User Consent
For the use of files” cookies ” involving the saving and analysis of personal data, the User's consent is always requested. This consent is valid for a period of thirteen (13) months, with some exceptions (see table Art.13), at the end of which a new authorization will be requested from the User.
Article 12 — Use of Cookies
In accordance with the decision of the CNIL No. 2013-378 of December 5, 2013, MISTER PREZ informs Users of the Site that cookies record certain information that is stored in the memory of their hard drive. This information is used to generate audience statistics for the Site and to offer services based on the information they have already selected during their previous visits.
An alert message, in the form of a banner, asks each User visiting the Site, in advance, if they wish to accept cookies. To guarantee the free, informed and unequivocal consent of the User visiting the Site, the banner will not disappear until he has continued browsing and configured his choices.
Without the prior consent of the User, the deposit and reading of cookies will not be carried out:
- If anyone who visits the Site does not continue browsing: a simple absence of action cannot in fact be assimilated to a demonstration of will;
- Or if she clicks on the link in the banner allowing her to configure cookies and, if necessary, refuses the deposit of cookies.
We use and collect cookies for the purposes of:
- To process statistics and information on traffic on our Site and to optimize it as best as possible;
- To offer our users a smooth browsing experience by adapting the presentation of our Site to the display preferences of the user's terminal;
- To memorize information provided on the Site by the User.
Article 13 — List of Cookies on the Site
The list of cookies on the Site is as follows:
Article 14 — Opposition and configuration
All Users may oppose the registration of” cookies ” by configuring their navigation software in the following way (s):
- Open a private browsing window;
- Configuring cookies via the Widget” Cookies” available on the home page of our Site;
- Configuring the mobile device so that a message appears asking you to accept, personalize, or refuse cookies;
- Or any other means available to the user.
At any time, the user can make the choice to express and modify his wishes in terms of cookies. MISTER PREZ declines all responsibility for the consequences related to the operation of the Site and the services that may be offered resulting from:
- The refusal of cookies by the user;
- And/or the impossibility for the Site to save or consult the cookies necessary for their functioning due to the choice of the user.
Article 15 — Modification of the privacy policy
MISTER PREZ reserves the right to change this Policy at any time. If a change is made to this Policy, the new version will be published immediately on the Site. If the User does not agree with the terms of the new wording of the policy, he has the option of no longer using the Services of the Site and of no longer browsing the latter.
Article 16 - Acceptance by the User of the privacy policy
By browsing the Site, the User certifies that he has read and understood this privacy policy and accepts its conditions, in particular with regard to the collection and processing of his personal data, as well as the use of “cookie” files.