Privacy policy

Update date: 26.06.2023

Committed to building a lasting relationship with you based on trust and respect for your rights and freedoms, we are committed to protecting your personal data.

The purpose of this Privacy Policy is to inform you about the practices ofwho acts as data controller (hereinafter the "Data Controller ") for all the personal data processing operations mentioned below.


1. Definitions

Order(s): refers to the subscription to one or more Product(s) or Service(s) made on the Site by the User.

Comment(s ): refers to opinions, testimonials or comments left by Users about free content published on the Site.

Personal Data: refers to Users' personal data as defined by the RGPD.

Product(s): refers to all or part of the products offered by the Site and accessible exclusively to Users.

RGPD: refers to the Regulation on the protection of individuals with regard to the processing of personal data and on the free movement of such data.

Service(s): refers to all or part of the services offered by the Site and accessible exclusively to Users.

Website: website

User(s): refers to any person of full legal age, as well as any minor over the age of 16, subject to the prior consent of the person(s) having parental authority over them, using the Site and its Services.


2. Personal data collected

The Data Controller collects your Personal Data directly from you. These are :

  • declarative data: when you communicate your Personal Data to him during your exchanges, in order to allow the contractualization of any Order or for any spontaneous request of your share;
  • data generated by your activity: automatically collected as part of your browsing and use of the Site.

2.1 Declarative personal data

You may transmit Personal Data to the Data Controller, among other things, when you place an Order, send a message via the contact form or leave a Comment on the Site.

2.2 Personal Data generated by the User's activity

When you use the Site, some of your Personal Data may be collected automatically, such as your computer's IP address or information about your computer and your connection method.

Among the technologies used to collect this information, the Site Manager uses cookies, in accordance with the Cookies Policy.


3. Legal basis and purposes of the processing of your Personal Data

The Data Controller implements various processing operations based on the following legal grounds: your consent, the performance of its contractual obligations, the performance of its legal and regulatory obligations and its legitimate interests.

The purposes associated with each legal basis are listed below:

Based on your consent :

  • newsletter subscription management ;
  • management of requests for information and contact from the persons concerned, in particular replies to messages via the contact form;
  • managing your participation in our competitions;
  • manage your petition signatures ;
  • posting comments online ;
  • collecting testimonials.

Based on the performance of your contract:

  • management of the contractual relationship, in particular the management and routing of Orders, management of communications and follow-up of customer exchanges, management of the personal space,
  • managing relations with suppliers, authors and service providers; and
  • manage your premium subscriptions ;
  • managing your payments.

Based on compliance with legal and regulatory obligations:

  • management of requests to exercise rights ;
  • managing dealings with supervisory authorities, judicial authorities or any other competent authority; and
  • accounting management.

Based on the legitimate interests of the Data Controller :

  • pre-litigation and litigation management;
  • information relating to significant changes to the Site or the information contained therein and in particular the evolution of the Site;
  • incident management and quality monitoring ;
  • Site traffic analysis;
  • target management for promotional mailings;
  • storing your bank details to facilitate future purchases (only for subscriptions and club offers);
  • to improve the performance of the Site and the services offered by the Data Controller;
  • the management of commercial prospecting operations for goods and services similar to those to which you have subscribed;
  • managing the routing of print campaigns for commercial prospecting; and
  • standardization of postal addresses.


4. Recipients of the User's Personal Data

The Data Controller is particularly concerned with respecting the confidentiality of your Personal Data and only communicates your Personal Data to recipients who are authorized and determined to meet the aforementioned purposes, and who are themselves subject to a strict obligation of confidentiality.

Thus, the recipients of your Personal Data are, as the case may be, the following:

  • the authorized internal departments of the Data Controller, in particular the marketing, logistics, IT and administrative departments;
  • service providers and subcontractors of the Data Controller (technical, marketing or payment service providers on behalf of the Data Controller, site hosting, administrative service providers, service providers authorized to manage customer service), subject to the same confidentiality obligation; and/or
  • compliance auditors.

Some information may be shared with certain service providers for targeting and segmentation purposes, but this is done on a pseudonymized basis, so that these partners are unable to identify the persons concerned.

In addition, some of your Personal Data may be transmitted to third parties, provided that you have given your express consent.


5. Shelf life

Your Personal Data will not be kept longer than is strictly necessary for the purposes set out above, in accordance with applicable data protection regulations. Personal Data is permanently deleted at the end of the retention periods.


6. Security of your Personal Data

The Data Controller attaches particular importance to the security of your Personal Data.

Appropriate technical and organizational measures are implemented to ensure that data is processed in such a way as to guarantee its protection against accidental loss, destruction or damage that could undermine its confidentiality or integrity.

7.Transfers of your Personal Data‍

Your Personal Data is hosted in the USA (see location of host).

It is possible that Personal Data may be transferred to other countries (such as European countries), when shared with potential partners and/or subcontractors.

The Data Controller wishes to inform you that the USA is a country recognized by the European Commission as offering an adequate level of protection for Personal Data.

Other data transfers are governed by a cross-border flow agreement drawn up in accordance with the standard contractual clauses issued by the European Commission and currently in force.

8.Cookies and other tracers‍

Among the technologies used to collect your information, the Data Controller makes particular use of cookies, in accordance with the Cookies Policy.

9.Your rights regarding your Personal Data
‍
In accordance with national and European legal and regulatory provisions, you have a right of access to your Personal Data, as well as a right to rectification and erasure of your Personal Data where it is inaccurate, incomplete or obsolete, or where collection, use, disclosure or storage is prohibited (unless necessary for the performance of the Data Controller's contractual and legal obligations or for the defense of its rights).

You also have the right to obtain the restriction of the processing of your Personal Data when its accuracy is contested, when the processing is unlawful, when the Personal Data is no longer necessary for the processing or when you have objected to the processing.

You have a right to the portability of your Personal Data and the right to define directives relating to the fate of your data post-mortem.

You have the right to object to your Personal Data being processed, at any time, for reasons relating to your particular situation, when the processing is based on the legitimate interests of the Data Controller.

In the event of exercising such a right of objection, the Data Controller will ensure that your Personal Data is no longer processed in the context of the processing concerned, unless it demonstrates that it has compelling legitimate grounds for maintaining such processing. These grounds must outweigh your interests and your rights and freedoms, or the processing must be justified for the establishment, exercise or defense of legal claims.

You also have the right to object to canvassing, in particular commercial canvassing, including profiling for this purpose.

When the processing of your Personal Data is based on your consent, you may withdraw it at any time, but this withdrawal does not render the processing carried out up to the moment of withdrawal unlawful.

You also have the right to lodge a complaint with a supervisory authority.

You can exercise your rights by contacting the Data Protection Officer by e-mail or via the contact form on the DOC website.

Any request relating to the exercise of one of these rights must be accompanied by proof of the applicant's identity by any means. In the event of any doubt as to the identity of the requesting party, additional information may be requested, up to and including the provision of proof of identity.

10.Updatingthe Privacy Policy‍


The Data Controller may be required to modify the Privacy Policy in particular according to the legal and regulatory context and the doctrine on the subject. All data subjects are advised to consult this page regularly for any changes or updates to this Privacy Policy.

11. Contact‍

If you have any questions about this Privacy Policy or any requests relating to Personal Data, you can contact the Data Controller by sending a message via the contact form on the DOC website.

You can also contact the Data Protection Officer.






‍

‍