Data protection policy

1. Introduction

Within the framework of its activity, PARIS SOCIETY CONSULTING collects and processes personal data relating to visitors to the website https://consulting.paris-society.com.

The main objective of this document is to gather in a concise, transparent, understandable and easily accessible format information concerning the data processing implemented to allow you to understand the conditions under which your data is processed.

2. Fair and transparent collection of your data

In the interest of fairness and transparency towards its visitors, PARIS SOCIETY CONSULTING takes care to inform the persons concerned of each processing operation that it implements by means of information notices.

This data is collected fairly. No collection is made without the knowledge of the persons and without their being informed.

3. Legitimate and proportionate use of your data

When PARIS SOCIETY CONSULTING processes data, it does so for specific purposes: each data processing carried out pursues a legitimate, determined and explicit purpose.

For each of the processes implemented, it undertakes to collect and use only data that is adequate, relevant and limited to what is necessary for the purposes for which it is processed.

PARIS SOCIETY CONSULTING ensures that the data is, if necessary, updated and implements procedures to allow the deletion or correction of inaccurate data.

4. The personal data we process

Within the framework of the processing of personal data, the purposes of which are presented below, PARIS SOCIETY CONSULTING collects and processes the following categories of data

5. Legal basis and purposes of our data processing

The data processing implemented by PARIS SOCIETY CONSULTING pursues the purposes identified below and is founded on the following legal bases:

6. The recipients of your data

The following are recipients of your data, each for what concerns them

• the subcontractors of PARIS SOCIETY CONSULTING,
• Suppliers and providers of the website,
• Google,
• Axeptio,
• The management of Paris Society Consulting,
• the information systems department,
• other entities of the Paris Society group, where applicable.

We make sure that only authorized persons have access to this data.

7. Transfers of your data

1. Within the framework of the use of Google services for audience measurement and authentication (Google connect), data (click here for more information) is transferred outside the European Union to the United States, a country that does not provide an equivalent level of data protection to that applied at the European level.

2. The European Commission's standard contractual clauses have been signed to govern this transfer of data and additional safeguards have been taken to ensure that the data is transferred with a level of protection equivalent to that practiced in Europe.

8. The periods for which we keep your data

PARIS SOCIETY CONSULTING ensures that data is only kept in a form that allows the identification of the persons concerned for as long as is necessary for the purposes for which they are processed.

The retention periods we apply to your personal data are proportionate to the purposes for which they were collected.

Specifically, we organize our data retention policy as follows:

9. Security of personal data

PARIS SOCIETY CONSULTING has put in place technical and organizational measures adapted to the degree of sensitivity of the personal data, in order to ensure the integrity and confidentiality of the data and to protect them against any malicious intrusion, loss, alteration or disclosure to unauthorized third parties.

Nevertheless, the security and confidentiality of personal data depend on the good practices of each person, so the person concerned is invited to remain vigilant on the issue.

10. Subcontracting

When PARIS SOCIETY CONSULTING uses a service provider, it only communicates personal data to them after having obtained a commitment and guarantees from the latter on their ability to meet these security and confidentiality requirements.

We enter into contracts with our subcontractors in compliance with our legal and regulatory obligations, which precisely define the terms and conditions of the processing of personal data by the latter.

11. Cookies

Cookies are subject to a Cookies policy. Please click here to access the cookie policy.

12. The rights you are entitled to

PARIS SOCIETY CONSULTING is particularly concerned with the respect of the rights granted to you in the context of the data processing that it implements, in order to guarantee fair and transparent processing in view of the particular circumstances and context in which your personal data are processed.

12.1 Your right of access

As such, you have the confirmation that your personal data is or is not processed and when it is, you have the right to request a copy of your data and information about :

- the purposes of the processing ;

- the categories of personal data concerned;

- the recipients or categories of recipients and, if applicable, if such communications are to be made, the international organizations to which the personal data have been or will be communicated, in particular those recipients who are established in third countries;

- where possible, the period of time for which the personal data will be retained or, where this is not possible, the criteria used to determine this period;

- the existence of the right to ask the data controller for the rectification or erasure of your personal data, the right to request a limitation of the processing of your personal data, the right to object to such processing;

- the right to lodge a complaint with a supervisory authority;

- information about the source of the data when not collected directly from the data subjects;

- the existence of automated decision-making, including profiling, and in the latter case, relevant information about the underlying logic and the significance and intended consequences of such processing for data subjects.

12.2 Your right to rectify your data

You can ask us to rectify or complete your personal data if it is inaccurate, incomplete, ambiguous or out of date.

12.3 Your right to erasure of your data

You can ask us to delete your personal data in the cases provided for by the legislation and regulations.

Please note that the right to the deletion of data is not a general right and can only be exercised if one of the reasons provided for in the applicable regulations is present.

12.4 Your right to limit data processing

You may request the restriction of the processing of your personal data in the cases provided for by the laws and regulations.

12.5 Your right to object to data processing

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data, the legal basis of which is the legitimate interest pursued by the controller (see article above on the legal basis of processing).

If you exercise such a right to object, we will ensure that we no longer process your personal data in connection with the processing concerned unless we can demonstrate compelling legitimate grounds for continuing such processing. These grounds will have to outweigh your interests and rights and freedoms, or the processing will be justified for the establishment, exercise or defence of legal claims. You have the right to object to personalized solicitation.

12.6 Your right to portability of your data

You have the right to the portability of your personal data. We draw your attention to the fact that this is not a general right. Indeed, not all data from all treatments are portable and this right only concerns automated treatments to the exclusion of manual or paper treatments.

This right is limited to processing operations whose legal basis is your consent or the execution of pre-contractual measures or a contract.

This right does not include derived or inferred data, which are personal data created by PARIS SOCIETY CONSULTING.

12.7 Your right to withdraw your consent

Where the data processing operations we carry out are based on your consent, you may withdraw it at any time. We will then stop processing your personal data without affecting the previous operations to which you have consented.

12.8 Your right to appeal

You have the right to lodge a complaint with the Cnil (3 place de Fontenoy 75007 Paris) on French territory, without prejudice to any other administrative or legal recourse.

12.9 Your Right to Set Post-Mortem Instructions

You have the possibility of defining particular directives relating to the conservation, the erasure and the communication of your personal data after your death according to the methods defined below. These specific directives will only concern the processing carried out by us and will be limited to this perimeter.

You will also have the right, when that person has been designated by the Executive Branch, to issue general directives for the same purpose.

12.10 How to exercise your rights

All the rights listed above can be exercised at the following e-mail address donnees.privees@paris-society.com or by mail to PARIS SOCIETY CONSULTING 38 avenue des Champs Elysées 75008 PARIS, by proving your identity by any means.

13. Amendment of this document

We invite you to consult this policy regularly on our website. It may be updated from time to time.

Updated on 28/02/2023.