General conditions

1. Who is the manager and how can you contact them?

1.1 Responsible

The processing of personal data within the meaning of the General Data Protection Regulation (GDPR)

DATAKEEN SAS

Head office:

176 Avenue Charle-de-Gaules

92522 Neuilly-sur-Seine CEDEX

France Email: contact@datakeen.co

Telephone: +33 1 76 43 12 96

1.2 Data Protection Officer

Mr Gaël Bonnardot

Email: privacy@datakeen.co

2. What is it about?

This data protection declaration meets the legal requirements for the transparency of the processing of personal data. It is all information that concerns an identified or identifiable natural person. For example, your name, age, address, telephone number, telephone number, date of birth, date of birth, email address, IP address, or your user behavior when visiting a website. Information that cannot (or only with a disproportionate effort) be linked to you personally, for example through anonymization, is not personal data. The processing of personal data (e.g. collection, consultation, use, storage or transmission) always requires a legal basis and a defined purpose.

Personal data that has been saved is deleted as soon as the purpose of their processing is fulfilled and there is no reason to keep them for further processing. During the processing processes, we inform you of the concrete deadlines for saving data or the criteria for saving data. Regardless of this fact, we save your personal data on a case-by-case basis to assert, exercise or defend our rights and in the event of safeguard obligations.

3. Who has access to my data?

We communicate your personal data that we process on our website to third parties only if this process is necessary for the intended purposes and, on a case-by-case basis, is based on legal grounds (e.g. consent or protection of legitimate interests). In addition, we transmit personal data to third parties on a case-by-case basis in order to assert, exercise or defend our rights. Potential recipients may be e.g. judicial authorities, lawyers, auditors, courts, etc.

Insofar as we use, for the operation of our website, service providers who process personal data according to art. 28 of the RGPD in the context of the performance of a service, these may be the recipients of your personal data. For more detailed information on the use of subcontractors and internet services, please consult the overview of the various processing steps.

4. Do you use cookies?

Cookies are small text files that we send to the browser on your terminal device as part of the visit to our Internet pages and which are saved there. Optionally to the use of cookies, information can be saved in the local storage of your browser. Some functions of our web pages cannot be active without the use of cookies or local memory (technically necessary cookies). On the other hand, other cookies allow us to carry out various analyses, so that we are able to recognize the browser you use when you visit our website again and therefore send us various information (cookies that are not necessary). Thanks to cookies, among other things, we can design our website in a way that is more user-friendly for you and more effective by better understanding how you use our website and by noting your preferred settings (e.g. country and language). Insofar as third parties process information via cookies, they collect this information directly through your browser. Cookies do not damage your terminal. They can't run any programs and they don't contain viruses.

We inform you about the respective services for which we use cookies in the processing stages.

5. What are my rights?

Taking into account the legal provisions of the General Data Protection Regulation (GDPR), you as a data subject have the following rights:

Information according to art. 15 of the GDPR on the personal data stored in the form of useful information on the details of the processing as well as a copy of your data; Rectification according to art. 16 of the GDPR of incorrect or incomplete data stored by us; Erasure according to art. 17 of the GDPR of the data stored by us; Erasure according to art. 17 of the GDPR of the data saved by us insofar as the processing is not necessary to exercise the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest or to promote, exercise or defend your rights; Limitation of processing according to art. 18 of the GDPR, insofar as the accuracy of the data is contested, the processing is unlawful, we no longer need the data and you refuse their deletion because you need it to assert, exercise or defend your rights or because you have filed an appeal against their processing according to art. 21 of the GDPR. Data portability according to art. 20 of the GDPR insofar as you have provided us with personal data within the framework of consent according to art. 6 paragraph 1 letter a of the GDPR or on the basis of a contract according to art. 1 letter b of the GDPR and we have processed them by an automated process. You obtain your data in a structured, usual and machine-readable format or we transmit the data directly to another person responsible, if technically possible. Objection to the processing of your personal data in accordance with Article 21 of the GDPR, insofar as this refers to Article 6 (1) letter e, f of the GDPR and there are reasons that arise from a particular situation or the appeal is directed against direct mail. The right to a remedy does not exist if essential, compelling and legitimate reasons are proven or if the processing is carried out to assert, exercise or defend legal claims. Insofar as a right to appeal does not exist for certain processing procedures, this is notified. Withdrawal of your given consent in accordance with art. 7 paragraph 3 of the GDPR with effect for the future. Complaint under art. 77 of the GDPR to a supervisory authority if you are of the opinion that the processing of your personal data does not comply with the GDPR. In general, you can contact the supervisory authority at your usual place of residence, workplace or our company headquarters.

6. How is my data processed?

In the following paragraphs, we inform you about the various processing processes, the volume and purpose of data processing, the legal basis, the obligation to provide your data and their respective storage periods. There is no automated decision on a case-by-case basis, including profiling.

6.1 Provision of the website

6.1.1 Treatment type and volume

When you access and use our website, we collect personal data that your browser automatically sends to our server. The following information is stored temporarily in a log file:

IP address of the requesting computer Date and time of access Name and URL of the file accessed Name and URL of the file accessed website from which the access was made (referrer-URL) Browser used and, if necessary, the operating system of your computer as well as the name of your access provider We do not host our website ourselves, but we do use a service provider who processes the data indicated above on our behalf according to art. 28 of the GDPR.

6.1.2 Purpose and legal basis

The processing is carried out to maintain our main legitimate interest in displaying our website and to guarantee security and stability on the basis of art. 6 para. lit. F of the RGPD. Data entry and storage in log files is absolutely necessary for the functioning of our website. A right to appeal against processing does not exist due to exceptions according to art. 21 paragraph 1 of the GDPR. Insofar as the storage of the log file is required by law, the processing takes place on the basis of art. 6 para. 1 letter c of the GDPR. There is no legal or contractual obligation to provide data, however access to our website is technically impossible without it.

6.1.3 Backup time

The data indicated above is saved for the duration of the display of the website and for a maximum of 7 days for technical reasons.

6.2 Contact form

6.2.1 Treatment type and volume

On our website we suggest that you contact us through a contact form made available to you. The information that is requested in the mandatory fields is necessary in order to be able to process your request. In addition, you may voluntarily provide additional information that you think is necessary to process the contact request.

Your use of the contact form does not involve the transmission of your personal data to third parties.

6.2.2 Purpose and legal basis

The processing of your data provided in the contact form is done for the purposes of communication and processing your request with reference to your consent in accordance with art. 6 paragraph 1 letter a of the RGPD. Insofar as your request concerns our contractual relationships, the processing is carried out in order to fulfill the conditions of the contract on the basis of art. 6 paragraph 1 letter b of the GDPR. There is no legal or contractual obligation to provide your data, however the processing of your request is impossible without obtaining the information in the mandatory fields of the form.

If you do not want to make this data available to us, please contact us by other means.

6.2.3 Backup time

If you use the contact form with reference to your consent, we save the data we have collected for each request for a period of three years, starting from the execution of your request and until your consent is withdrawn.

6.3 Data relating to the applicant

6.3.1 Type and volume of treatment

On our website, we suggest that you submit a request to us using a form provided for this purpose. The information collected via the mandatory fields is necessary to process the request. In addition, you can voluntarily provide additional information that you consider necessary to process the contact.

Your request will be examined by a subcontractor appointed by us in accordance with article 28 of the ODASG.

6.3.2 Purpose and legal basis

The processing of your data based on the use of the application form is carried out in order to process your request and to decide on the establishment of an employment relationship. No legal or contractual obligation to share your data exists. However, the processing of your request will not be possible without providing the information in the mandatory fields. If you do not wish to provide this data, please use other means to send us your application.

6.3.3 Backup time

We keep the data collected for the duration of the application procedure and, in case of non-employment, for a period of six months from the date of rejection. In case of employment, your data will be collected for a period of three years after the end of the job occupation.

6.4 Newsletter

6.4.1 Treatment type and volume

Insofar as you register on our website to receive our newsletters, we collect your email address [as well as your name...] and save this information at the same time as the registration date and your IP address. You will then receive an email by which you must confirm your subscription to the newsletter (double-opt-in). If you do not confirm the registration within 48 hours, it is automatically cancelled and your data is not processed to send the newsletter.

To send the newsletter, we use a service from SendGrid Inc., which processes your personal data on our behalf according to art. 28 of the GDPR. Your data is not communicated to third parties.

6.4.2 Backup time

After registering for the newsletter, we save your data for a maximum of 48 hours until you confirm it. After your confirmation has been finalized, we save your data until your consent is revoked (unsubscribing from the newsletter) as well as for technical reasons for a maximum of 7 additional days.

6.5 Google My Business Reviews and Pages Data

6.5.1 Treatment type and volume

On our Datakeen Client Reviews application, we allow the user to benefit from suggested responses to reviews posted on their Google My Business establishments.

6.5.2 Purpose and legal basis

The processing of your data based on the connection to Google My Business is carried out in order to provide access to the Datakeen service for suggested responses to reviews in order to provide the best possible response. There is no legal or contractual obligation to share your data. The processing of reviews will not be possible without connecting to your Google My Business account through the OAuth portal.

6.5.3 Backup time

We keep the data collected for the duration of your use of the Datakeen Client Reviews application. If you stop using the application, your Google My Business data is deleted.

‍