DATA PROTECTION POLICY

Scope of application

These guidelines apply in conjunction with the framework contracts and the cookie policy.
They apply to the use of our website https://www.issartel.com and the services negotiated when signing a contract.
This policy also covers contact via email by customers or users.
We apply a strict policy to ensure the protection of your data, for example:

We do not sell your data to third parties.
We make sure that your data is always safe.

This document covers the various contacts made through social media by customers or
prospects of MINERVA ISSARTEL. The data collected is based on a legal basis provided for by the GDPR, in other words:

Your consent to the processing of your data.
The processing of your data is necessary for the execution of the contract(s) with
MINERVA ISSARTEL.
On the basis of a legal obligation or a legitimate interest of the company MINERVA ISSARTEL (in particular for risk management purposes or to improve our products and services).

Transmitted data

We collect your data when you browse the website or when you sign a contract.
We also collect your data when you communicate with us, for example by email or phone. In this case, we will keep a copy of the exchange. We may retain your data when you interact with us on social media.
We process the following categories of data:

Identification data:
- Natural person: surname, first name, postal address, email address, phone
  number.
- Legal entity: identification data (company name, address, Siren number, legal
  representative)
Data when using our website
Business and tax data.

We are required to collect the above data to comply with our legal obligations and to enable the conclusion of the contract(s).
We also collect your contact details when an email is sent to us.
We also collect your data when you visit our website.

The following data is collected:

Technical connection information, in particular your IP address, browser type and
version, time zone, installed plug-ins, the type of terminal you use to connect, your
operating system and cookie data
Information about your visits: how many times and when you visit, the pages visited or the type of action you perform, your connection times, searches performed, your
response time, the links you clicked on and the documents you download.

Use of collected data

We only process your data for specific, explicit and legitimate purposes. These purposes are as follows:

For the purpose of providing our service or performing the contract(s)
To process your complaints, in accordance with our procedure.

We also collect and process data for other purposes:

To comply with legal and regulatory obligations
To improve your browsing experience on our website

Recipients of the data collected

The data collected is intended for us and, where strictly necessary, for our subcontractors and partners involved in the provision of our services.
Recipients of the data collected are categorised as follows:

Web hosting providers
Banking and financial services providers and payment solutions
Collaboration and productivity tool
Auditors, lawyers, external legal advisors, accountants
Supervisory authorities, regulators and public authorities

Your data may also be communicated to the competent authorities, at their request, in the context of legal proceedings, requests for information from the authorities or simply to comply with legal obligations.
Cookies and Internet tags
You can view our cookie policy here.
Security of storage and transmission to third parties Storage of data
The data we collect is stored on the servers of our service provider OVH SAS which
guarantees a high level of security. These servers are located in the European Union, in
France.
Transmission to third parties
For the purposes of the service, we may transfer some of your personal data to our
subcontractors, some of whom/which are located outside the European Union or the
European Economic Area.
In this case, we ensure that they are located in a country considered adequate by the
European Union in terms of data protection or we ask them to contractually commit to
implementing equivalent measures to protect your data.
Duration of data retention MINERVA ISSARTEL only keeps the data for the time needed for said processing and in compliance with the applicable regulations. It should be noted that this data is only kept for the duration of the processing, without prejudice to the statute of limitations (which can run for up to 20 years according to Article 2232 of the Civil Code) or the retention requirements.

This period is also increased by 10 years after the end of the accounting year for data
relating to the accounts.

Rights of persons concerned
You have rights in the context of the processing of your personal data. MINERVA ISSARTEL pays particular attention to this point, so that it processes your data as transparently and fairly as possible, taking into account the particular circumstances and context.

How to exercise your rights

Requests to exercise the rights set out below may be emailed to Jérôme THOUEZ
(rsi@issartel.com) or posted to him at ROCHE-LA-MOLIERE (42230), 12 Boulevard
Sagnat. Proof of identity must be attached to your request.

Diversity of rights

Right to enquire

By virtue of the right of enquiry, you can ask whether your personal data is being processed, but also for information on the purpose of any processing, and for information on any transfers of such data.
You may also request the disclosure of this data, as well as any information about its source.
This information may not, however, infringe copyright or intellectual property rights.
A copy may be issued to you, but this may be subject to payment of a sum not exceeding the cost of the reproduction.

Right of access

Under your right of access, you can ask whether or not your data is being processed. If so, you can request a copy of your data and information, namely:

The purposes of the processing
The categories of personal data concerned
The recipients or categories of recipients, if any, and the international
organisations to which the data has been or will be disclosed, in particular if it is
located in third countries
The retention period, or at least, if not determinable, the criteria used to determine
it
The existence of your right to rectification, erasure, restrict processing or object
The existence of your right to lodge a complaint with a supervisory authority
Information on the source of the personal data if not collected directly
The existence of automated decision-making, including profiling (if applicable,
relevant information on the underlying logic and possible consequences of such
processing).

Right to rectification

If your personal data is out of date, incorrect or incomplete, this right allows you to request that it be corrected or completed.

Right to erasure

In certain cases, provided for by the legislation and regulations in force, you can ask
MINERVA ISSARTEL to erase your personal data.
MINERVA ISSARTEL stresses that this right is not a general right. Indeed, the legislation and regulations provide for limitations to this right.

Right to restrict processing

You have the right to request, in the cases provided for by the law and regulations, a
restriction on the processing of your personal data.

Right to portability

You may request that your personal data be transferred to another controller. However, this is not a general right, as it is limited by law and regulation.
It is first of all limited with regard to the processing operations concerned, but also with
regard to the data concerned. Some data is not portable.

Right to object

You have the right to object, which means that you can object at any time, for reasons
relating to your particular situation, to the processing of your personal data. However, this right is limited to processing based on the legitimate interests pursued by MINERVA
ISSARTEL.
If you exercise this right, MINERVA ISSARTEL will ensure that it no longer processes your data, unless it can demonstrate the existence of legitimate and compelling reasons to continue processing. These reasons must be over and above your interests and your rights and freedoms.
If the processing is necessary for the establishment, exercise or defence of legal claims, the right to object does not apply.
You may object to personalised solicitation.

Right to withdraw consent

Some processing may be based on your consent. Naturally, you can withdraw this consent at any time. From then on, without questioning the previous data, MINERVA ISSARTEL will stop processing your data.

Right to define post-mortem instructions

You can establish specific instructions regarding the retention, erasure and communication of your data after your death.
These instructions will only concern the processing carried out by MINERVA ISSARTEL and will be limited to this area.
Once a person has been named by decree, you can also establish general instructions.

Right of appeal

You have the right to lodge an appeal with France's National Commission on Informatics and Liberty (CNIL) on French territory, without prejudice to any other administrative or judicial appeals.