As part of its activity and for the purposes of providing the Services, the Nataïs company collects and processes the personal data of its users (hereinafter the “Users”). This confidentiality policy, set up by the company Nataïs, is intended to provide Users with synthetic and comprehensive information on the processing of personal data carried out by the company Nataïs. We attach particular importance to respecting the privacy of Users and the confidentiality of their personal data, and thus undertakes to process data in compliance with applicable laws and regulations, and in particular Law n ° 78-17 of January 6, 1978 relating to data processing, files and freedoms (hereinafter the “Data Protection Act”), and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 relating to the protection of natural persons with regard to the processing of personal data and the free movement of such data (hereinafter the “GDPR”).
DEFINITIONS
Personal data:
any information relating to an identified or identifiable natural person, that is to say who can be identified, directly or indirectly, by reference to an identification number or to an or several elements of its own.
Processing of personal data:
processing of personal data constitutes any operation or set of operations relating to such data, whatever the process used, and in particular the collection, recording, organization, preservation, adaptation or modification, extraction, consultation, use, communication by transmission, distribution or any other form of provision, reconciliation or interconnection, as well as blocking, erasure or destruction.
Data Controller - DPO
The person responsible for processing the personal data referred to herein is the company TIRIA, SARL with a capital of 6,000 euros, registered with the RCS of AUCH under number 505 235 192 and whose head office is located at 36 av Charles de Gaulle 32600 L'Isle Jourdain TIRIA has appointed a Data Protection Officer who can be contacted at the following address: contact@tiria.fr.
Data collected
The Nataïs company collects Users' data in order to provide them with the services for which they have subscribed to the platform. The mandatory or optional nature of the data entered (in order to be able to finalize the User's registration and provide the services of the Nataïs company) is indicated during collection by an asterisk. In addition, certain data is collected automatically as a result of the actions of the User on the site.
The www.yum-kah.eu site only stores connection information (login and password).
Purpose
The personal data collected by the company Nataïs on the occasion of the provision of services are necessary for the execution of the contracts concluded with the User, or to allow the company Nataïs to pursue its legitimate interests while respecting the rights of the User. Certain data may also be processed on the basis of the collection of the User's consent. The purposes for which we process the data are as follows:
- the commercial and accounting management of the contract;
- management of activation and marketing animation;
- detection of malicious behavior (fraud, phishing, spam, etc.);
- improving the path for users of the site;
- more generally any purpose referred to in Article 2 of Deliberation No. 2012-209 of June 21, 2012 creating a simplified standard concerning the automated processing of personal data relating to the management of users and prospects.
Data recipients
The personal data collected is intended for the sales department of the company Nataïs. They can be sent to subsidiaries of the Nataïs company, or to subcontracting companies to which the Nataïs company can call on in the context of the performance of its services. In this context, personal data may be transferred to a country that is or is not a member of the European Union. The Nataïs company implements guarantees ensuring the protection and security of this data, in accordance with the regulations. The Nataïs company does not transfer or rent personal data to third parties for marketing purposes, without the express consent of the Users of the Nataïs company. Apart from these assumptions, the disclosure of personal data to third parties can only take place in the following cases:
- with their authorization;
- at the request of the legally competent authorities, upon judicial requisition, or in the context of a legal dispute.
DATA RECIPIENTS
Data retention period
To meet its legal obligations or in order to have the necessary elements to assert its rights, the company Nataïs may archive the data under the conditions provided for by the regulations. Thus, the personal data collected by the company Nataïs relating to the identity and contact details of its Users are archived for a maximum period of two years after the termination of the contractual relationship for the Client Users, or from their collection by the data controller or the last contact from the prospective User for data relating to the latter. The termination of contractual relations is understood as the express termination of the contract by the User or the non-use of the services of the company Nataïs for a period of five years.
- with their authorization;
- at the request of the legally competent authorities, upon judicial requisition, or in the context of a legal dispute.
User rights
In accordance with the regulations, the User has the rights to access and rectify data of a nature concerning him, which allows him to rectify, complete, update or erase data which is inaccurate, incomplete, ambiguous, out of date. or whose collection, use, disclosure or retention is prohibited. The User also has the rights to request the limitation of processing, and to oppose, for legitimate reasons, the processing of his personal data. The User can also communicate instructions on the fate of his personal data in the event of death. When applicable, the User may request the portability of his data, or, when the processing is legally based on consent, withdraw his consent at any time. The User can exercise his rights by sending an email to Célia EHMANN mail: c.ehmann@popcorn.fr. The User can also modify the data concerning him at any time by contacting the customer relations department at the Celia EHMANN mail address: c.ehmann@popcorn.fr.
The User can unsubscribe from the Nataïs company newsletter or marketing emails by following the unsubscribe links in each of these emails. The User may, in the event of a dispute, file a complaint with the CNIL, the contact details of which can be found at the internet address http://www.cnil.fr. The User will be able to access detailed information on the use of his personal data, in particular concerning the purposes of the processing, the legal bases allowing tiria.fr to process the data, their retention periods, their recipients and, where applicable, transfers of these to a country that is not a member of the European Union as well as the guarantees implemented. To do this, the User can send his request by email to Célia EHMANN mail: c.ehmann@popcorn.fr.
Security
The Nataïs company has taken all necessary precautions to preserve the security of personal data and, in particular, to prevent them from being distorted or damaged or that unauthorized third parties have access to them. These measures include the following:
- Multi-level firewall,
- Well-known anti-virus and detection of intrusion attempts,
- Encrypted data transmission using SSL / https / VPN technology,
- Data centers exam and PCI DSS certified
In addition, access to processing by the services of the Nataïs company requires authentication of the persons accessing the data, by means of an individual access code and password, sufficiently robust and regularly renewed. Data passing through unsecured communication channels is subject to technical measures aimed at making this data incomprehensible to any unauthorized person. Any question about the security of the Nataïs website can be addressed to Célia EHMANN mail: c.ehmann@popcorn.fr.
Modification of the Privacy Policy
The Nataïs company reserves the right to change this Privacy Policy in order to comply with changes in the laws and regulations in force. Any changes made will be notified via our website or by email, as far as possible, at least thirty days before their entry into force.
Contact
Any question concerning the Nataïs Company's Privacy Policy can be sent by email to Célia EHMANN mail: c.ehmann@popcorn.fr or by mail to:
NATAIS - Privacy policy - IS manager
Domaine de Villeneuve. 32130 Bézéril. France
