Concerned about respecting the privacy of Internet users, the SOFIOUEST Company, (hereinafter "the Company" or "we"), undertakes that the collection and processing of personal information will be carried out in accordance with EU Regulation No. 2016/679 of the European Parliament and of the Council of April 27, 2016 on the Protection of Individuals with regard to the processing of personal data and on the free movement of such data hereinafter "RGPD" and with all the provisions of the French regulations applicable in this matter.
- DATA CONTROLLER
SOFIOUEST, whose registered office is located at 38 Rue du Pré Botté 35000 Rennes, registered in the RENNES Trade and Companies Register under number 549 200 509, which operates the following website (hereinafter referred to as "the Site"): https://sofiouest.com/
- DATA COLLECTION
Your personal data is collected and processed on the following legal bases:
- in the performance of a contract ;
- for legitimate interests;
- on the basis of your consent via personal data collection forms and checkboxes;
- to ensure compliance with our legal and regulatory obligations.
Data concerning you
Generally speaking, your data is collected directly from you in the course of :
- your browsing on the Site ;
- your event registration ;
- your inquiry via the contact form.
We collect and process the following personal data:
- identification data (e.g. surname, first name, e-mail address, telephone number, shareholder number, company name, photo, comment field);
- connection data (e.g. IP address).
Cookies or similar technologies (hereinafter "cookies") may be installed and/or read in your browser when you visit the Site. Click here to find out more
If your personal data is collected by means of a form, you will be informed of the compulsory nature of the information by an asterisk (*) next to the fields concerned. The absence of an asterisk means that the information requested is not mandatory.
Only personal data that is strictly necessary for the purposes described below, and in particular for the creation and management of the private area, event registration, and to produce statistics on Site traffic, is collected.
- PROCESSING PURPOSES
We use the data referred to in the previous article for the following main purposes:
| To respond to your request for products or services | Legal basis for processing |
| □ Access our services | Performance of your contract with us |
| □ Take into account your settings preferences on our Site | Our legitimate interest |
| □ Develop audience statistics for our editorial content | Our legitimate interest |
| □ Manage your subscriptions to our newsletters and/or communications | Your consent, the performance of your contract with us or our legitimate interests |
| □ Taking into account and managing your participation in our events | Fulfillment of your contract with us or your consent or our legitimate interest |
| □ Ensure customer relations: provision of a customer service department accessible by post, telephone, contact form or e-mail for any questions or complaints. | Fulfillment of your contract with us or your consent or our legitimate interest |
| □ Update your information in a dedicated database, bring your address up to postal standards | Our legitimate interest |
| □ To send you information about changes or developments in our services | Our legitimate interest |
| □ To ensure the constant improvement of our products and services, in particular by using advanced analysis technologies for your data. | Our legitimate interest |
| □ Carry out studies and statistics on our existing products and services or as part of the development of new services. | Our legitimate interest |
| □ Comply with applicable legislation | Our legal obligations |
| □ Take into account your acceptance of our general conditions and/or contracts | Our legal obligations |
| □ Manage the exercise of your personal data rights | Our legal obligations |
| To carry out marketing and sales prospecting operations relating to our publications, products and services | Legal basis for processing |
| □ Send you information about our events | Your consent or our legitimate interest |
| □ Carry out customer loyalty and commercial prospecting actions in order to contact you to propose our offers via various means of communication (email, telephone, mail). | Our legitimate interest |
- DATA RETENTION PERIOD
Your personal data is kept for a period that complies with legal provisions or is proportionate to the purposes for which it was collected. However, your personal data may be kept for a longer period if we are required to do so by law or regulation.
- Prospect data
| Data categories | Goals | Shelf life |
| All data | Create and manage a prospect file | 5 years from data collection or last contact(1) with the prospect |
- Active participation data
| Data categories | Goals | Shelf life |
| All data | Manage shareholdings, mandates and company data, meet legal and statutory obligations, communicate on board meetings and other events | For the duration of the contractual relationship |
- Data relating to a divested investment
| Data categories | Goals | Shelf life |
| Directors' data | Manage shareholdings, mandates and company data, meet legal and statutory obligations, communicate on board meetings and other events | 2 years from director's departure or sale |
| Shareholder data | Manage shareholdings, mandates and company data, meet legal and statutory obligations, communicate on board meetings and other events | 1 year from shareholder departure or sale |
| Executive data | Manage shareholdings, mandates and company data, meet legal and statutory obligations, communicate on board meetings and other events | 5 years from the end of the company's life |
| Identification and contact data for newsletter subscribers | Sending information on the evolution of our services | 13 months after unsubscription or last contact(1) from inactive customer |
- Event participant data
| Data categories | Goals | Shelf life |
| Data collected when registering for an event | Send information about the event and/or future events | 5 years after deregistration or last contact (1) with the participant |
| Economic or financial data | Payment | Immediate deletion after payment |
- Data relating to the exercise of your rights
| Data categories | Goals | Shelf life |
| Data processed for a request to exercise a right (excluding proof of identity) | Response to the data subject's request for rights | 6 years from request to exercise a right |
| Proof of identity provided for a request to exercise a right | Check the applicant's identity | We do not keep your personal information beyond the time it takes to process your request. |
- Information about our cookies
| Data categories | Goals | Shelf life |
| Data related to your browsing on our online services | Service operation and optimization. Audience measurement and web analysis Interactive content offered by third parties | 25 months |
| Retention of consent expressed on our sites and applications | Obtaining consent | 6 months for acceptance, 2 months for refusal |
- RECIPIENTS OF YOUR PERSONAL DATA
Your personal data will be communicated to the following persons:
5.1 Internal to the Company
Your data is communicated to employees of the Company's internal departments.
In accordance with regulations, access to your data is based on individual, limited and supervised access authorizations.
5.2 To our subcontractors
They provide services on our behalf, in particular:
- management of telephone calls, postal mail and digital communications (emails, SMS, notifications);
- Personalization of Site content and newsletters;
- maintenance operations and technical developments;
- the supply of analytical solutions or audience measurement statistics;
- customer relationship management.
5.3 To our business partners
They take into account your settings preferences on our site.
- TRANSFER OF DATA OUTSIDE THE EUROPEAN UNION
We store your personal data within the European Union. However, if we were to transfer your data to subcontractors or business partners outside the European Union, we would ensure that the processing is governed in particular by the European Commission's standard contractual clauses, which guarantee an adequate level of protection for the privacy and fundamental rights of individuals.
- YOUR RIGHTS
In accordance with the aforementioned legal and regulatory provisions, you have :
- a right of access to your data;
- a right of rectification ;
- a right to erasure;
- a right to limit the processing of your data
- a right to portability of your data to a certain extent, i.e. the right to receive the personal data you have provided us with in a structured, commonly used format and the right to transmit this data to another data controller;
- the right to object to the processing of your personal data;
- a right to object to your data being used for prospecting purposes, in particular for commercial purposes (see 9.);
- a right to object to marketing profiling, which means that you will continue to receive commercial solicitations but they will be less relevant and will no longer be targeted according to your centers of interest;
- the right to define general and/or specific directives concerning the fate of your personal data and the manner in which you wish your rights to be exercised after your death. In this respect, in the event of your death which is brought to our attention, your data will be deleted, unless it is required to be kept for a specific period of time for reasons relating to our legal and regulatory obligations and/or statutory limitation periods, and after having been communicated to a third party designated by you.
You can exercise your rights by contacting the Data Protection Officer :
- by sending a letter to the following postal address:
Personal Data Protection Officer
SIPA Ouest-France
ZI Rennes Sud-Est - 10 rue du Breil - 35051 Rennes cedex 9
- by sending an e-mail to the following address: pdp@sipa.ouest-france.fr
In the interests of confidentiality and the protection of your personal data, the company must verify your identity before responding to such a request. Any request to exercise these rights must be accompanied by a copy of a signed identity document.
In the event of an unsatisfactory response, you may lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL): https: //www.cnil.fr/fr/plaintes.
- PERSONAL DATA SECURITY
As data controller, we take all necessary measures to protect the security and confidentiality of data, and in particular to prevent it from being damaged or accessed by unauthorized third parties. To this end, we make every effort to ensure the physical security of the buildings housing our computer systems, as well as the security of the computer system, notably through the use of encryption measures. We also ensure that our subcontractors comply with the rules governing the protection of personal data.
- UPDATE OF THE PERSONAL DATA PROTECTION POLICY
This privacy policy may be modified or adjusted at any time.
Where necessary or required, we will inform you.
We invite you to consult it regularly.