Personal Data
Protection Policy
Applicable as of May 25, 2018
Last updated: January 2021
PRADEO SECURITY SYSTEMS (SAS, headquartered at 71 Place VAUBAN, 34000 Montpellier, France), represented by its president, Mr Clément SAAD, in his capacity as head of processing, attaches great importance to the protection and respect of your privacy.
PRADEO wishes to inform you through this policy of how we collect, process and protect your personal data processed via the www.pradeo.com website.
PRADEO complies with all French and European regulatory and legislative provisions relating to the protection of personal data.
PRADEO has an extremely strict policy to ensure the protection of its users’ personal data:
– Each PRADEO user remains in control of their data.
– They are treated in a transparent, confidential and secure manner.
This policy is intended to inform you of our practices regarding the collection, use and sharing of information that you are required to provide to us through our website www.pradeo.com.
We invite you to read this document carefully to learn and understand our practices regarding the processing of your personal data that we implement.
Your personal data we collect
TYPES OF DATA COLLECTED PRADEO collects the following data:
1) Directly, following an action on your part, when you register to receive our newsletters, access a document or make a contact request.
2) Indirectly, using technologies such as cookies.
3) Indirectly, but following a voluntary act on your part, when you share, on social networks content of our website (article, ….).
The information you give us directly:
• The data you provide by filling out one of our website’s forms:
- Name, first name
- Name of the company you work for
- Position occupied in society
- Professional e-mail
- Continent or Country
- Any information provided deliberately by the user as part of the free text entry
The data we collect automatically (indirectly):
In case you log into our website,PRADEO may have access to certain data. During each of your visits, we may collect, in accordance with applicable legislation and subject to your acceptance, personal data about you. Among the technologies used to collect this information, we use cookies.
PRADEO uses cookies for the following purposes:
Ensure that our site iswell-rounded:
- Improve site performance;
- Allowing messaging to work;
- C reer and store your login data in memory;
- Personnaliser the interface according to your preferences, especially the language used.
Run behavioural ads online:
- Inorder to offer you online advertisements for products that may be of interest to you, depending on your previous behavior;
- Inthe end of offering you advertisements and content on social networks.
Allow the sharing of our content on the social networks used by the visito
These treatments are carried out on the basis:
- Of the legitimate interest of PRADEO, for the purposes relating to the operation of the site;
- User consent, in all other cases.
Cookies used on the site include third-party cookies offered and stored by:
- Google LLC, a member of the Data Protection Shield;
- HubSpot Inc., a member of the Data Protection Shield;
As part of these partnerships, PRADEO has ensured the proper implementation of the principles of the General Data Protection Regulations
PRADEO recommends that you accept these cookies in order to promote the browsing process on the Site. However, you can set cookies on a case-by-case basis or accept or reject them systematically.
Personal data collected using cookies is stored by PRADEO for a period of 13 months. They are not transferred to third parties or used for any purpose other than those described here.
The data we collect indirectly but as a result of a voluntary act on your part:
SOCIAL NETWORKS
The PRADEO User has the option to click on the icons dedicated to the social networks Twitter, Facebook and Linkedin on the Site in order to share PRADEO content on their own social network account.
Social networks improve the user-friendliness of the Site and help to promote it through sharing
When the User clicks these buttons, PRADEO will be able to access the personal information that the User has indicated as public and accessible from his Twitter, Facebook and Linkedin profiles.
PRADEO is also likely to process public data from the profiles of social network users who share, subscribe, track or contact PRADEO on these platforms
However, PRADEO does not create or use any database independent of Twitter, Facebook, Linkedin and Google Plus based on the personal information that the User may post on it, and PRADEO will not process any data related to their privacy through this.
If the User does not want PRADEO to have access to personal information published on the public space of its profiles or social accounts, the User will then have to use the means made available to him by Twitter, Facebook, Linkedin and Google Plus in order to limit access to his data.
Purpose of the personal data we collect
PRADEO uses the data collected to conduct its business and ensure the supply of its products. In particular, we use them to improve our products
We can also use this data to communicate with you, for example, to give you information about security news, our latest content and our products
We use the data we collect to:
|
FINALITES
|
LEGAL FOUNDATION
|
|---|---|
|
Thistreatment is (i) based on our legitimate interest(promoting similar services to our existing customers), and/or (ii) on your consent.
|
send newsletters, share our news and inform you of developments in our services;
|
|
Manage nobe site and perform internal technical operations in the context of problem solving,data analysis, testing, research, studies and surveys;
|
This treatment is basedon our legitimate interest (ensuring the safety ofthe site and improving its characteristics).
|
|
Improve and optimize our site,especially to ensure that the display of our content is suitable for your device;
|
This treatment is basedon our legitimate interest (providing you with suitablecontent).
|
|
Help us preserve a safe and healthy environment on our site
|
This treatment is (i) based on our legitimate interest (ensuring the safety of our Platforms), (ii) necessary to comply with our legalobligations.
|
|
Assess the effectiveness of the advertising messages we send and adapt them tothe market;
|
This treatment is based (i) on our legitimate interest (measuring and optimizing the effectiveness of our campaigns) and/or (ii) on your consent.
|
|
perform marketing and commercial actions, including webminr broadcasting and marketing campaigns.
|
This treatment is based (i) on ourlegitimate interest when addressing persons already clients and relates to services similar to those already provided by PRADEO or (ii) on your consent
|
Who has access to the information we collect and why do they have access to your personal information?
The User’s Personal Datais intended for the use of PRADEO and is only accessible by PRADEO employees who have all signed a confidentiality clause.
ThisPersonal Data may be communicated to the technical providers responsible for the maintenance and hosting of itscomputer system and itssite and, in this case, to its legal department, its litigation department, and those responsible for dealing with the relationship with the User.
Personal Data can also be accessed by publishers of the marketing and customer relationship management software solutions used by PRADEO. The communication of Personal Data is carried out only for the purposes mentioned above and within the limit necessary to carry out the tasks that are conferred on each of these recipients.
PRADEO requires these recipients to use your personal data only to manage the services they are responsible for and in accordance with applicable privacy laws and regulations.
Finally, PRADEO reserves the right, after obtaining your express permission, to use directly or indirectly (for example by passing them on to its partners) your Personnelles Données for commercial explorationpurposes.
PRADEO will also be able to share the User’s personal data:
-> If we have a legal obligation to disclose personal data or if we believe in good faith that this is necessary to (i) respond to any claim against PRADEO, (ii) comply with any judicial request.
->In the event that PRADEO sells a business or assets, in which case we reserve the possibility to share your Personal Data with the potential buyer of that company or those assets. If necessary, new information will be sent to the individuals concerned.
What are your rights to your personal data (Article 15 to 22 of the RGPD)?
On the basis of your identity and if the conditions for the exercise of these rights are met, you can exercise your right of access, right of rectification, right to be erased, right to limit treatment, right of opposition, right to portability of data, right to define guidelines relating to the fate of his data after his death by directly affecting our interlocutor in the matter of protecting your personal data, to the following address: dataprivacy@pradeo.com
Right to information You have the right to receive a copy of your Personal Data in our possession by directlyacting on our interlocutor in the protection of your personal data, at the following email address: dataprivacy@pradeo.com
Youcan, by email, ask us to confirm if your personal data will be processed by us.
If such a treatment has taken place, you can ask us for the following information:
The purposes for which personal data is processed;
(2) Categories of personal data processed;
(3) Recipients or categories of recipients to whom your personal data has been or is still disclosed;
(4) The expected shelf life of personal data about you or, if no specific information is possible, the criteria for determining shelf life;
(5) the existence of a right to correct or delete your personal data concerning you, a right to limit treatment by the person responsible for the treatment or a right to object to such treatment;
(6) The existence of a right of appeal to a supervisory authority;
(7) Any information available on the origin of the data if the personal data is not collected from the person concerned;
(8) automated decision-making, including suitable profiling. 22, al. 1 and 4 of the RGPD and – at least in these cases – useful information on the logic involved and on the intended scope and effects of such treatment for the person concerned.
You have the right to ask if your personal data is transferred to a third country or an international organization. In this context, you can ask to be informed of the appropriate guarantees in accordance with art. 46 of the RGPD as part of the transmission.
Right to rectify
You have the right to correct and/or complete with the processing manager if the personal data processed about you is incorrect or incomplete. PRADEO will proceed with the correction without delay.
Whenever PRADEO deals with Personal Data, PRADEO takes all reasonable steps to ensure the accuracy and relevance of Personal Data to the purposes for which PRADEO collects it.
If the User wishes to correct them, the User can contact PRADEO in writing at the following email address: dataprivacy@pradeo.com.
In this case, the User must indicate the Personal Data that he would like PRADEO to correct, update or delete, by identifying himself precisely with a copy of an ID (identity card or passport). Requests to delete Personal Data will be subject to the obligations imposed on PRADEO by law, including the retention or archiving of documents.
Right to limit treatment
You can request that the processing of your personal data be limited, under the following conditions:
(1) If you question the accuracy of your personal data during a period of time that allows us to verify the accuracy of personal data;
(2) If the processing is illegal and you object to the deletion of personal data and instead ask that the use of personal data be limited;
(3) if we no longer need personal data for processing purposes, except to argue, exercise or defend legal action, or to sue;
(4) if you have objected to the treatment and it has not yet been established whether our justified reasons outweigh yours.
If the processing of your personal data has been limited, such data may only be processed – outside of its storage – with your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of another individual or legal person or for reasons of significant public interest of the Union or a Member State
If the treatment restriction has been limited in accordance with the above conditions, we will notify you before the restriction is lifted
Right to be removed
How long your data is stored
Your data is kept in accordance with the law for a period justified by the purpose of the treatment and, in any event, during the periods of legal preservation.
In particular, your Personal Data is deleted after the following periods:
- 3 years after the user’s last contact for commercial prospecting data;
- 13 months for data collected using cookies.
In the event that your account has been suspended or blocked, we will keep your data for the durations of legal requirements to avoid any circumvention on your part ofthe rules in force on thesite.
Obligation to remove
You can also request the erasure of your Personal Data (“right to delete”). Please note that we may retain certain information about you when required by law or when we have a legitimate reason to do so.
You can ask us to immediately delete your personal data and we are required to delete this data immediately as long as one of the following reasons applies:
(1) Personal data about you is no longer necessary for the purpose for which it was collected or processed.
(2) You revoke your consent, on which the treatment was based, and the treatment is not based on any other legal basis.
(3) You object to the treatment and there are no compelling and legitimate reasons for processing, or you object to the processing of your data for commercial exploration.
(4) Personal data about you has been illegally processed.
(5) The removal of your personal data is necessary to satisfy a legal obligation under European Community law or the law of the Member States to which we are subject.
Exceptions
The right to remove does not exist as long as treatment is necessary:
(1) Inorder to enable the performance of a legal obligation to which the person in charge of the treatment is subject;
(2) In order to assert, exercise or defend legal rights by PRADEO.
Right to data portability (Portability)
You also have the right to portability of your data, i.e. the right to receive the Personal Data you have provided to us in a structured format, commonly used and readable by the machine and the right to transmit this data to another processing manager (“right toportability”), provided that:
(1) Treatment is based on your consent or contract
(2) processing is done using automated methods.
By exercising this right, you also have the right to request that your personal data be transferred directly by PRADEO to another processing manager, as long as this is technically possible. The freedoms and rights of others should not be affected.
Right of opposition
You may object at any time to the processing of your data based on a legitimate interest of PRADEO including profiling.
In suchcases, we will no longer process personal data about you unless we can provide evidence of compelling reasons worthy of protection for treatment, which outweigh your interests, rights and freedoms, or if the treatment is used to assert, exercise or defend legal rights.
PRADEO conducts profiling activitiesusing the data processed in these contexts,only for marketingpurposes
If your personal data is processed for direct marketing purposes, you are in a position to droit de vous opposer à tout moment au traitement à des fins publicitaires des données personnelles vous concernant.
If you object to direct marketing processing, your personal data will no longer be processed for these purposes.
Right to revoke consent to data processing
You have the right to revoke your consent to the processing of the data at any time. The revocation of consent does not affect the legality of treatment on the basis of consent until revocation.
Right of appeal to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have a right of appeal to the CNIL, or any other competent supervisory authority in the Member State in which you reside, work or suspect an infringement, if you believe that the handling of personal data about you is contrary to the RGPD.
CNIL : http://www.cnil.fr
By phone 01 53 73 22 22
Par mail : Commission Nationale de l’Informatique et des Libertés 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07
SECURITY
To ensure the security and privacy of Personal Data, PRADEO uses networks protected by standard devices such asfirewalls.
When processing Personal Data, PRADEO takes all organizational, technical, software and physical measures to protect them from loss, misuse, unauthorized access, disclosure, tampering or destruction.
Our website is hosted within the European Union in the databases of hosts that comply with the GDPR.
However, some Personal Data is transferred to software solution vendors in a third country that do not have equivalent safeguards for the protection of personal data (United States). As such, PRADEO has entered into agreements with these publishers in accordance with the standard data protection clauses adopted by the European Commission. These clauses can be communicated to Users upon their request.
Effective date : 25 mai 2018
The French version of this document must prevail over any translation with regard to all the concepts, definitions, turns of words and expressions related.