Privacy and Data Policy

1. Definitions

• Personal data: any information relating to an identified person or an identifiable natural person.
• Processing: any operation or set of operations applied to a personal data or a set of personal data.
• Data Subject: a natural person whose personal data is being processed.
• We: represents the company Numalis SAS

2. General data principles

We are committed to the following principles regarding data protection:

• Our data processing is lawful, reasonable, transparent. Our data processing has a legal basis.
• We will give priority to your rights with regard to the processing of your personal data. We will provide you with information about the processing of your data on request.
• The purpose of the processing of your data is limited. The processing of your personal data is limited to the purpose for which the data was collected.
• The processing is carried out with the minimum amount of data. We collect and process the minimum amount of information necessary for our purposes.
• Processing is limited in time. We will not keep your data longer than necessary.
• We will do our best to ensure the accuracy of your personal data.
• We will do our best to ensure the integrity and confidentiality of your data.

3. Your rights regarding your personal data

The data owner has the following rights:

• Right to information: you have the right to know how your personal data is processed; what data is collected, how it is obtained, why and who processes it.
• Right of access: you have the right to access the data collected about you. This includes the right to request and obtain a copy of your collected personal data.
• Right of rectification: you have the right to request rectification or deletion of your personal data if it is inaccurate or incomplete.
• Right to erasure: in certain circumstances, you may request that your personal data be deleted from our database.
• Right to restrict processing: when certain conditions are met, you have the right to restrict the processing of your personal data.
• Right to object to processing: in certain situations, you have the right to object to the processing of your personal data, such as for direct marketing.
• Right to object to automatic processing: you have the right to object to automatic processing, including profiling. You can exercise this right whenever the profiling results in legal effects concerning you or significantly affecting you.
• Right to data portability: you have the right to obtain your personal data in “machine-readable” format, i.e. in the form of a computer file.
• Right of complaint: in the event that we refuse your request for access to your personal data, we will provide you with a reason for this refusal. If you are not satisfied with the way your request has been handled, please contact us.
• Right to assistance from a supervisory authority: you have the right to assistance from a supervisory authority and the right to other legal remedies such as the right to claim damages.
• Right to withdraw consent: you have the right to withdraw your consent for the processing of your personal data.

4. What personal data we collect

The information you have provided to us

• This can be your e-mail, first name, billing address etc.: any information necessary to provide our products and/or services or to enhance your user experience on the site.
• We record the information you provide to us in order to leave comments or access other activities on our site. This information is limited to your first name and email address.
• Automatically Collected Information This includes information that is automatically stored by cookies and other session tools. This information is used to enhance your experience on our site, for example, to identify you.
• To view the list of cookies used on our site and change your consent, click here. If the window does not open, your browser is blocking the placement of cookies.
• Publicly Available Information We may collect information about you when you share it publicly (e.g., social media profiles).

5. How we use your personal data

To offer you our services:

• When you register to a form giving you access to a document to download, you indicate your first name and your e-mail address.
• You also agree to receive our newsletter as well as our product/service offers.
• We may also use your contact information to communicate and interact with you and to notify you of any changes to our services.
• This information is stored with an autoresponder; we use a self-hosted autoresponder.
• You can unsubscribe from these mailings at any time by clicking on the “unsubscribe” link found at the bottom of each email.

To improve your user experience;

Meet legal or contractual obligations:

• We process your personal data in order to meet legal obligations regarding the processing of personal data.
• We reserve the right to anonymize the personal data collected.
• For anything that is not subject to a legal retention period, this period does not exceed 3 years.
• We will inform you of any new processing of your data should this take place.

6. Who can access your personal data?

Your personal data is not shared with anyone. The use of your personal data is strictly reserved for the proper execution of our service contracts. However, companies related to Numalis (third party subcontractors) may have access to your personal data in the context of the proper execution of our service contracts or in the legal and accounting context.

List of third party subcontractors:

Name and address: Infomaniak Network SA, Rue Eugène Marziano 25, 1227 Les Acacias (GE), Switzerland.
Purpose: Hosting and maintenance of our computer servers / network infrastructure

7. How do we secure your personal data?

• We do our best to ensure the security of your personal data.
• We use secure communication and data transfer protocols (such as HTTPS).
• We favor anonymization and the use of pseudonyms whenever possible.
• We monitor our system to prevent security attacks. Despite all our efforts, we are not immune to a security breach.
• In this case, we undertake to notify the competent authorities, namely the CNIL, within 72 hours of the attack on your personal data.
• We would also notify you if there is a threat to your rights or interests.
• We would then do everything possible to avoid security breaches and to assist the authorities if a breach occurs.
• If you have an account with us, please note that you must keep your login and password secret.

8. Supervisory Authority

CNIL
3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07
Tel : 01 53 73 22 22

9. Contact information

To retrieve or delete your data or for any other question relating to the management of your personal data, you can send your request :

By mail to the address: Numalis SAS, Bureaux du Polygone, 265 rue des États du Languedoc, 34000 Montpellier, France – France.

By submitting a web form from our contact page.

If necessary, we will be happy to assist you in your request. Our toll-free number +33 (0)4 67 15 10 78 is available from Monday to Friday – 9am to 5pm (free service and call).