DATA PROTECTION DECLARATION
The purpose of this data protection declaration is to inform you and the public about the nature, extent and purpose of the collection, use and processing of personal data by us. This declaration is also intended to inform you of your rights in this regard.
You may exercise these rights by writing to the following e-mail address: contact@poggio-solutions.com or by post to the following postal address: POGGIO SOLUTIONS, 854, Avenue du Campon, 06110 Le Cannet, France.
1. DEFINITION OF TERMS
Our data protection declaration is based on the terminology of the General Data Protection Regulation (GDPR). When we use the following terms in our data protection declaration, they are defined as follows:
- Personal data
Personal data is any information relating to an identified or identifiable natural person, hereinafter referred to as the "data subject". An "identifiable person" is a natural person who can be identified, directly or indirectly, by means of an identifier, such as a name, an identification number, location data, an online identifier, or one or more elements specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity.
- Data subject
A person is a "data subject" when his or her personal data is processed by the persons responsible for such processing.
- Processing
Processing" means any operation carried out with or without the aid of automated processes and relating to personal data, such as the collection, recording, organisation, filing, storage, adaptation, modification, retrieval, consultation, use, communication by transmission, dissemination or any other form of making available, alignment or interconnection, blocking, erasure or destruction.
- Limitation of processing
Limitation of processing" characterises the marking of stored personal data with a view to limiting their future processing.
- Profiling
Profiling" describes the automated processing of personal data which consists of using such data for evaluation, analysis or forecasting purposes (including elements concerning work performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or travel).
- Pseudonymisation
Pseudonymisation" is the processing of personal data in such a way that they can no longer be attributed to a specific data subject without additional information, provided that such additional information is kept separately and subject to technical and organisational measures to ensure that personal data are not attributed to an identified or identifiable natural person.
- Data controller
"Controller" means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing. Where the purposes and means of such processing are determined by Union law or the law of a Member State, the controller may be designated or the specific criteria for its designation may be laid down by Union law or by the law of a Member State.
- Subcontractor
"Sub-processor" means the natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
- Recipient
"Recipient" means the natural or legal person, public authority, service or any other body that receives communication of personal data, whether or not it is a third party. However, public authorities which may receive personal data in the course of a particular enquiry in accordance with Union law or the law of a Member State shall not be regarded as recipients.
- Third parties
"Third party" means a natural or legal person, public authority, service or body other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or the processor, are authorised to process personal data.
- Consent
The "consent" of the data subject describes any free, specific, informed and unambiguous expression of will by which the data subject agrees, by a declaration or by a clear positive act, that personal data relating to him or her may be processed.
2. DATA CONTROLLER
The person responsible for processing personal data is: POGGIO SOLUTIONS. He can be contacted by email: contact@poggio-solutions.com
3. DATA COLLECTION AND LEGAL BASIS FOR PROCESSING
Data recording and general information
When you access our website, data of a general nature is automatically recorded. This information (also known as "Server Logfiles", "server log files") includes, for example, the type of Internet browser used, the operating system used, the domain name of your Internet service provider and similar data. This information cannot be traced back to you. For technical reasons, this information is necessary in order to provide you with the content of the desired web pages in an appropriate manner. The use of the internet therefore makes it obligatory.
When you access our website, the following information is collected and stored:
- IP address of your computer;
- date of access ;
- name and URL of the file accessed;
- Referrer URL;
- browser/operating system/access provider.
The collection and storage of data serves the following purposes:
- connection to the website ;
- technical operation of the website;
- system security;
- administration.
Data processing is carried out in accordance with Article 6(1)(f) of the PDSG.
For reasons of security and protection of the transfer of personal and other confidential data (e.g. orders or requests to the controller), this website uses SSL/TLS encryption. You can recognise an encrypted connection by the character string "https://" and a padlock symbol in the address bar of your browser.
Registration and ordering on our website
When you register on our website or create a user account, personal data is collected. We would like to point out that although registration may allow you to continue to access the contents of our website, it is not essential for the use of our website. The personal data transmitted to the data controller depends on the data entry form used at the time of registration. The personal data of the data subject is only used and collected internally by the data controller and only for its own purposes. The data controller may request the transmission of personal data to one or more subcontractors (for example a logistics centre in charge of postal delivery to your home). The latter will use the personal data only internally and only for the purposes specified by the data controller.
If you register on our website, the following data is collected and stored about you:
- title, surname, first name and address ;
- RCS and legal form for companies
- e-mail address ;
- telephone number.
We also collect commercial information, relating to the transactions carried out: transaction number, details of the purchase, terms of payment, discounts granted, receipts, balances and outstanding payments, purchase history, return of products, correspondence and/or telephone exchanges with you and our after-sales service.
Your banking data is collected and processed directly by our banking service provider and POGGIO is never in possession of this data.
The collection and recording of data allows :
- the identification of the customer ;
- to communicate with you when processing an order ;
- to issue an invoice;
- the payment of possible damages and the undertaking of an action for damages against you;
- the technical management of the website;
- the administration;
- administration ;
Your consent is collected when you place an order, prior to the processing of the said data.
The data processing is carried out in accordance with the terms of article 6, paragraph 1, point b of the RGPD.
Possibility of contact via the website
If you contact us via our contact form or e-mail, then the data entered in the form or e-mail (including your contact details) will be stored for the purpose of processing your request or contacting the person concerned. This data will not be passed on to third parties. Our legitimate interests in replying to your request under Article 6(1)(f) of the DPMR form the legal basis for the processing of the data. If the purpose of your contact is to conclude a contract, the additional legal basis for the processing is Article 6(1)(b) of the PDSR. The processing of data on the basis of your consent is carried out in accordance with Article 6(1)(a) of the PDSR. The deletion of personal data collected via the contact form takes place automatically after the processing of your request. You have the right to revoke your consent to the processing of your data at any time.
Comment function on the website blog
By leaving a comment on our site, the comment and the user name used are collected and saved so that any illegal content can be traced and we can be relieved of it.
4. DATA RETENTION PERIOD
The length of time personal data is kept depends on the purpose for which it is processed. In general, your data is retained for the duration of our business relationship, increased by three years at the end of the relationship, and is then archived in order to meet our legal obligations or for evidential purposes or is anonymised for research and statistical purposes.
Your data will not be kept for longer than is strictly necessary for the purposes stated herein and in accordance with the law.
Your order data will be stored for seven years from the last order.
Your customer account data is kept, for communication purposes, for a period of three years from your last activity on our website or on an electronic communication medium (in particular clicking on a hypertext link contained in one of our emails). At the end of this three-year period, POGGIO SOLUTIONS may contact you again to find out whether you wish to continue to receive our commercial communications. In the absence of a positive and explicit response from you, we will delete your data.
However, the data enabling proof of a right or a contract to be established, or retained in order to comply with a legal obligation, may be subject to an interim archiving policy for a period not exceeding the duration necessary for the purposes for which they are retained, in accordance with the legal provisions in force and it being recalled that the limitation period under ordinary law is five years (article 2224 of the Civil Code). In this context, we may retain certain data after the deletion of your account when such retention is provided for by law, or when such retention is necessary to enable us to manage disputes and contestations.
Similarly, if you have exercised your right to object to receiving canvassing from a data controller, the information enabling your right to object to be taken into account will be kept for at least three years from the exercise of the right to object. Under no circumstances will this data be used for any purpose other than the management of the right of opposition and only the data necessary to take account of the right of opposition will be kept.
5. OBLIGATION TO TRANSMIT DATA; POSSIBLE CONSEQUENCES OF NON-TRANSMISSION
The transfer of personal data is partly required by law (tax law) and can also take place within the framework of other contractual arrangements (transparency of the contractual partner). A non-transmission of personal data would constitute an obstacle to the conclusion of a contract and is therefore excluded. The data controller can provide you with further information on the obligation to provide personal data required by law or by contract.
6. EXISTENCE OF AUTOMATED DECISION-MAKING
We do not use any automated decision making (e.g. profiling).
7. SYSTEMATIC DELETION AND BLOCKING OF PERSONAL DATA
When the data retention period specified in point 5 above expires, personal data shall be deleted systematically.
8. RIGHTS OF THE PERSON CONCERNED BY THE DATA COLLECTION
As the person concerned by the data collection, you have the following rights:
- Article 15 of the RGPD: You have the right to request information on the personal data concerning you that we have collected. In particular, you have the right to demand information on the purposes of the processing, the category of said personal data, the categories of recipients to whom your data has been or is being transmitted, the planned storage period, the existence of a right to rectification, deletion, limitation of the processing or withdrawal of consent, the right to lodge a complaint, the origin of your data if they are not the result of our collection as well as on the existence of automated decision-making, including profiling and, where appropriate, to demand detailed information on its particularities ;
- Article 16 of the RGPD: You have the right to demand that your personal data registered with us be rectified or completed in the event that they are incorrect or incomplete;
- Article 17 of the RGPD: You have the right to demand the deletion of your personal data registered with us, insofar as the processing of such data is not necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for the preservation of the general interest or for the establishment, exercise or defence of a legal right;
- Article 18 of the DPMR: You may require the restriction of the processing of your personal data if you contest the accuracy of the data, if the processing is unlawful, if you object to the deletion of the data and if we no longer need the data but you still need the data for the establishment, exercise or defence of legal claims or if you have objected to the processing in accordance with Article 21 of the DPMR;
- Article 20 of the DPMR: You have the right to receive the personal data concerning you that you have provided us with, in a structured, commonly used and machine-readable format, and have the right to transmit these data to another controller;
- Article 7, paragraph 3 of the DPMR: You have the right to revoke your consent to the processing of your data. This will have the effect that we will no longer have the right to process data based on this consent in the future;
- Article 77 of the DPMR: You have the right to lodge a complaint regarding the use of the data with a supervisory authority in your place of habitual residence, your place of work or the place where our company has its registered office (right of appeal).
5. OBLIGATION DE TRANSMETTRE LES DONNÉES ; CONSÉQUENCES ÉVENTUELLES DE LA NON-TRANSMISSION
Le transfert de données personnelles est en partie requis par la loi (droit fiscal) et peut également avoir lieu dans le cadre d'autres dispositions contractuelles (transparence du partenaire contractuel). La non-transmission de données à caractère personnel constituerait un obstacle à la conclusion d'un contrat et est donc exclue. Le responsable du traitement des données peut vous fournir de plus amples informations sur l'obligation de fournir des données à caractère personnel requise par la loi ou par contrat.
6. EXISTENCE D'UN PROCESSUS DÉCISIONNEL AUTOMATISÉ
Nous n'utilisons aucune prise de décision automatisée (par exemple, le profilage).
7. EFFACEMENT ET BLOCAGE SYSTÉMATIQUES DES DONNÉES À CARACTÈRE PERSONNEL
À l'expiration de la période de conservation des données prévue au point 5 ci-dessus, les données à caractère personnel sont systématiquement supprimées.
8. DROITS DE LA PERSONNE CONCERNÉE PAR LA COLLECTE DE DONNÉES
En tant que personne concernée par la collecte de données, vous disposez des droits suivants :
- Article 15 du RGPD : Vous avez le droit de demander des informations sur les données personnelles vous concernant que nous avons collectées. En particulier, vous avez le droit d'exiger des informations sur les finalités du traitement, la catégorie desdites données à caractère personnel, les catégories de destinataires auxquels vos données ont été ou sont transmises, la durée de conservation prévue, l'existence d'un droit de rectification, de suppression, de limitation du traitement ou de retrait du consentement, le droit de déposer une plainte, l'origine de vos données si elles ne résultent pas de notre collecte ainsi que sur l'existence d'un processus décisionnel automatisé, y compris le profilage et, le cas échéant, d'exiger des informations détaillées sur ses particularités ;
- Article 16 du RGPD : Vous avez le droit d'exiger que les données à caractère personnel vous concernant qui sont enregistrées chez nous soient rectifiées ou complétées si elles sont inexactes ou incomplètes ;
- Article 17 du RGPD : Vous avez le droit d'exiger la suppression des données à caractère personnel vous concernant enregistrées chez nous, dans la mesure où le traitement de ces données n'est pas nécessaire à l'exercice du droit à la liberté d'expression et d'information, au respect d'une obligation légale, à la sauvegarde de l'intérêt général ou à la constatation, l'exercice ou la défense d'un droit légal ;
- Article 18 de la DPMR : Vous pouvez exiger la limitation du traitement de vos données à caractère personnel si vous contestez l'exactitude des données, si le traitement est illégal, si vous vous opposez à la suppression des données et si nous n'avons plus besoin des données mais que vous en avez toujours besoin pour la constatation, l'exercice ou la défense d'un droit en justice ou si vous vous êtes opposé au traitement conformément à l'article 21 de la DPMR ;
- Article 20 de la DPMR : Vous avez le droit de recevoir les données à caractère personnel vous concernant que vous nous avez fournies, dans un format structuré, communément utilisé et lisible par machine, et vous avez le droit de transmettre ces données à un autre responsable du traitement ;
- Article 7, paragraphe 3 de la DPMR : Vous avez le droit de révoquer votre consentement au traitement de vos données. Cela aura pour effet que nous n'aurons plus le droit de traiter des données sur la base de ce consentement à l'avenir ;
- Article 77 de la DPMR : Vous avez le droit de déposer une plainte concernant l'utilisation des données auprès d'une autorité de contrôle de votre lieu de résidence habituelle, de votre lieu de travail ou du lieu où notre société a son siège social (droit de recours).
PayPal
Our website integrates a PayPal module. Paypal is a payment service provider. Payments are made via accounts that are the virtual equivalent of private or commercial accounts. PayPal also offers the possibility to make virtual payments with a credit card if the user does not have an account. An account is identified by an e-mail address and does not have a traditional account number. PayPal allows you to make and receive online payments to and from third parties. In addition, PayPal acts as an agent and offers protection services to the buyer.
The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Co. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.
When you use these payment methods, the personal data required to process the payment is transmitted to PayPal. As a general rule, the personal data transmitted is limited to the following data: first name, surname, address, e-mail address, IP address, telephone number, mobile phone number and other data required to process the payment. Personal data in connection with your order are necessary for the execution of the sales contract.
The purpose of the transmission of data is the execution of the payment as well as the prevention of fraud. We pass on data to PayPal or Skrill if there is a legitimate interest in doing so. If necessary, PayPal will pass on the personal data received to economic intelligence companies in accordance with its data protection declaration. This transmission serves the purpose of checking identity and creditworthiness. PayPal also passes on personal data to associated companies or service providers or to subsidiaries, insofar as this is necessary to fulfil contractual obligations or insofar as the data is to be processed within the scope of the contract. The data subject can revoke his/her consent to the use of his/her personal data by PayPal at any time. Such revocation has no effect on personal data that must be processed, used or forwarded for the (contractual) execution of the payment.
The transmission of data to PayPal as described in this paragraph only takes place when you expressly choose one of these payment methods.
You can find the current data protection regulations of PayPal on the following page: https://www.paypal.com/fr/webapps/mpp/ua/privacy-full.
13. SHIPMENT PROCESSING
E-mail address / telephone number
The e-mail address or telephone number will be passed on to the carriers, including the Post Office, so that they can make contact by e-mail or telephone or transmit information on the status of the shipment before delivery of the goods, in order to coordinate a delivery date. This consent may be revoked at any time.