Privacy policy
At hipto, we take care of your data.
Privacy policy | Personal data protection
Effective date: 01.01.2022
Author: WEEDEV SAS
Issuing department: Marketing & Communications Department
Validator: Morgane SAILLARD
Signatory: Léo HAUET, Chief Executive Officer
Distribution: Public
Recipients: Prospects, Partners, Institutions
Update tracking: 18/12/2023 - V.3 - Legal department - Update - Published online
Table of contents
- Purpose and scope of the Policy
- Data Controller
- What personal data do we collect and how?
- Do we share your personal data?
- Is your personal data transferred to third countries?
- How long do we keep your personal data?
- How do we secure your personal data?
- What are your rights?
- Policy update
1. Purpose and scope of the Policy
The hipto.com website (the “Site”) is owned by WEEDEV SAS. WEEDEV SAS attaches the greatest importance and care to protecting privacy and personal data, and to complying with applicable legislation.
Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the “GDPR”) states that personal data must be processed lawfully, fairly and transparently.
This privacy policy (the “Policy”) therefore aims to provide simple and clear information about the processing of personal data concerning you in connection with your browsing and the operations carried out on our website.
WEEDEV SAS undertakes to preserve the privacy of its clients and users of the hipto.com website. You may provide us with information about yourself by filling in forms on the Site or by corresponding with us by post, telephone, email or otherwise.
This Privacy Policy sets out our practices for collecting and sharing personal information and aims to inform you how we collect this information, how we use it and how we share the information you choose to provide.
2. Data Controller
As part of our activity, we collect and use personal data relating to you, as natural persons (the “Data Subject”).
For all processing operations, WEEDEV, a simplified joint-stock company with share capital of 50,000 euros, registered with the Paris Trade and Companies Register under number 820 561 538 and whose registered office is located at 114 rue Gallieni, 92100 Boulogne-Billancourt, determines the means and purposes of processing.
We therefore act as Data Controller within the meaning of personal data regulations, in particular Regulation (EU) 2016/679.
3. What personal data do we collect and how?
When you use our website, you provide us with information about yourself, some of which may identify you (“Personal Data”). This is the case when you browse our site, fill in our contact form or interact with our customer relationship chatbot.
The data collected may include identification data (last name, first name, telephone number, email address, country, message and subsequent exchanges), professional life data (job, role, workplace) and connection data (IP address, date and time of connection, pages visited, cookie preferences and choices).
Some information is essential to provide our services. When required, it is marked with an asterisk. If you do not provide it, we will not be able to contact you again or respond to your request.
As part of the management of our website, contact forms and social media, WEEDEV SAS uses personal data as follows:
| Purposes | Data collected | Legal bases for processing | Retention periods |
|---|---|---|---|
| We use this data to:- Contact you when you fill in the contact form- Carry out audience analysis or statistics (with your consent)- Send you our newsletter or personalized information about our services if you subscribe | - Identification- Cookie-related data- Identification | - Legitimate interest- Legitimate interest- Consent via the cookie consent interface | Data collected through the form is kept for 3 years from collection or last contact. Contact details used for newsletters and communications are kept until you unsubscribe via the unsubscribe link. |
| - Monitor and improve our website | Cookie-related data | Legitimate interest | Your browsing data on our website is kept for a maximum period of 13 months. |
As part of customer service management, WEEDEV uses personal data as follows:
| Purposes | Data collected | Legal bases for processing | Retention periods |
|---|---|---|---|
| Collect and build a prospect database | Identification dataBrowsing dataProfessional data | - Legitimate interest | Prospect data is kept for 3 years from the last contact with the person. |
| Manage customer complaints | Identification data | Legitimate interest | 5 years from the end of the operation |
| Comply with legal and regulatory obligations (rights requests) | Identification data | Legal obligation | 5 years from the closure of the request |
| Manage billing and quotes | Identification dataData relating to legal entities | Legitimate interest | Invoices and accounting records are kept for 10 years. |
4. Do we share your personal data?
Your Data is intended for authorized WEEDEV SAS employees responsible for managing and performing contracts and legal obligations, according to the purposes of collection and within the limits of their respective duties.
We may use service providers and subcontractors to carry out operations on our behalf, including data hosting (IONOS, 1&1, OVH), management of data collection forms and use of the chatbot through our CRM tool HubSpot.
Your Data may also be disclosed to duly authorized public authorities as part of our legal and regulatory obligations, as well as to regulated professions involved in guarantees, recovery or litigation.
When your Data is disclosed to our service providers and subcontractors, they are also asked not to use the Data for purposes other than those initially intended. We make every effort to ensure secure communication or transmission of your Data. We do not sell your Data.
5. Is your personal data transferred to third countries?
WEEDEV SAS endeavors to keep personal data in France, or at least within the European Economic Area (EEA). However, some Data may be transferred to other countries.
In the event of such a transfer, we ensure that it is made to a country providing an adequate level of protection, under standard contractual clauses, or under binding corporate rules.
6. How long do we keep your personal data?
We keep your personal data only for as long as necessary to achieve the purpose for which we hold it, in order to meet your needs or comply with our legal obligations.
Retention periods vary according to contractual requirements, management requirements relating to our website and contact forms, legal obligations and recommendations from supervisory authorities.
7. How do we secure your personal data?
WEEDEV SAS undertakes to protect the personal data collected against any loss, destruction, alteration, unauthorized access or disclosure.
We implement appropriate technical and organizational measures according to the nature of the Data and the risks involved in its processing, including restricted access to authorized persons, contractual safeguards with our partners, impact assessments and physical or logical security measures.
Our practices, policies and security measures are regularly reviewed and updated where necessary.
8. What are your rights?
The GDPR grants Data Subjects several rights: right to information, right of access, right to rectification, right to erasure, right to object, right to withdraw consent, right to restriction of processing, right to data portability, right not to be subject to automated decision-making and right to define post-mortem instructions.
To exercise your rights or for any complaint relating to the protection of your data, you may contact the Data Protection Officer (DPO) by email at dpo@hipto.com or by post at: WEEDEV SAS – 114 rue Gallieni, 92100 Boulogne-Billancourt.
When you submit a rights request, you are asked to specify as much as possible the scope of the request, the type of right exercised, the processing concerned and any other useful information. In case of reasonable doubt, you may be asked to prove your identity.
You also have the right to lodge a complaint with the French Data Protection Authority (CNIL), 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07.
9. Policy update
This Policy may be updated regularly to take account of changes in personal data regulations.
Last updated: 18/12/2023.
Any other questions? Contact us at dpo@hipto.com.
We will reply as soon as possible.