PRIVACY POLICY | PROTECTION OF PERSONAL DATA

 

• Effective date : 01.01.2022
• Author : WEEDEV SAS
• Issuing department : Marketing & Communication Department
• Validator: Morgane SAILLARD
• Signatory :
  • Name and first name : Value Invest Holding (Léo HAUET)
  • Position: Léo HAUET
• Distribution
  • Public
• Recipients
  • For action: Pour action : All WEEDEV employees
  • For information: Prospects, Partners, Institutions
• Follow-up of updates
• Date : 10/03/2022
• Reference : V.2
• Author : Léo HAUET
• Subject : Update
• Status : —
• Reference documents
  • Reference V.1

Summary

1. Purpose and scope of the Policy
2. Data Controller/li>
3. What Personal Data do we collect and how?
4. Why do we collect your Personal Data and how?
5. Do we share your Personal Data?
6. Are your Personal Data transferred to Third Countries?
7. How long do we keep your Personal Data?
8. How do we ensure the security of your Personal Information?
9. What are your rights?
10. How do you contact us?
11. Updates to this Policy

1. Purpose and Scope of the Policy

hipto.com is the property of WEEDEV SAS.

WEEDEV SAS attaches the utmost importance and care to the protection of privacy and Personal Data, as well as to compliance with the provisions of the applicable Legislation.
Regulation (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the Processing of Personal Data and on the free movement of such Data (hereinafter “GDPR”) states that Personal Data must be processed lawfully, fairly, and transparently. Thus, this privacy policy (hereinafter the “Policy”) aims to provide you with simple, clear information on the Processing of Personal Data concerning you, in the context of your browsing and the operations carried out on our website.

Le Règlement (UE) 2016/679 du 27 avril 2016 relatif à la protection des personnes physiques à l’égard du Traitement des Données à caractère personnel et à la libre circulation de ces Données (ci-après « RGPD ») affirme que les Données à caractère personnel doivent être traitées de façon licite, loyale, et transparente. Ainsi, cette politique de confidentialité (ci-après la « Politique ») a pour objectif de vous fournir une information simple, claire sur les Traitements de Données à caractère personnel vous concernant, dans le cadre de votre navigation et des opérations réalisées sur notre site Internet.

WEEDEV SAS is committed to protecting the privacy of its customers and users who interact with WEEDEV SAS. You may provide us with information about yourself by filling out forms on our website (the “Website”) or by corresponding with us by mail, telephone, e-mail or otherwise. This external privacy policy (the “Privacy Policy”) sets forth our personal information collection and sharing practices and is intended to inform you of the ways in which we collect personal information, the uses to which we put it, and the ways in which we will share any personal information you choose to provide to us.

If you are an existing customer, further details of how we use your personal information are set out in the customer agreement we have with you. Additional notices highlighting certain uses we wish to make of your personal information and your ability to consent or withdraw consent to certain uses may also be provided when we collect personal information from you.

The Website may contain links to other websites owned by third parties (for example, for the purpose of registering for events organized by third parties). If you follow a link to such websites, please note that these websites have their own privacy policies and that we are not responsible for their policies or for the treatment of your personal information. Please check these policies before providing any personal information to these third party websites.

This Privacy Policy is intended to introduce you to our privacy practices and addresses the following issues:

(a) Processor

(b) Personal information about you that we may collect;

(c) Possible uses of your personal information;

(d) Protection of your personal information;

(e) Contacting us and your rights to prevent marketing communications and to access and update your personal information;

(f) How to change this Privacy Policy.

2. Data Processor

In the course of our business, we collect and use Personal Data relating to you, an individual (hereinafter “Data Subject”).

For all Processing, WEEDEV, a Société par Actions Simplifiée (simplified joint stock company), with a capital of 50,000 euros, registered with the Paris Trade and Companies Register under number 820 561 538 and whose registered office is located at 114 rue Gallieni, 92100 Boulogne Billancourt, France, determines the means and purposes of Processing. Thus, we act as a Data Controller, within the meaning of the Regulation on Personal Data, and in particular Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data.

If you have any questions or complaints regarding WEEDEV SAS’s compliance with this Policy, our DPO is available to answer all your requests, in particular to exercise your rights under the LIL and the RGPD, relating to your personal data. You can contact him by e-mail at the following address: dpo@hipto.com

3. What Personal Information do we collect and how?

When you use our website, you provide us with a certain amount of information about yourself, some of which is likely to identify you (“Personal Information”). This is the case when you browse our site, when you fill in online forms (newsletter, contact, application,), when we guide you to our clients to find the most suitable offer for your request, or when you fill in forms to be contacted by our clients.

The nature and quality of the personal data collected about you will vary depending on your relationship with WEEDEV SAS:

• Identification data : this includes any information that would allow us to identify you, such as your surname, first name, telephone number, postal or e-mail address, date of birth, age, gender, country, as well as any information provided by you as part of your contact request and, if applicable, the content of the message, as well as any information communicated subsequently during your exchanges with WEEDEV SAS.
• Personal data : the number of people in your household, your lifestyle and consumer preferences.
• Professional data: job, function, place of work, skills
• Connection data : when you visit our website, we collect data such as IP address, date and time of connection, web pages visited, your cookie tracking preferences, your cookie choices.
• Insurance data : this may relate to the insurance or mutual insurance company with which you are affiliated.
• Financial data : this may include income level or salary.
• Health data : we may collect sensitive data about you, such as health data, as part of certain forms in order to provide you with an appropriate service.

You are informed that certain information is essential to benefit from our services (for example, when you fill in a collection form, this information is indicated by an asterisk). If you do not provide this information, we will not be able to provide you with the services concerned.

 

In the course of our business, we collect and process all or some of the following personal information about you:

Data collected by activity:

We collect your personal data for specific purposes and on different legal grounds.
In the context of the management of our website, contact forms and our social networks, WEEDEV SAS uses personal data as follows:

Goals	Personal data	Legal basis for	Shelf life
– We use this data to : – Contact you when you fill in the contact form – Carry out audience analysis or statistics (if agreed) – Send you our newsletter or personalised information about our services when you register – Manage advertising space (if agreed)	– Identity – Personal life – Professional life -Navigation – Login	Consent	The data collected through the form is kept for 3 years from the date of collection or last contact Retention of contact details for the purpose of sending the Newsletter and communications until unsubscription (via the unsubscribe link)
– Personalisation of services – Monitoring and improving our websites and applications; – To secure our websites/applications and ensure our and your protection against fraud.	– Identification data – Navigation data	Legitimate interest	Your navigation data on our website are kept for a maximum of 13 months

WEEDEV SAS uses personal data in the following ways, among others, in the context of our contact and quotation management activities:

Goals	Personal data	Legal basis for	Shelf life
– Searching for people interested in signing a contract with our clients and helping them choose a contract that suits their needs – Comparing contract offers and prices available – Adapting the offer and drawing up quotations – Put the end user in touch with us to conclude a contract – Register you in our database – Answer your questions and interact with you in general	– Identification data – Data from personal life – Data from professional life – Navigation data – Financial data	Necessary for the execution of the contract	Retention for the duration of the contractual relationship and 5 years after the end of the relationship.
– Search for customers interested in the offers of our partner customers – Exchange your data with our partners in order to adapt our offers to your needs	– Identification data – Data from personal life – Data from professional life – Navigation data – Financial data	Consent	Customer and prospect data is kept for 3 years from the last contact from the person Retention of contact details for the purpose of sending the Newsletter and communications until unsubscribed (via the unsubscribe link)
– Collect and build a database of prospects – Conduct surveys and measure your satisfaction	– Identification data – Navigation data	Legitimate interest	Prospective customers’ data is kept for 3 years from the last contact with the person Satisfaction and survey data are kept nominally for 1 year from the date of the survey and are then anonymised
Manage payments and invoicing for our customers	– Identification data – Navigation data	Legal obligation	Invoices and accounting documents are kept for 10 years.

4. Do we share your Personal Data?

Your Data is intended for use by authorized WEEDEV SAS employees in charge of managing and executing contracts and legal obligations, depending on the purpose of the collection and within the limits of their respective responsibilities.

It is transmitted for certain tasks related to the purposes, and within the limits of their respective missions and authorizations, to the following recipients

• Entities of the WEEDEV SAS Group in the context of outsourcing an activity to another entity of the group;
• Service providers and subcontractors we use to carry out a range of operations and tasks on our behalf, in particular
• Data hosting: IONOS, 1&1, OVH.
• Management of data collection forms: Landbot, RevealBot, JotForm, ManyChat, Messenger.
• Call management: AirCall.
• Commercial partners only when you have expressly consented via a checkbox or a “validate” button on our data collection forms: Insurance-Mutuals, Telecommunications, Energy, Works, Education)
• Duly authorized public authorities (judicial, supervisory, etc.), as part of our legal and regulatory obligations;
• Regulated professions (lawyers, bailiffs, etc.) who may intervene in the implementation of guarantees, recovery or litigation;
• Recruitment partners: Welcome To The Jungle, Indeed, and recruitment agencies
• Other partners: Hubspot, WordPress, Rankwell, Hula Hoop…

Where your Data is provided to our service providers and subcontractors, they are also required not to use the Data for any purpose other than that originally intended. We will make every effort to ensure that these Third Parties maintain the confidentiality and security of your Data.

In all cases, only the necessary Data is provided. We make every effort to ensure that your Data is communicated or transmitted securely.
We do not sell your Data.

5. Is your Personal Information transferred to third countries?

WEEDEV SAS endeavors to keep Personal Data in France, or at least within the European Economic Area (EEA).

However, it is possible that the Data we collect when you use our platform or services may be transferred to other countries. This is for example the case if some of our service providers are located outside the European Economic Area.

In the event of such a Transfer, we guarantee that it will be carried out:

• To a country providing an adequate level of protection, i.e. a level of protection equivalent to that required by the European Regulations;
• Within the framework of standard contractual clauses;
• Within the framework of internal company rules.

6. How long do we keep your Personal Data?

We will only retain your Personal Data for as long as is necessary to fulfil the purpose for which we hold the Data and to meet your needs or our legal obligations.

Retention periods vary depending on a number of factors, such as:

• WEEDEV business needs;
• Contractual requirements;
• Management requirements relating to our website and contact forms;
• Legal obligations;
• Recommendations from supervisory authorities.

7. How do we ensure the security of your Personal Information?

WEEDEV SAS is committed to protecting the Personal Data that we collect or process from loss, destruction, alteration, unauthorized access or disclosure.

Therefore, we implement all appropriate technical and organizational measures, depending on the nature of the Data and the risks involved in processing it. These measures must preserve the security and confidentiality of your Personal Data. These measures may include practices such as limiting access to Personal Data to persons authorized by virtue of their functions, contractual guarantees with our partners and the performance of impact assessments. In addition, our practices and policies and/or physical and/or logical security measures (secure access, authentication process, back-up, software, etc.) are regularly reviewed and updated as necessary.

8. What are your rights?

The GDPR provides Data Subjects with rights that they can exercise. These include:

1. Right to information: the right to have clear, precise and complete information on the use of Personal Data by WEEDEV SAS.
2. Right of access: the right to obtain a copy of the Personal Data that the Data Controller holds on the applicant.
3. Right of rectification: the right to have Personal Data rectified if they are inaccurate or obsolete and/or to have them completed if they are incomplete.
4. Right to erasure / right to be forgotten: the right, under certain conditions, to have Data erased or deleted, unless WEEDEV SAS has a legitimate interest in retaining it.
5. Right to object: the right to object to the Processing of Personal Data by WEEDEV SAS for reasons relating to the applicant’s particular circumstances (under certain conditions).
6. Right to withdraw consent: the right at any time to withdraw consent where Processing is based on Consent.
7. Right to restrict Processing: the right, under certain conditions, to request that the Processing of Personal Data be temporarily suspended.
8. Right to Data Portability: the right to request that Personal Data be transmitted in a re-usable format for use in another database.
9. Right not to be subject to automated decision-making: the right for the applicant to refuse fully authorized decision-making and/or to exercise the additional safeguards offered in this respect.
10. Right to define post-mortem directives: the right for the applicant to define directives concerning the fate of the Personal Data after his/her death.

Additional rights may be granted to Data Subjects by Local Regulations.

To this end, WEEDEV SAS has implemented a procedure for managing the rights of Individuals in accordance with the requirements of the applicable Legislation. This procedure establishes:

• The standards to be met to ensure transparent information to the Persons concerned;
• The legal requirements that must be respected;
• The means by which a request for each right may be made, depending on the category of Data Subject;
• The operational processes for handling these requests in accordance with the above requirements;
• The parties involved in these processes, their roles and responsibilities..

To exercise your rights, you may contact the Data Protection Officer (DPO): at the email address dpo@hipto.com or by post at the following address WEEDEV SAS – WEEDEV SAS, 114 rue Gallieni, 92100 Boulogne Billancourt.

When you send us a request to exercise a right, you are asked to specify as far as possible the scope of the request, the type of right being exercised, the Personal Data Processing concerned, and any other useful information, in order to facilitate the examination of your request. In addition, in case of reasonable doubt, you may be asked to prove your identity.

You also have the right to complain to the Commission Nationale de l’Informatique et des Libertés (CNIL), 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07, about the way in which WEEDEV SAS collects and processes your data.

9. Updating of this Policy

This Policy may be updated from time to time to reflect changes in the Personal Data Regulations.

Last update date 10/08/2022.

_______________

More questions? Contact us at dpo@hipto.com.

We will answer you as soon as possible.