Privacy Policy

Privacy Policy and Personal Data Protection

This page explains the principles and our commitments regarding the protection of your Personal Data and aims to inform you about:

The Personal Data that Conitiv. collects and the reasons for this collection,
How this Personal Data will be used,
Your rights as a data subject in relation to our data processing activities.

This Policy applies to all Conitiv. services regardless of their nature (website, applications, services, etc.).

The Data Controller

The data controller is Conitiv.

Contact details are as follows:

Postal address: 1165, avenue Jean-René Guillibert Gauthier de la Lauzière, CS 20583 13290 Aix-les-Milles Cedex 02 France
Email: contact@conitiv.ai

How Conitiv. implements Personal Data protection

Conitiv. is committed to taking Personal Data protection and your privacy into account from the very design stage of the services offered to you (Privacy by design). To ensure security and guarantee the respect and proper exercise of your rights, measures to protect your Personal Data are implemented (Privacy by default).

What Personal Data is used by Conitiv.?

Conitiv. is committed to collecting only data that is strictly necessary for the provision of the services offered, which primarily include: last names, first names, postal addresses and email addresses. In the event that optional data is requested from you, Conitiv. will clearly inform you about which Personal Data is necessary for the provision of the service. Personal Data collected directly from you is used only for the purposes that have been brought to your attention. When data has not been collected from you directly, Conitiv. will inform you as soon as possible about the processing for which it was collected and its purposes. Personal Data is used to offer you other services only if you have agreed to benefit from such services or to receive additional communications.

What is the legal basis for our processing activities

Conitiv. relies on the following legitimate bases in order to process Personal Data:

Performance of the contract

The legal basis for the processing of the user's Personal Data that is collected is the performance of the contract. In this regard, the user is required to provide the data necessary for its performance. If the user does not provide this data, including to the online payment provider where applicable, it will not be possible to deliver the service.

Legal obligations

Obligations through which Conitiv. complies with a legal or regulatory requirement fall within this category, such as the management and issuance of invoices in the context of Conitiv.'s relationship with its clients.

Consent

For the following purposes, the legal basis for the processing of the user's Personal Data will be the user's consent, where such consent has been given:

Management of registration on the website and applications.
Management of sending information about the website's activities and personalized information tailored to the user's profile.
Responding to the exercise of rights, as well as to the user's questions and complaints.

The withdrawal of the user's consent for these processing activities will not affect the performance of contracts concluded by the data subject with Conitiv.

Legitimate interest

For the following purposes, the legal basis for the processing of the user's Personal Data will be the legitimate interest of Conitiv.:

The creation of profiles through website browsing by a registered user, as well as by all users who have communicated their data to us for any other purpose.
The creation of profiles for sending information about exclusive promotions, latest news and personalized information tailored to the user's profile.
Sending satisfaction surveys about products purchased or services used by Conitiv. clients in order to request their feedback and improve them.

Our legitimate interest consists in being able to ensure that our website remains secure, and in being able to help Conitiv. understand the needs, expectations and satisfaction levels of users, thereby improving our services, products and brands. All these actions are carried out with the aim of improving customer satisfaction and ensuring a unique browsing and purchasing experience.

Personal Data of minors

Certain services may be used by minors under the age of fifteen. In such cases, minors must obtain the consent of their parents or legal guardians.

To whom may your Personal Data be disclosed?

Your data may be transmitted to:

Internal departments of Conitiv.: the departments responsible for the execution of subscribed services, including Customer Service, Sales Administration, etc.
External service providers of Conitiv.: technical service providers, including subcontractors;
Commercial partners of Conitiv., after having previously informed you and allowed you to express your preferences via a checkbox.

Can your Personal Data be transferred outside the European Union?

Conitiv. carries out all processing of your Personal Data within the territory of the European Union (EU).

However, for certain specific services, Conitiv. may use subcontractors located outside the EU. Certain Personal Data may then be disclosed to them strictly for the needs of their assignments. In such cases, in accordance with applicable regulations, Conitiv. requires its subcontractors to provide the necessary guarantees to frame and secure these transfers, particularly through the signing of the European Commission's standard contractual clauses.

How long does Conitiv. retain your Personal Data?

The retention period of your Personal Data depends on the subscribed service. Conitiv. is committed to not retaining your Personal Data beyond the period necessary for the provision of the service, and therefore for your use of the service, plus the retention period required by the applicable rules regarding statutory limitation periods.

Is your Personal Data protected?

Conitiv. is committed to taking all measures to ensure the security and confidentiality of Personal Data, and in particular to prevent it from being damaged, deleted or accessed by unauthorized third parties.

Furthermore, in the event of a security incident affecting your Personal Data (destruction, loss, alteration or disclosure), Conitiv. is committed to complying with the obligation to notify Personal Data breaches, particularly to the CNIL (French Data Protection Authority).

What are your rights regarding your Personal Data?

You may at any time exercise the rights provided by the applicable data protection regulations with Conitiv., subject to meeting the applicable conditions:

Right of access: you may obtain disclosure of your Personal Data being processed by Conitiv.;
Right to rectification: you may update your Personal Data or have your Personal Data processed by Conitiv. corrected;
Right to object, in particular to receiving commercial communications: you may express your wish to no longer receive commercial communications from Conitiv. or request that your Personal Data no longer be processed.
Right to erasure: you may request the deletion of your Personal Data;
Right to restriction: you may request the suspension of the processing of your Personal Data;
Right to data portability: you may request Conitiv. to retrieve your Personal Data so that you may have access to it.

When subscribing to a service or when your Personal Data is collected, you are informed of the address (postal and/or email) to which you should send your request to exercise your rights. Any request must be accompanied by proof of identity. Conitiv. is committed to responding to your requests to exercise your rights as soon as possible and in any event within the legally required timeframes.

Who to contact?

You have the right to lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL), 3 Place de Fontenoy – TSA 80715 – 75334 Paris Cedex 07, regarding any matter relating to the way Conitiv processes your Personal Data.

Amendments to this policy

Updates to this Privacy Policy will be published on the Conitiv website.

GLOSSARY

Each capitalized term has the meaning given to it below.

"Privacy Policy and Personal Data Protection Policy" and "Policy" : refers to this Policy describing the measures taken for the processing, use and management of your Personal Data and your rights as a data subject.
"Personal Data" : Refers to any information relating to you that allows you to be identified directly or indirectly.
"Processing" : Refers to any operation or set of operations applied to your Personal Data.
"Data Controller" : Refers to Conitiv. which carries out the processing of your Personal Data.
"Personal Data Breach" : Refers to a breach of security leading, whether accidentally or unlawfully, to the destruction, loss, alteration, unauthorized disclosure of, or access to your Personal Data.
"Recipient" : Refers to the department or company that receives disclosure of and may access your Personal Data.