Privacy Policy
Last revised on July, 2022
In this privacy policy (the “Policy“), we inform you about the collection, use and processing of your personal data.
Promyze SAS (“Promyze”, “we”, or “us”), a French company registered in Bordeaux, RCS 818 859 977 is the controller of your personal data.
This Policy applies to all users of:
- The Promyze SaaS software (the “Platform”); and
- The Promyze website “promyze.com” (the “Website” or the “Site“).
If you have any questions or requests regarding this Policy or generally about how we process your data, please contact us at rgpd@promyze.com.
Your privacy is extremely important to us, and it is our policy to respect it regarding any data we may collect from you.
This Policy describes the various ways that we collect and use your personal data. Please read this Policy carefully, as your use of our Platform and Website constitutes your acceptance of and agreement to the terms and conditions of the Policy.
You are free to refuse our request for your personal data, with the understanding that we may be unable to provide you with some of your desired services.
We only ask for personal data when we truly need it to provide you a service. We collect it by fair and lawful means, with your knowledge. We also let you know why we are collecting it and how it will be used.
SUMMARY
- What personal data do we collect?
- How do we use your personal data and on what basis?
- With whom is your data shared?
- How long is your data stored?
- What are your rights?
- Changes to this Policy
1. What personal data do we collect?
- Account creation
You may create an account on the Platform in order to use our service.
In this context, Promyze collects the data that you have voluntarily communicated for the creation of your account, namely: full name, email address, password, identifier, and payment details.
Please note, that Promyze does not process or store your credit card data, but our third-party payment processor does (https://stripe.com) (see 3).
- Log Files
Promyze follows a standard procedure of using log files. These files log visitors when they visit our website. All hosting companies do this and are a part of hosting services’ analytics.
The data collected by log files includes internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks. These are not linked to any other information.
- Public Forums and Customer Testimonials
Promyze may provide bulletin boards, blogs, or chat rooms on the Platform. Any personal data you choose to submit in such a forum may be read, collected, or used by others who visit these forums, and may be used to send you unsolicited messages. Promyze is not responsible for the personal data you choose to submit in these forums.
Promyze may post a list of customers testimonials on the Platform that contain information such as users’ names and titles.
- Messages sent to Promyze via the contact form on the Website
You may contact Promyze by using the contact form provided on the Website for various reasons (request for information, informing of a project, etc.).
The mandatory data collected are: name and email address, and the content of the message that you wish to send to Promyze.
The optional data collected are: company name and telephone number.
The mandatory data collected is necessary for Promyze to be able to respond to your request.
The optional data collected allow Promyze to have the exact contact details of the company for which you work, possibly with a view to contacting you by telephone.
- Messages sent to Promyze by any other means
You may contact Promyze by email, by post, or via one of our feedback and questions mechanisms.
In this context, the data is processed in order to respond to your request.
If you send us a request, we reserve the right to publish it to help us clarify or respond to your request or to help us support other users. Promyze takes all measures reasonably necessary to protect against unauthorized access, use, alteration, or destruction of personally identifying data.
Additionally, some interactions, such as posting a question or contacting us, may ask for optional personal data. For instance, when posting a comment, may provide a website that will be displayed along with a username when the comment is displayed. Supplying such personal data is completely optional and is only displayed for your benefit and your convenience
Promyze may, depending on the nature of your request, ask you to communicate any personal data necessary for the processing of your request, indicating, where applicable, the purpose of this collection.
2. How do we use your personal data and on what basis?
Promyze processes your personal data in compliance with the amended Law No. 78-17 of 6 January 1978 relating to information technology, files and freedoms and the European Regulation No. 2016/679 of 27 April 2016 on the protection of individuals regarding the processing of personal data and on the free movement of such data (together the “Data Protection Laws“).
Data will only be collected and processed by Promyze if there is an appropriate and relevant legal basis for doing so.
Promyze collects your personal data based on the performance of pre-contractual measures taken at your request (Article 6 (b) of the GDPR) to respond, communicate with you and process your requests. Where applicable, your data will be processed based on the performance of a contract between you and Icade for the purpose of providing our services.
Promyze collects your personal data based on its legitimate interest (article 6 (f) of the GDPR):
- For the purpose of promoting its activities, in particular by making its contact form available;
- To contact you subsequently to offer you services related to your request and your professional activity.
Promyze may also process your personal data based on a legal or regulatory obligation.
3. With whom is your data shared?
The data collected is that which is strictly necessary and indispensable for the purposes set out in this Policy and is intended for the relevant departments of Promyze as well as its possible partners and subcontractors.
We may share your personal data with the following third parties, subcontractors, partners, or authorized agents:
- The authorized personnel of Promyze for the purpose of processing your requests and providing our services;
- Partners with whom we may collaborate in the processing of your requests and our service offering;
- Our IT service providers for the purpose of maintaining and hosting your data;
- Third parties, in order to deliver our service.
If our business is sold or merged with another company, your data may be disclosed to our advisers, any potential purchaser, and its advisers, and transferred to the new transferees or beneficiaries of the business.
We may also share information about you:
- In response to a request for information from a competent authority, if we believe that disclosure of the information is lawful or required by law, applicable regulation or legal process;
- With law enforcement officials, judicial or administrative authorities or other authorized third parties.
We may also transfer your personal data to some of these recipients outside the European Economic Area (“EEA“). Where such transfers occur, and the country or third party does not benefit from an adequacy decision from the European Commission, appropriate safeguards are put in place to protect your personal data.
You can obtain more information about these safeguards by contacting our data protection referent, whose contact details are set out in this Policy.
4. How long is your data stored?
Your data will be retained for a period not exceeding that necessary to fulfill the purposes set out in this Policy.
Personal data collected to process your request will only be kept for a period of one (1) year following the last contact we had with you. It will then be deleted or stored anonymously.
If a contractual relationship is established between you and Promyze for the provision of our services, your data will be collected for the duration of our contractual relationship with you, plus a period of five (5) years from the end of the contractual relationship.
We may retain your data beyond the above-mentioned periods (i) to ensure compliance with legal, accounting and tax retention obligations (ii) for the preservation of evidence during applicable statutes of limitation, (iii) for the exercise of Promyze ‘s rights in the event of litigation or court action for the duration of the proceedings or investigation.
5. What are your rights?
In accordance with the Data Protection Laws, you have the following rights:
- The right of access. You have the right to obtain a copy of your personal data.
- The right of rectification. You have the right to have your personal data corrected if it is inaccurate or incomplete.
- The right to erasure (the “right to be forgotten“). You have the right to have your personal data erased. However, the right to erasure is not absolute and is subject to specific conditions. We may retain your personal data to the extent permitted by applicable laws and regulations, in particular where processing remains necessary to comply with a legal obligation to which Promyze is subject or to establish, exercise or defend a legal claim.
- The right to limit processing. You have the right to obtain the limitation of processing in certain circumstances (for example, when Promyze no longer needs your personal data for certain processing operations, but it is still necessary for the establishment, exercise, or defence of a legal claim).
- The right to portability of personal data. You have the right, in certain circumstances, to receive the personal data concerning you that you have provided to Promyze in a structured, commonly used, and machine-readable format and to transmit it to another controller.
- Right to object to the processing. You have the right to object on grounds relating to your particular situation to certain types of processing (for example, where the processing is based on Promyze’s legitimate interests) and without any particular grounds where the processing is carried out for commercial prospecting purposes.
- The right to withdraw your consent. If you have given your consent to the processing of your personal data by Promyze, you have the right to withdraw it at any time.
- The right to define directives as to the fate of your data after your death. You may define directives relating to the conservation, deletion, and communication of your personal data after your death.
You may exercise all your rights by contacting our data protection referent by email at rgpd@promyze.com.
You also have the right to lodge a complaint with the CNIL:
Commission Nationale de l’Informatique et des Libertés (« CNIL »)
3 Place de Fontenoy – TSA 80715 – 75334 Paris CEDEX 07
6. Privacy Policy Changes
Although most changes are likely to be minor, we may change this Privacy Policy from time to time, and in our sole discretion. We encourage you to frequently check this page for any changes to its Privacy Policy. Your continued use of the Website and/or the Platform after any change in this Privacy Policy will constitute your acceptance of such change.