Privacy policy for personal data.

PREAMBLE

This privacy policy applies to the site: www.opinionsystem.fr and to all customer sites. The purpose of this privacy policy is to expose users of the site to:

The way in which their personal data is collected and processed. All data that may identify a user must be considered as personal data. This concerns in particular: the first and last name, age, the postal address, the email address, the user's location or his IP address;
What are the rights of user regarding this data;
Who is responsible for the processing of personal data collected and processed;
To whom these data are transmitted;
Optionally, the site's policy regarding "cookie" files.

This privacy policy supplements the legal notices and the General Conditions of Use that users can consult on the website.

GENERAL PRINCIPLES ON THE COLLECTION AND PROCESSING OF DATA

In accordance with the provisions of Article 5 of European Regulation 2016/679, the collection and processing of site user data respects the following principles:

Lawfulness, loyalty and transparency: data can only be collected and processed with the consent of the user who owns the data. Whenever personal data is collected, it will be indicated to the user that their data is collected, and for what reasons their data is collected.
Limited purposes: the collection and processing of data is carried out to meet one or more objectives determined in these general conditions of use;
Minimization of data collection and processing: only the data necessary for the proper execution of the objectives pursued by the site are collected;
Conservation of data reduced in time: the data is kept for a limited period of time, of which the user is informed;
Integrity and confidentiality of data collected and processed: the data controller commits to guarantee the integrity and confidentiality of the data collected.

In order to be lawful, and in accordance with the requirements of Article 6 of European Regulation 2016/679, the collection and processing of personal data may only take place if they comply with at least the one of the conditions listed below:

The user has expressly consented to the processing;
The processing is necessary for the proper performance of a contract;
The processing and collection of personal data is necessary for the purposes of the legitimate and private interests pursued by the controller or by a third party.

PERSONAL DATA COLLECTED AND PROCESSED IN THE CONTEXT OF NAVIGATION ON THE SITE

The data controller will keep all the data collected in his site's computer systems and under reasonable security conditions for a maximum period of 3 years, for simple visits.

PERSONAL DATA COLLECTED AND PROCESSED

The personal data collected on the site www.opinionsystem.fr are as follows:

Connection data (eg IP addresses, logs, terminal identifiers, connection identifiers, time stamp information, etc.)
Information relating to use of the site: time spent, articles viewed;

More details on the cookies used here.

MODE OF COLLECTION OF PERSONAL DATA

This data is collected when the user performs any of the following operations on the website:

Registration on the website;
Website navigation;
Viewing a news article;
Subscribe to a newsletter;

PURPOSE OF THE PROCESSING OF PERSONAL DATA

The collection and processing of data meet the following purposes in particular: personalization of content on the web, newsletters and applications.

And more generally all activities related to the sale of services in connection with the information presented on the website.

DATA HOSTING

The site www.opinionsystem.fr is hosted by: AWS located in Ireland.

DATA CONTROLLER AND DATA PROTECTION OFFICER

THE RESPONSIBLE FOR DATA PROCESSING

The person responsible for processing personal data is the company Success Market represented by its legal representative Jean-David LÉPINEUX.

Success Market has appointed a DPO who can be contacted as follows:

By e-mail to rgpd@opinionsystem.fr or by mail to OPINION SYSTEM - 9 route du Temple, Blagon, 33138 LANTON, France.

OBLIGATIONS OF THE DATA CONTROLLER

The data controller commits to protect the personal data collected, not to transmit them to third parties without the user having been informed and to respect the purposes for which these data are intended. been collected.

The site has an SSL certificate to ensure that the information and the transfer of data passing through the site are secure.

An SSL certificate ("Secure Socket Layer" Certificate) is intended to secure the data exchanged between the user and the site.

In addition, the data controller commits to notify the user in the event of rectification or deletion of data, unless this entails disproportionate formalities, costs and procedures for him.

In the event that the integrity, confidentiality or security of the user's personal data is compromised, the controller commits to inform the user by any means.

The data controller is responsible for determining the purposes and means used for the processing of personal data.

USER RIGHTS

In accordance with the regulations concerning the processing of personal data, the user has the rights listed below.

In order for the data controller to grant his request, the user is required to provide him with: his first and last name as well as his e-mail address, and if relevant, his telephone number.

The data controller is required to respond to the user within a maximum of 30 (thirty) days.

PRESENTATION OF THE USER'S RIGHTS IN THE COLLECTION AND PROCESSING OF DATA

Right of access, rectification and right to erasure

The user can read, update, modify or request the deletion of data concerning him, by respecting the procedure set out below:

The user must send an email to the person in charge of processing personal data, specifying the subject of his request and using the contact email address provided above

If he has one, the user has the right to request the deletion of his personal space by following the following procedure:

The user must send an email to the person responsible for processing personal data, specifying his personal mobile number. The request for deletion of data will be processed within 30 working days.

Right to data portability

The user has the right to request the portability of his personal data, held by the site, to another site, by complying with the following procedure:

The user must make a request for the portability of his personal data to the data controller, by sending an email to the address provided above.

Right to limit and oppose data processing

The user has the right to request the limitation or to oppose the processing of his data by the site, without the site being able to refuse, except to demonstrate the existence of legitimate and compelling reasons, which may prevail over the interests and rights and freedoms of the user.

In order to request the limitation of the processing of their data or to object to the processing of their data, the user must follow the following procedure:

The user must make a request to limit the processing of his personal data to the data controller by sending an email to the address provided above.

Right not to be the subject of a decision based exclusively on an automated process

In accordance with the provisions of Regulation 2016/679, the user has the right not to be the subject of a decision based exclusively on an automated process if the decision produces legal effects concerning him, or the significantly affects similarly.

Right to determine the fate of data after death

The user is reminded that he can organize what should be the fate of his data collected and processed if he dies, in accordance with Law No. 2016-1321 of October 7, 2016.

Right to contact the competent supervisory authority

In the event that the data controller decides not to respond to the user's request, and the user wishes to challenge this decision, or, if he believes that it has been infringed to one of the rights listed above, he is entitled to appeal to the CNIL (Commission Nationale de l'Informatique et des Libertés, https://www.cnil.fr) or any competent judge.

PERSONAL DATA OF MINORS

In accordance with the provisions of Article 8 of European Regulation 2016/679 and the Data Protection Act, only minors aged 15 or over can consent to the processing of their personal data.

If the user is a minor under the age of 15, the consent of a legal representative will be required so that personal data can be collected and processed.

The site editor reserves the right to verify by any means that the user is over 15 years old, or that he has obtained the consent of a legal representative before browsing the site.

CONDITIONS FOR MODIFICATION OF THE PRIVACY POLICY

This privacy policy can be viewed at any time on the website.

The site editor reserves the right to modify it to ensure that it complies with the law in effect.

Therefore, the user is invited to regularly consult this privacy policy in order to be informed of the latest changes that will be made to it.

The user is informed that the last update of this privacy policy took place on 07/22/2020.