Privacy Policy

Introduction

This Privacy Notice is essential for the website visitors (‘you’) to understand how we may process your personal data obtained using this website. We advise you to carefully read every section of this Notice to inform yourself about how we use or otherwise process your personal data.

Personal data is any information about you that can identify, or possibly identify you as a natural person. This Privacy Notice does not apply to the processing that may occur on any other website but this one. The owner of this website (‘we’, ‘us’, ‘our’) is:

Privanova SAS

34, avenue des Champs-Elysees
75008 Paris, France

Data Subject and Data Controller

As a visitor to our website, it is important for you to understand better your role under the relevant Data Protection Laws, namely the General Data Protection Regulation (‘GDPR’). Since personal data processing that might occur on this website is about your personal data, you are considered to be the Data Subject. Being the Data Subject, you are entitled to exercise certain human rights guaranteed by the relevant EU Data Protection Laws and explained in this Privacy Notice.

According to the GDPR, Data Controller is the entity that determines the purposes, and means of the processing of personal data. Taking into account that we have control over your personal data (we define the purpose and means of data processing), we are to be considered as Data Controllers. Being data controller provides us the opportunity to process your personal data, but also obliges us to protect them in the way regulated by the relevant data protection legislation.

Your data and reasons for processing

When you visit our website or otherwise interact with us, some of your personal data is (or may be) processed. You may disclose your data, or it may be done through the use of technology. The following data are processed (or could be processed):

Identification Data

We process your email address to send you newsletters, thus informing you about our activities and projects, as well as about the projects and activities of our partners. Please note that you can unsubscribe from receiving our newsletters at any time. You can do this by using the unsubscribe link in each newsletter you receive from us.

If you collaborate with us (for example, you are our client, project partner, or subcontractor), we invoke our legitimate interest in sending you the newsletters. If you are not our collaborator but wish to receive our newsletters, you can subscribe to it by providing your email address. In this case, the processing of your data is necessary for performing our obligation towards you occurring when you subscribe to the newsletter. 

If you wish to contact us for any reason, we will process your email address and any other personal data you provide to us as part of the communication process.

Electronic identification data

Your electronic identification data (such as the browser type and version on your device, the operating system you use, unique device identifiers, information about your network operator, information about the time and date when you access our website, and the like) is processed to ensure your unobstructed access to and visit of our website. In addition, this data may be processed to develop, secure, and maintain the proper operation of our website and to prevent possible threats. Finally, sometimes we need this type of data to solve technical problems if they occur. For all these purposes, we use our legitimate interest to process your electronic identification data.

Our use of cookies

When you visit our website, we may supply your browser with technologies such as cookies. We must stress that we use cookies to enable the regular functioning of the website as well as to provide the best possible on-site experience to all our website visitors. Therefore, we do not use any type of cookies except strictly necessary cookies.

How do we protect your data?

Whenever we process personal data, we take special care to ensure that the processing of personal data is lawful. Therefore, when processing your data, we always rely on the relevant legal grounds to ensure the lawful processing of personal data.

We regularly put efforts into storing your data securely. To achieve that we apply different technical and organizational measures to ensure the protection of your personal data against accidental or unlawful loss, alteration, theft, unauthorized disclosure or access, unauthorized use, potential data breach, and all other unlawful forms of data processing. Based on business needs and security requirements we apply restriction of access control to your personal data.

It is likely that we will not share your personal data with third-party entities. However, if it would be the case for any reason, data sharing will be conducted in accordance with all relevant standards and rules (including those laid down by the GDPR) to make sure that your personal data is safe, secured, and processed lawfully.

Your personal data may be shared with public authorities and law enforcement agencies where it is necessary to do so and where we are legally required or permitted to do so.

Your rights

We fully respect all of your rights granted by the GDPR and European Data Protection Law. More details about your rights are explained below.

Right to access. You have the right to ask us for copies of the personal information that we hold.

Right to rectification. You have the right to request correction or deletion of your personal data that you find inaccurate.

Right to be forgotten. Also known as the Right to erasure, entitles you to request from us to erase your personal data that we hold. It can happen in various cases: when the data is no longer needed for the purposes it was collected; when you have withdrawn consent and there is no other lawful basis on which we can continue to process it; when you objected to the processing and there are no overriding legitimate grounds to continue; when the data has been unlawfully processed or when the data has to be erased for compliance with a legal obligation.

Right to restrict processing. You have the right, under limited circumstances, to request that we limit our use and processing of your personal data.

Right to object to processing. You have the right, under limited circumstances, to object to our processing of your personal data.

Right to data portability. You have the right to request the transmission of your personal data that we process to another entity, without hindrance from us, if such transmission is technically feasible.

Right to withdraw consent. You have the right to withdraw your consent at any time where we rely on it to process your personal data, without giving any reason to us.

Right to lodge a complaint. You have the right to lodge a complaint within your local or French data protection authority if you feel that your rights are violated.

If you feel that your personal data rights have been breached or in case you have any questions or doubts regarding the processing of your personal data on this website, you can contact us. As we are established in France you may choose to contact the French Data Protection Agency – CNIL.

End-notes

This Privacy Notice is valid from 28th October 2023, but it can be updated or modified from time to time. If an essential change or update occurs, and if it affects your rights and obligations with regard to the processing of your personal data, you will be notified in advance, so that you can review the changes before they become effective.