1. PURPOSE OF THE POLICY
This Personal Data Management Policy (“Policy“) details the types of personal data we collect and how we process it and protect it in relation to the services we offer. It includes information collected offline or through our sales department and online through our website www.agytech.fr (“Website“). It also reiterates your rights and how to exercise them with our services.
We maintain adequate technical and organisational measures to protect the personal data you provide to us against unauthorised destruction, loss, alteration, disclosure or access, whether accidentally or unlawfully. This external policy on privacy and personal data protection is published by AGYTECH, represented by Arnaud Goy as Data Controller.
2. YOUR RIGHTS AND HOW TO EXERCISE THEM?
Law No. 78-17 of 6 January 1978 (French data protection law), as well as European General Regulation (EU) 2016/679 of the European Parliament and Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) supplementing Law No. 78-17, grants you specific rights such as the right to obtain consent, the right of access to and opposition to personal data about you and the right to rectify or delete incomplete or inaccurate information about you.
You may also decide to issue guidelines on the retention, erasure and communication of your personal data after your death.
If you believe that the way we have processed your personal data violates data protection legislation, you can submit a complaint to the competent supervisory authorities (CNIL: https://www.cnil.fr/fr/plaintes), in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement.
You may exercise any of these rights:
- By sending us an email at: contact.agytech@gmail.com
- By contacting us via the various online contact forms on the Website
- By contacting us by mail: AGYTECH – 285 chemin des Millieres – 38380 Saint Laurent du Pont – France
- By following the instructions on the CNIL website at this address: https:// www.cnil.fr/agir
3. PERSONAL DATA
Personal data refers to information that is likely to identify you directly or indirectly. It generally includes information such as your name, mailing and email address and phone number, as well as other information such as your IP address, products viewed, login and browsing data.
We collect your personal data directly in various ways, for example when you provide us with your information when you contact us or when you browse the Website.
When you provide us with your personal data, we process it in accordance with this Policy. If you do not wish us to process your personal data in this way, please do not provide us with any personal information.
We process your personal data in order to provide you with our services, as detailed below. In some cases, we process your personal data only if you have expressly given us your consent. In other cases, we may rely on other legal grounds to process your personal data, such as the performance of the contract that binds you to us or a legitimate interest.
When we process your personal data on the basis of your consent, we will explicitly request your consent, and only for a particular purpose. Please see the following section for details on the different types of personal data we may collect, the purposes involved and the legal basis for this processing.
4. PERSONAL DATA PROCESSING
4.1 WHICH DATA ARE COLLECTED ?
We collect and process your last name, first name, address, email address, password, phone number, IP address, login and browsing data, preferences and interests, products viewed and any complaints.
The mandatory or optional nature of the data is indicated to you during collection by an asterisk. Some data is collected automatically due to your actions on the Website.
4.2 WHEN IS DATA COLLECTED?
We collect the information you provide to us, in particular when:
- You browse the Website
- You contact us through the contact forms
- You contact us by email, phone or mail
- You download documentation from the Website
- You view our advertisements
4.3 WHY IS DATA COLLECTED?
We use your personal data mainly for the following purposes:
- Business relationship management
We need information about you to process your requests and manage the business relationship, including prospecting activities. - The personalisation of the services and messages we send you
Your data enables us to improve and personalise the services we offer you and the communications we send you. - Examination of applications for recruitment
- Website security
We collect certain browsing data to enable us to secure our services and to detect, avoid or trace any attempt at malicious activity or computer intrusion or any violation of the terms of use of our Services. - Website statistics and customer knowledge
We use tracking technologies, including cookies, for statistical purposes to analyse the performance of the Website and improve the services we offer. We invite you to visit the Cookies section for detailed information on the use of cookies and other comparable technologies and to see what choices you have.
5. COMMUNICATIONS AND INFORMATION
Your contact information as well as the personal information we have may be used to contact you by:
- Newsletter:
If you are a customer and have not objected, you may receive information and offers from AGYTECH by electronic communication (email, etc.). These newsletters keep you informed of news about AGYTECH and products similar to those you have already purchased. If you are not a customer and have consented, you will be able to receive the same type of communication. - Telephone :
If you have not objected, you may be contacted by our sales department during the project qualification or commercial follow-up phases and to propose offers and services relating to those you have purchased.
6. LEGAL BASES AND RETENTION PERIODS
The processing of your personal data is justified based upon various laws (legal bases), depending on the use we make of the personal data. Below you will find the legal bases and retention periods we apply to our main processing.
6.1 LEGAL BASES FOR PROCESSING
Applicable legal bases include:
- Legitimate interest: AGYTECH has a business interest in processing your data that is justified, balanced and does not infringe your privacy. With exceptions, you may object to processing based on legitimate interest at any time by notifying AGYTECH.
- Consent: You agree to the processing of your personal data through express consent (checkbox, click, etc.). You may withdraw this consent at any time.
- The contract: the processing of personal data is necessary for the performance of the contract to which you have consented.
- Legal obligation: The processing of your personal data is made mandatory by law.
6.2 RETENTION PERIODS
Most of the data (for example: your customer account information) is retained as long as you are an “active” customer and for a period of 5 years from your last activity.
Your data is then archived with restricted access for an additional period of time for limited reasons authorised by law (payment, warranty, disputes, etc.).
After this period, it is deleted.
| Purpose of processing | Legal basis | Retention period in active database | Archiving | Relevants comments |
| Customer management | Contract | 5 years from last activity | 5 to 10 years | |
| Electronic prospecting | Legitimate interest | 3 years from last activity | You may object to this at any time by contacting us | |
| Telephone prospecting | Legitimate interest | 3 years from last activity | You may object to this at any time by contacting us | |
| Management of the exercise of personal data protection rights | Legal obligation | 1 year |
7. RECIPIENTS
The data we collect may be transmitted to the technical service providers (subcontractors) that AGYTECH uses to provide its services for the purposes mentioned above.
We require these data processors to comply with strict requirements in accordance with current data protection legislation, under which they may process your personal data only on behalf of AGYTECH and must comply with demanding IT security standards.
Please note that we never share your personal data with social media platforms. If changes occur in the future and we need to share your personal data with a social media platform, we will ask for your consent.
Please note that we may share your personal data with law enforcement or other agencies when we have a legal obligation to do so or in the case of a letter rogatory, summons or court order requiring us to disclose your personal data.
You are informed that data concerning you may be transmitted for the purposes mentioned above to companies located in countries outside the European Union that have a lower level of data protection than in the European Union. Prior to the transfer outside the European Union, AGYTECH will take all necessary measures and guarantees to secure such transfers.
8. ADVERTISING AND UPDATING THE POLICY
This Policy comes into effect on 25 May 2022
This procedure may be updated at any time.