Personal data protection policy

1. DATA PROTECTION POLICY

This Personal Data Protection Policy describes the methods that we use to collect, manage and use your Personal Data. 

This Policy may be amended, supplemented, deleted or updated; however, we will always treat your Personal Information in accordance with the Policy in force at the time when they are collected. 

Our goal is to keep you regularly informed on this page about any changes that may be made to this Policy, so that you are always fully informed about the categories of information that we collect, about how we use them and the circumstances in which they may be released. 

Our Data Protection Policy is available on the "Terms and Conditions" page of our website, which can be viewed at any time, but is also available on every page where Personal Data are requested. Further explanations regarding the purposes for which the data will be used can be provided at each "data collection point" if necessary.

2. DATA PRIVACY GUARANTEES

The term "Personal data," as used in this Policy, refers to information such as your names, date of birth, email address or telephone number, or any data which allows natural persons to be identified directly or indirectly, in accordance with GDPR article 4.1.

As a general rule, we will process your Personal Data according to the procedure outlined in this Policy. We reserve the right to carry out any additional processing which may be required by law, or as part of a criminal investigation in particular.

The following sections explain how your Personal Data are collected.

3. USE OF PERSONAL DATA

Most of our services do not require any form of registration or listing, which means that you can visit our site without having to identify yourself. However, some services may require the disclosure of certain Personal Data. In these cases, if you choose not to release the information that we are asking from you, it is possible that you may not be able to access certain parts of the site, and that we may not be able to respond to your request.

In accordance with current regulations, your Personal Data allow us to provide you with products or services, to invoice you for the requested products and services, to provide you with products and services which may be of interest to you or to stay in touch with you for other obvious purposes given the circumstances and about which we inform you when we collect your Personal Data.

Our website also has shareware which allows you to pass on any information which is on our website within social networks such as Facebook or Twitter. When you pass on this information via third-party sites you are subject to their own data protection policies. We would encourage you to consult their terms of use and their Personal data protection policies so that you fully understand how your Personal Data are used.

4. NON-DISCLOSURE OF PERSONAL DATA

Your Personal Data will never be sold, shared with or released to third parties, other than in the cases stipulated by this Policy. However, we may be required to share your Personal Data with other companies around the world, who agree to process them in accordance with this Policy. 

These transfers are carried out under the terms of agreements as part of which these companies have undertaken to ensure the level of protection for Personal Data which is provided by European legislation or in accordance with other mechanisms recognised by current legislation. 

Your Personal Data may also be shared with third parties acting for us or on our behalf as part of a specific processing in accordance with the purposes for which they were originally collected, or may be legally processed, in accordance with current local regulations, as part of activities such as the provision of services, assessment of the usefulness of this site, product marketing and sales, data management or technical support. 

These third parties have undertaken contractually to only use your Personal Data for agreed purposes, and not to sell or disclose them to other third parties unless required to do so by law, or if we explicitly authorise them to do so, or if a provision is provided for in this regard in this Policy.

The Personal Data that we collect may also be shared with a third party if the activity of all or part of this site and the associated customer data are sold, assigned or transferred, in which case we will require the purchaser or the assignee to process the said Personal Data in accordance with this Policy. 

In addition, Personal Data may be disclosed to a third party if we are required to disclose it as part of a law or a current regulatory provision, court order or government regulation, or if this disclosure is required as part of an investigation, or criminal proceedings, in France or abroad.

5. RIGHT OF ACCESS, RECTIFICATION AND OPPOSITION

Whenever we process Personal Data, we take all reasonable steps to ensure the accuracy and relevance of your data in accordance with the purposes for which we collect it. 

You have a right of access and a right of objection to the processing of your Personal Data for legitimate reasons, which is to say if this processing is not reasonably necessary with regard to the pursuit of our legitimate interest as described in this Policy, or with regard to compliance with the law. 

Where sales canvassing is involved, including by email, we will provide you with the means to allow you to either object to or agree to receiving information, in accordance with the law. If you would like to know how we use your Personal Data, or to oppose the processing of your personal data, you can contact us using the form available at the following address: http://www.nalys-group.com/fr/contact. 

In this case, please provide the name of the website on which you provided your information, as well as the information that you would like us to correct, update or delete, by clearly identifying yourself. Requests to delete Personal Data will be subject to the obligations which are required of us by law, in particular with regard to the retention or archiving of documents.

If you would like to know how we use your Personal Data, or to oppose the processing of such personal data, please write to the following postal address: For the attention of the DPO - Société Nalys - Avenue de Tervuerenlaan 270 1150 Woluwe-Saint-Pierre, Belgium.

6. SECURITY AND CONFIDENTIALITY

In order to ensure the security and confidentiality of the Personal Data that we collect online, we use networks which are protected by standard systems such as firewalls and passwords in accordance the rules and best practices which are governed by ISO 27001:2013  

When processing your Personal Data, we take all reasonable steps to protect them from any loss, misuse, unauthorised access, disclosure, tampering or destruction.

7. TRANSFERRING DATA ABROAD

The Nalys Group is a European group which has databases in various countries, which are partly managed by the Nalys group, as well as others which are managed by third parties on behalf of the Nalys Group. We may be required to transfer your data to one of the group's databases outside your country of residence, and possibly to countries outside the European Union which do not provide a level of personal data protection which is identical to that of your country. In this case, the protection of your Personal Data, in accordance with European law, is guaranteed by agreements which have been signed with entities located outside the European Union or by other mechanisms recognised by current legislation. 

Some data may be sent to authorised recipients or providers located outside the European Union in accordance with the first paragraph of this article.

8. "COOKIES" AND INTERNET TAGS

8.1. "Cookies"

A "cookie" is a small information file sent to your browser and which is stored within your device (e.g. computer, smartphone). This file includes information such as the user's domain name, your Internet service provider, your operating system, and the date and time of access. Under no circumstances are cookies likely to damage your device.

We are liable to collect and process information about your visit to this website, such as pages visited, any searches which are made, the website visited just before this website, or for that matter your choice of service or customization. This information allows us to improve the content of the site, your browsing experience and/or to compile statistics on individuals who use our site for internal market research purposes or to provide you with a service which you have requested.

For these "cookies," which make it easier to browse and/or for the provision of the services offered by this website, you can adjust your browser settings via the "Preferences/security" menu to allow you to decide whether or not you wish to accept them. Please be aware, however, that in this case, it is possible that not all of your browsing software features may be available.  We may also use the services of external service providers to help us collect and process the information described in this section.


8.2. Internet tags

We occasionally use Internet tags (also called action tags, one-pixel GIFs, transparent GIFs, invisible GIFs and one-to-one GIFs) and deploy them via a partner advertising agency or a Web analytics specialist which is liable to be situated (and therefore store the relevant information, including your IP address) in a foreign country. These tags are placed both in online advertisements which allow internet users to access this site, and on the site’s various pages. 

This technology allows us to evaluate visitors' responses to our sites and how effective our work is (e.g., the number of times that a page is opened and the information viewed), as well as your use of this Website. The external service provider (advertising agency or web analyst) may be able to collect information about visitors to our site and other Websites which use these tags, put together reports on the activity of the site for us to study, and provide other services relating to the use of it and of the Internet. It may be required to share this information with other third parties if required to do so by law, or if it uses other service providers for processing the information on its behalf.

9. PERSONAL INFORMATION AND CHILDREN

Most of the services available on this site are aimed at adults. Anyone requesting information about a product which is intended for children must be of adult age. We will not voluntarily collect, use or disclose Personal Data provided by a minor without first obtaining the consent from the minor’s legal guardian (parent or guardian) via a direct offline contact. 

We will inform this guardian (i) of the specific categories of Personal Data collected from the minor, and (ii) of the option of opposing the collection, use or retention of such data. We scrupulously comply with the laws regarding the protection of children.

10. HOW TO CONTACT US

If you have any questions or complaints about our compliance with this Data Privacy Policy, or if you would like to provide us with any recommendations or comments on how to improve its quality, please contact us using the form which can be found at the following address: http://www.nalys-group.com/fr/contact

Should you have any special needs regarding your Personal Data and the exercise of your rights (GDPR Chapter III), you have the option of contacting the Nalys Group DPO at the following addresses:

Email: dpo@nalys-group.com

Postal address:
Personal data protection department
Nalys Group
Avenue de Tervuerenlaan 270
1150 Woluwe-Saint-Pierre,
Belgium

This data protection policy applies as of 01/07/2019