Privacy Policy

I Introduction

This Privacy Policy describes www.advanceparis.com's privacy practices. This privacy policy applies only to personal data collected by this website and sets out the terms and conditions for the processing of personal data. It informs you of the following:

  • What personally identifiable information is collected from you through the website, how it is used and with whom it may be shared.
  • The choices available to you regarding the use of your data.
  • The security procedures in place to protect the misuse of your information.
  • how you can correct any inaccuracies in the information.

Advance Paris is committed to complying with the applicable regulatory and legal requirements in which we operate and when we collect, use, store and process personal data. As part of an ongoing business, we reserve the right to revise and modify the provisions of this policy at any time in order to protect personal data with assurance of the rights of the data subject. Customers are encouraged to review this policy from time to time.

Within the framework of our newsletter and taking into account the agreement on the processing of personal data ( DPA ), we entrust the custody, protection and management of data in connection with the newsletter to Sendinblue. 

II. What Information is Collected?

We are required to collect your personal or non-personal data, directly or indirectly. Personal data refers to any information relating to an identified or identifiable natural person, directly or indirectly, thanks to an identifier or to one or more elements specific to his identity. This may be, for example, a surname, a first name, an email address, a location, an identity card number, an IP address, a photo, your payment information, your audio sources, the network you use, etc.

We undertake not to include in the mailing lists uploaded to the platform so-called “sensitive” personal data within the meaning of Article 9 of the GDPR.

Data collection subjects are any individual whose email address is included in the distribution list, whose information is stored or collected through our services or persons to whom we send emails or with whom we engage or communicate via services and more specifically customers and prospects.

Network Studio does not collect or process so-called "sensitive" data such as ethnic origin, political opinions or beliefs, trade union membership, etc.

Network Studio does not retain documents that may contain personal data beyond their legal minimum retention period:

  • Business correspondence
  • Contract with a supplier or customer
  • Quote, purchase order, invoice
  • Hosted customer data 

III. Purpose pursued by the processing

We will use your information to respond to you, depending on why you contacted us. Unless you ask us not to, we may contact you by email in the future to tell you about our special offers, new products or services, or changes to this Privacy Policy. Here is a non-exhaustive list of the main reasons for which we collect and store personal data:

  • registration to use the site;
  • purchase products, browse, use, sign up for Advance Paris newsletters through the Website; • discover the points of sale;
  • visit the various Advance Paris social media platforms and create user-generated content on these platforms (such as likes, comments, discussions, private messages, user requests, etc.);
  • submission of surveys and/or event questionnaires (e.g. via web forms on the Website) and participation in sales promotions;
  • registration for product warranties and maintenance services;
  • requests for customer service or assistance on the site;
  • Storage of contact lists;
  • Sending messages by email or SMS, automatically or not (including order tracking, order confirmation, newsletters);
  • Storage and analysis of email deliverability data;
  • Display retargeting;
  • Collection of consents;
  • Analysis of the behavior of email recipients (monitoring of opening rates, click rates and bounce rates at the individual level); 

IV. How is the Information Collected?

We only have access to information that you voluntarily provide to us by email or other direct contact. We will not sell or rent this information to anyone. 

V.Cookies

A cookie is a small file stored by a server in the terminal (computer, telephone, etc.) of a user and associated with a web domain (i.e. in the majority of cases with all the pages of same website). This file is automatically resent during subsequent contacts with the same domain. We use cookies to facilitate anonymous analysis of site traffic, which includes tracking the time and date of visits, pages viewed and referring URLs. There are easy ways to refuse all cookies or to accept them whenever they are offered. Consult your browser's help files to learn how to change cookie settings or delete cookie files. 

VI. Social networks

As part of the activities that we offer you on the various social networks such as Instagram, Twitter or Facebook, it is your responsibility to examine the confidentiality and security rules established by them, as well as their conditions of use. 

VII. How do we keep and protect the
Information Collected?

We take precautions to protect your information. When you submit sensitive information through the website, your information is protected both online and offline.

Sendinblue provides a data protection agreement in order to meet the adequacy and security requirements of the Data Protection Directive issued by the European Parliament and the Council of the European Union, as well as the General Data Protection Regulation. data (GDPR).

Sendinblue undertakes to take all useful precautions, with regard to the nature of the personal data and the risks presented by the processing, to preserve the security of the Personal Data and in particular, to prevent them from being distorted, damaged, or unauthorized third parties have access to it.

Sendinblue undertakes in this context to implement all appropriate technical and organizational security and confidentiality measures. Sendinblue undertakes to notify the Data Controller of any breach of personal data, within a maximum period of 72 hours after becoming aware of it, in particular in order to allow the Data Controller to comply with the obligation provided for in article 33 of the GDPR. This notification will be accompanied by any useful documentation to enable the Data Controller, if necessary, to notify this violation to the competent supervisory authority.

Whenever we collect sensitive information (such as credit card data), it is encrypted and transmitted to us in a secure manner. You can check this by looking for the closed padlock icon at the bottom of your web browser, or by looking for “https” at the beginning of the web page address.

While we use encryption to protect sensitive information transmitted online, we also protect your information offline. Only employees who need this information to perform a specific job (for example, billing or customer service) have access to information that identifies you. The computers/servers in which we store personally identifiable information are kept in a secure environment.

We respect your privacy, and ensuring the security of your personal information is an important part of our job. Any personal information you provide is strictly for ordering and is not loaned or sold to anyone for any reason.

As part of its IT expertise/support and web design services, Network Studio undertakes to only use tools that comply with the General Regulations on the Protection of Personal Data and to encourage its Clients to comply with this regulation.

As part of its IT hosting services (housing, managed virtual machine hosting, shared hosting, messaging, etc.), Network Studio is prohibited from accessing or using its customers' data, in particular connection logs and the content of the emails, apart from an express and reasoned request from the Customer or the legal authorities or in the context of incident management. All the data of Network Studio and its Customers are exclusively stored on French territory. Network Studio ensures the logical security of its own hosting infrastructure in compliance with the rules of the art in terms of computer security.

Any incident affecting the confidentiality of data (unauthorized access, loss, disclosure or alteration of data) is reported to the Customer as soon as possible.

Databank France provides security for the data center where the physical infrastructure of Network Studio in Paris is installed, as well as the telecommunications infrastructure under its responsibility. The Databank Customer Privacy Statement is available for download at the following URL: https://www.databank.com/privacy/. Network Studio is prohibited from modifying the location of the data without informing the Customer in advance. 

VIII. Recipients of personal data

Personal data is only communicated to employees who need to know it in the context of the performance of the services and these employees are aware of the instructions and undertake to process the data only in strict compliance with them. and for no other purpose.

Sendinblue undertakes to keep a register with a list of processing carried out on behalf of the Data Controller, including all the information listed in Article 30 of the GDPR.

As part of the performance of the service, Sendinblue may use sub-processors, who will have access to/process the personal data entrusted. The list of sub-processors concerned is available: https://bit.ly/subcontactors-SIB-FR-int. The sub-processor is required to comply with the obligations of the DPA. It is Sendinblue's responsibility to ensure that the subsequent processor provides sufficient guarantees as to the implementation of the appropriate technical and organizational measures so that the processing meets the requirements of the GDPR. Sendinblue remains fully liable to the controller for the performance by the sub-processor of its obligations.

In accordance with the legal provisions of the General Regulations on the Protection of Personal Data, Network Studio only collects and processes the personal data of its stakeholders necessary for its activity. These are only the contact details of its interlocutors collected and kept for the purposes of commercial development or for the administration of the services sold.

We will not share your information with third parties outside of our organization unless it is necessary to respond to your request, such as to ship an order. 

IX. Duration of retention of personal data

The duration of data processing under the DPA corresponds to the duration of the contractual relationship between Sendinblue and Advance Paris, in accordance with Sendinblue's T&Cs.

At any time during the performance of the services, the data controller may access or delete the personal data processed by Sendinblue directly from his account. At the end of the contractual relationship, at the choice of the data controller, Sendinblue undertakes to destroy all personal data, or to return them to the data controller or to a 4 another subcontractor designated by him if this is technically feasible and within a maximum period of 3 months. The return will be accompanied by the destruction of the existing copies in Sendinblue's information systems, unless the applicable law requires their retention. Sendinblue undertakes to communicate to the data controller, at the latter's request, proof of this destruction.

Advance Paris is solely responsible for managing data retention periods. Sendinblue is only responsible for deleting this data at the end of its contractual relationship.

Network Studio does not retain documents that may contain personal data beyond their legal minimum retention period:

  • Commercial correspondence: 3 years from the end of the commercial relationship
  • Contract with a supplier or a customer: 5 years from the expiry of the document
  • Quote, purchase order, invoice: 10 years from the end of the financial year
  • Hosted customer data: as soon as the service ends
  • Connection logs: 1 year 

X. User rights: the right to refuse collection, the right to access, rectify and erase their data

You can opt out of being contacted by us at any time. You can do the following at any time by contacting us at the email address or phone number listed on our website:

  • See what data we have about you, if any.
  • Amend/correct the data we hold about you.
  • Ask us to delete any data we hold about you.
  • Express any concerns about our use of your data.

Sendinblue undertakes to process data only for the purposes of the execution of the services, to process personal data in accordance with the instructions of the data controller. If Sendinblue considers that an instruction constitutes a violation of the GDPR, it will notify us immediately. 

XI. Right to withdraw consent and deadlines for ceasing the processing of information

As part of our collected information processing activities that are based on your consent, you have the right to withdraw your consent at any time. This is possible by using the link available at the end of each email sent to you or by contacting us at the following email address: info@advanceparis.com. Please note that withdrawing your consent may prevent us from responding to your requests or providing our services to you. 

XII. Right to Communicate Instructions About Your Collected Information

It is possible to provide us with instructions on what to do with your personal information in the event of your death. 

XIII. Your right as a subject

If you wish to exercise your rights as described above, or for any contact related to the protection of privacy, please contact Advance Paris SAS by sending your request to Advance Paris SAS, 13 rue du Coq gaulois, 77170 Brie Comte Robert, France or by sending an email to info@advanceparis.com. 

XIV. Children's privacy

We do not knowingly collect personal information from children under the age of thirteen (13) and our products and services are not directed to them. If we are notified that we have collected or received information collected from a child under the age of thirteen (13), we will delete that information. 

XV. Privacy Policy Changes

The website reserves the right to make any changes to this clause relating to the protection of personal data at any time. If a modification is made to this personal data protection clause, the website undertakes to publish the new version on its site. The website will also inform users of the modification by e-mail, at least 15 days before the effective date. If the user does not agree with the terms of the new wording of the personal data protection clause, he has the option of deleting his account. 

XIV. Data controller

Advance Paris SAS 13 Rue du Coq gaulois, 77170 Brie Comte Robert, France is the data controller and responsible for processing the Information Collected. 

XVII. Contact us

If you have any questions regarding our privacy policy, please call +33(0)160 185 900 or email info@advanceparis.com.

 

  • Advance Paris
  • 13 Rue du Coq gaulois – 77170 Brie Comte Robert – France
  • Website: www.advanceparis.com
  • Tel: + 33 1 60 18 59 00
  • Fax: + 33 1 60 18 58 95
  • Email: info@advanceparis.com
  • Headquarters of the company: Paris
  • Commercial Court of Paris
  • RCS Paris 504 534 140 000 26
  • Intra-community VAT number: FR76 504 534 140
  • Host Tel: 04 66 59 56 64
  • data protection officer (newsletter): dpo@sendinblue.com