Personal data protection

Who are we?

What is personal data?

Personal data means any information relating to an identified or identifiable natural person:

• Directly (surname, first name, email address); or
• Indirectly (IP address, geolocation).

Personal data is collected by the company registresecurite.com, whose registered office is at 6 rue Chanzy, 85000 La Roche-sur-Yon – FRANCE, registered with the La Roche-sur-Yon Trade and Companies Register under number 801 693 110.

Data is collected on our website via our various forms, by telephone and at events (trade shows).

What are registresecurite.com’s commitments regarding the protection of personal data?

Registresecurite.com undertakes to guarantee a high level of protection of the personal data of its customers, prospects and visitors to its website and mobile applications, as well as of any other person whose personal data it processes.

Registresecurite.com undertakes to comply with the regulations applicable to all the personal data processing it carries out. More specifically, registresecurite.com undertakes in particular to respect the following principles:

• Your personal data is processed lawfully, fairly and transparently.
• Your personal data is collected for specified, explicit and legitimate purposes, and is not further processed in a manner incompatible with those purposes (purpose limitation).
• Your personal data is kept in an adequate and relevant manner and is limited to what is necessary in relation to the purposes for which it is processed (data minimization).
• Your personal data is accurate and kept up to date, and every reasonable step is taken to ensure that data that is inaccurate, having regard to the purposes for which it is processed, is erased or rectified without delay (accuracy).

Registresecurite.com implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk inherent in its processing operations, to meet regulatory requirements and to protect the rights and data of data subjects from the design stage of processing operations.

Finally, registresecurite.com undertakes to respect any other principle required by the applicable personal data protection regulations, and more specifically concerning the rights conferred on data subjects, personal data retention periods and the obligations relating to cross-border transfers of personal data.

Why does registresecurite.com collect data?

How do we collect your data?

In the course of our relationship, you may provide us with your personal data by various means, in particular on our websites and through our other means of communication, while browsing the internet by filling in the various collection forms, when you make any contact with registresecurite.com or when you provide us with your personal data in any other way.

Why do we collect your data?

Your data is mainly used to provide specific services: implementing our marketing actions, training, as well as for prospecting, loyalty, engagement, commercial information, satisfaction surveys, new services and products designed to improve your customer experience, statistical studies, recruitment, after-sales service, and handling your requests and/or complaints.

The processing of your data for the various purposes mentioned above is in particular necessary:

• to comply with a legal obligation;
• for the purposes of the legitimate interests pursued by registresecurite.com (in particular improving customer service…).

More specifically, your data is used:

• to enable you to benefit from all the services available on the registresecurite.com website at the URL deemply.com and through its other means of communication;
• to enable you to browse our websites;
• to match our information, notifications, offers and other forms of service as closely as possible to your interests.

How long is your data kept?

Registresecurite.com undertakes to keep your personal data for a period not exceeding that necessary for the purposes for which it is processed. In addition, registresecurite.com keeps your personal data in accordance with the retention periods imposed by the applicable laws in force.

These retention periods are defined according to the processing purposes implemented by registresecurite.com and take into account in particular the applicable legal provisions imposing a specific retention period for certain categories of data, any applicable limitation periods, and the recommendations of the CNIL (the French data protection authority) concerning certain categories of data processing.

We keep your data only for as long as necessary to carry out the operations for which it was collected, except where the law provides for a different retention period. For example, we keep data collected for commercial prospecting purposes for three (3) years from the last contact. After that, we delete your data.

You acknowledge that the data you provide to us and that is stored in our information systems is accurate and constitutes proof of your identity.

Who can access your data?

Data collected on the registresecurite.com website and through its other means of communication may be disclosed to authorized staff of registresecurite.com or to its ancillary service providers, in the course of carrying out all or part of the services referred to above. We remind you that, in this context, registresecurite.com requires its service providers to put in place strict confidentiality and protection measures for this data.

Registresecurite.com does not transfer personal data outside the European Economic Area as part of the processing it carries out as data controller. By default, registresecurite.com does not transfer personal data outside the European Economic Area as part of the processing it carries out as data processor.

However, where registresecurite.com acts as a processor for a controller carrying out processing outside the European Economic Area, registresecurite.com undertakes to comply with the measures communicated to it by the controller in order to guarantee the protection of your data in accordance with the strictest rules, in particular through the signature, on a case-by-case basis, of contractual clauses based on the European Commission model, or any other GDPR-compliant mechanism, where your personal data is processed by a service provider outside the European Economic Area whose country is not considered by the European Commission to ensure an adequate level of protection.

What are your rights?

• Request a copy of your data – Right of access
• Correct inaccurate data concerning you – Right to rectification
• Request the erasure of certain data concerning you – Right to erasure
• Object to our processing of your data – Right to object
• Restrict the use of your data while your request is being handled – Right to restriction of processing
• Object to the profiling of your data – Right to object to profiling
• Where a data breach likely to result in a high risk to your rights and freedoms is detected, you will be informed of the breach as soon as possible.

You may issue directives concerning the retention, erasure and disclosure of your personal data after your death, in accordance with Article 40-1 of French Law 78-17 of 6 January 1978.

Revision of the personal data protection policy: we may update this policy by publishing a new version on our site. We undertake not to lower the level of confidentiality of your data substantially without informing you and obtaining your consent.

How do you exercise your rights?

In accordance with the regulations applicable to personal data protection, you may at any time exercise your rights of access, rectification and erasure of data concerning you, as well as your rights to restrict and object to processing and to the portability of your personal data.

By email: dpo@deemply.com

By post: Registresecurite.com, 6 rue Chanzy, 85000 La Roche-sur-Yon, France

In this context, please include with your request the information needed to identify you (surname, first name, email) and to process your request. Please also attach any information needed to confirm your identity and, if you are making the request on behalf of a third party, evidence that you are entitled to exercise the rights on that person’s behalf.

You also have the right to lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL, the French data protection authority) in the event of a breach of the applicable personal data protection regulations, in particular the GDPR.