What is the purpose of our Privacy Policy?
Synneo, which manages this platform, places great importance on the protection and confidentiality of your personal data, which for us is a guarantee of seriousness and trust.
As such, our Personal Data Privacy Policy precisely reflects our desire to ensure that the applicable rules on personal data protection, and more particularly those of the General Data Protection Regulation ("GDPR"), are respected within Synneo.
In particular, our Privacy Policy aims to inform you about how and why we process your personal data in the context of the services we provide to you.
Who is our Privacy Policy for?
Our Privacy Policy is for you, regardless of your place of residence, provided that you are at least 15 years old and are a user of our platform.
If you are under the legal age detailed above, you are not authorized to use our services without the prior and explicit consent of one of your parents or the holder of parental authority, which must be sent to us by email to the address dpo@synneo.fr.
If you believe that we hold personal data concerning your children without having consented to it, we invite you to contact us at the dedicated address detailed above.
Why do we process your personal data and on what basis?
We process your personal data primarily for the following reasons:
- To use and benefit from our service and all its features on the basis of our general terms of use.
- To manage user accounts (e.g., account creation, access to the service and deletion of accounts) on the basis of our general terms of use.
- To pay online on the basis of our general terms of sale.
- To receive our technical emails (e.g., password changes, etc.) essential for the proper functioning of our service on the basis of our general terms of use.
- To be able to download and import documents on our platform on the basis of our general terms of use.
- To guarantee and strengthen the security and quality of our services on a daily basis (e.g., statistics, data security, etc.) on the basis of the legal obligations weighing on us, our general terms of use and our legitimate interest in ensuring the proper functioning of our services.
- To receive our newsletter on the basis of our legitimate interest in building customer loyalty.
Your data is collected directly from you as soon as you are a user of our platform and we undertake to process your data only for the reasons described above.
What personal data do we process and for how long?
We have summarized below the categories of personal data and their respective retention periods:
- Professional identification data (e.g., last name, first name, position, company, etc.) and contact details (e.g., professional email address and telephone, etc.) kept for the entire duration of the service provision to which are added the legal limitation periods which are generally 5 years.
- When there is confusion between the name of your structure and your personal name (e.g., self-employed, very small businesses, etc.), economic and financial data (e.g., bank account number, verification code, etc.) kept for the period necessary for the transaction and the management of invoicing and payments to which are added the legal limitation periods which are generally 5 to 10 years.
- Email address to receive our technical messages kept until your account is deleted.
- Email address to receive our newsletter kept until the end of your newsletter subscription.
- Connection data (e.g., logs, IP address, etc.) kept for a period of 1 year.
At the expiry of the applicable retention periods, the deletion of your personal data is irreversible and we will no longer be able to communicate it to you after this period. At most, we can only keep anonymous data for statistical purposes.
Please also note that in the event of a dispute, we are obliged to keep all the data concerning you for the entire duration of the file processing, even after the expiry of their retention periods described above.
What rights do you have to control the use of your personal data?
The applicable data protection regulations grant you specific rights that you can exercise, at any time and free of charge, in order to control the use we make of your data.
- Right of access and copy of your personal data, provided that this request is not in contradiction with business secrecy, confidentiality, or the secrecy of correspondence.
- Right to rectification of personal data that would be erroneous, obsolete or incomplete.
- Right to request the erasure ("right to be forgotten") of your personal data that would not be essential for the proper functioning of our services.
- Right to limitation of your personal data, which makes it possible to "freeze" the use of your data in case of dispute over the legitimacy of a processing.
- Right to portability of your data, which allows you to retrieve part of your personal data in order to store or transmit it easily from one information system to another.
- Right to give instructions on the fate of your data in case of death either through you, or through a trusted third party or a beneficiary.
For a request to be taken into account, it is imperative that it is made directly by you, or your representative, to the address dpo@synneo.fr. Any request that is not made in this manner cannot be processed.
We will respond to your request as soon as possible with a maximum delay of three months from its receipt in the event that the request is technically complex or if we receive many requests at the same time.
Please note that we can always refuse to respond to any excessive or unfounded request, especially in view of its repetitive nature.
Who can have access to your personal data?
Your personal data is processed by our teams, by our professional client for whom this platform is developed, as well as by our technical service providers with the sole purpose of operating our service.
We specify that we control all our technical service providers before recruiting them to ensure that they scrupulously respect the applicable rules on personal data protection.
FURTHERMORE, WE GUARANTEE THAT WE NEVER TRANSFER OR SELL YOUR DATA TO THIRD PARTIES OR COMMERCIAL PARTNERS.
Can your personal data be transferred outside the European Union?
The personal data processed by our platform is exclusively hosted on servers located within the European Union.
In addition, we do our utmost to use only technical tools whose servers are also located within the European Union. If this were not the case, we would scrupulously ensure that they implement the appropriate guarantees required to ensure the confidentiality and protection of your personal data.
How do we protect your personal data?
We implement technical and organizational means to guarantee the security of your personal data on a daily basis and, in particular, to combat any risk of destruction, loss, alteration, or disclosure.
Do we use cookies when you browse our platform?
WE GUARANTEE THAT WE DO NOT USE ANY ADVERTISING COOKIES FOR THE OPERATION OF THIS PLATFORM.
On the other hand, we inform you that we use statistical cookies when you browse our platform. For more information, we invite you to consult our Cookie Policy.
Who can you contact to get more information about the use of your personal data?
To best guarantee the protection and integrity of your data, we have officially appointed an independent Data Protection Officer ("DPO") with our supervisory authority.
You can at any time and free of charge contact our DPO at the address dpo@synneo.fr to obtain more information or details on how we process your data.
How can you contact the CNIL?
You can at any time contact the "Commission nationale de l'informatique et des libertés" or "CNIL" at the following coordinates:
CNIL complaints department
3 place de Fontenoy – TSA 80751, 75334 Paris Cedex 07
Tél. : 01 53 73 22 22
Can the Privacy Policy be modified?
We are likely to modify our Privacy Policy at any time to adapt it to new legal requirements as well as to new processing that we may implement in the future.