The present personal data protection policy complies with the European regulations concerning the treatment of personal data (the General Data Protection Regulation n°2016/679, referred to as GDPR, from the 25 April 2016), and with the applicable regulations in France.
We respect confidentiality, ensure the security of your Personal Data and protect your privacy. As such, we ensure that all technical and organisational measures are in place to ensure the security of your personal data, in compliance with the currently applicable security standards.
The present personal data protection policy is intended to inform you about our practices concerning the way in which we collect, use, process and share information about you which you share with us, including personal information, in line with your use of our Concierge Service which is accessible via our website https://www.geo3l.com or our mobile app.
This personal data protection policy is an integral part of our user conditions, which we recommend that you read carefully.
When this policy refers to the terms “Site”, “Service”, “us” or “our”, it is referring to the GEO.3L Company, which is responsible for the information concerning you in compliance with the present personal data protection policy (the “Data Handling Manager”)
INFORMATION COLLECTED
When you use the Site, we may collect and process the following data:
THE INFORMATION YOU CHOOSE TO SHARE
By using the Service, you are required to submit certain information, some of which is used to identify you. This information is necessary for the Site to work properly, and for us to meet our legal obligations. Without this information, we wouldn’t be able to provide all the services you ask for.
Contact form. When you use the contact form, we ask you to provide certain information:
- The name of your company
- Your surname
- Your name
- The reason for your request
- Your e-mail address
- The message accompanying your request
This information is mandatory. Without this, we won’t be able to reply.
INFORMATION COLLECTED AUTOMATICALLY WHEN YOU USE THE SITE
When you use the Service, we automatically collect certain information. This information is necessary in light of our legitimate desire to provide and improve the functions of the Service.
We automatically collect login and device data when you access the service. This information includes, among other things: information about how you have used the Service, the IP address, the time stamp, the hardware and software data, data about the device and its use, error reports, cookies and pages you have viewed or displayed on the Service.
Cookies and similar technology. To find out more, see the “Cookie management” section.
SPECIFIC INFORMATION
Personal data for minors. Through the application of the current regulations and legislation, and in particular article 8 of the GDPR, we can in no way collect personal data relating to minors under 16 years old. If you are under sixteen, please do not enter any information on this site or use our services, unless you can provide authorisation duly written and signed by the person or people with parental authority over you, sent to the “Contact” section of the present confidentiality policy.
USING THE INFORMATION COLLECTED
We use, store and process information, including personal information relating to you, in order to feed, understand, improve and develop the Service, to create and maintain a safe environment, and to ensure we comply with our legal obligations.
LEGAL BASIS
We only use your personal data if you have consented or if this use is based on one of the legal bases enshrined in law.
Your consent (article 6, paragraph 1, point 1 (a), in particular article 9, paragraph 2 (a), article 7 of the GDPR).
The protection of our legitimate interests (article 6, paragraph, point 1 (f) of the GDPR).
The execution of a contract signed or a commitment to which you and/or we are committed (article 6, paragraph 1, point (b) of the GDPR).
The respect of a legal or regulatory requirement (article 6, paragraph 1, point 1 (c) of the GDPR).
JUSTIFICATION FOR DATA COLLECTION
We collect and process data relating to you for various reasons:
- To answer your contact requests.
- To advise you and recommend products and services.
- To manage our commercial relationships.
- To propose products, contracts and services and conduct market research.
- To understand how you are using the services.
- To collect information from data analysis.
- To improve the quality of the products, contracts and services, and ensure the effectiveness of the Site.
- To store our previous discussions with you (by phone, electronic message or any other type of communication).
- To ensure the continuity of our services.
- To defend our rights and respect our legal and regulatory obligations for cases in which your interests do not take precedence.
- To protect the legitimate interests of third parties for cases in which your interests do not take precedence.
- To assert, exercise of defend your rights.
- For reasons of public order or interest.
To feed, improve and develop the Service.
- To allow you to access and use the Service.
- To manage, protect, improve and optimise the tools and experience of the Service.
We process this information, given our legitimate interest in improving the Service and the experience of our Users.
An environment of trust and security
- To detect and prevent fraud, spam, abuse, safety incidents and any other activities which may cause harm or damage.
- To lead security surveys and risk evaluations.
- To impose our User Conditions and our other policies.
- To respect our legal obligations.
To supply, personalise, evaluate and improve.
To send you promotional messages, commercial information and any other information which may interest you – according to your requests for information.
DATA SHARING
We may be led to transfer and divulge your data to sub-contractors.
SHARING DATA WITH SUB-CONTRACTORS
We use various sub-contractors in order to help us provide services in line with the Service.
We only share your data with sub-contractors under the following circumstances:
- We need sub-contractors for technical services, payment services, analytical solutions, or to help us develop and maintain products, and to allow the service to be used on third-party platforms and software tools. These sub-contractors have limited access solely to the information which is actually necessary for the execution of these tasks on our behalf and have a contractual obligation to protect it and use it solely for the purposes for which it has been divulged, and in compliance with the present personal data protection policy. We can at any time check that these sub-contractors are using this data in accordance with these terms.
SHARING DATA FOR STRUCTURAL REASONS
In the hypothesis that we sell or purchase a company or assets, we reserve the option to share your personal data with the potential seller or buyer of this company or assets. If all or part of the Service is purchased by a third party, the data in our possession will, if necessary, be transferred to the new owner. In this case, we shall inform you in the most appropriate manner before your personal data are transferred and are governed by another personal data protection policy, and we will list the options which will be available to you.
SHARING DATA OUTSIDE THE EUROPEAN UNION
If, as part of our aforementioned data treatment, your data is treated in a third country in the European Union (EU) or the European Economic Area (EEA), we guarantee that your data will be treated in compliance with the applicable European standards. If necessary, and in order to ensure the security of the data transferred to recipients located outside the EU or EEA, we will use, if necessary, data transfer agreements based on typical EU type contractual clauses or other mechanisms authorising the transfer of this data and including any appropriate technical and organisational measures.
For non-EU countries for which the EU recognises a degree of personal data protection similar to that which is applicable within the EU or which is simply adequate according to the current protection standards within the EU, no regulatory approval or agreement is necessary. We do however guarantee that your data will be processed in accordance with the currently applicable standards and ensure optimum security for the transfer of any personal data to these countries.
RECORDING COMMUNICATIONS
We inform you that our telephone conversations and the messages we send each other may be recorded in order to meet the ends and purposes detailed in the present confidentiality policy.
You can oppose these recordings by referring to our Contact section.
RIGHTS OF THE PEOPLE CONCERNED
We are required to inform you, concerning your rights relating to your personal data, of the request processing duration and the possible refusal of the aforementioned requests.
CONFERRED RIGHTS
We comply with the European regulations concerning the treatment of personal data (the General Data Protection Regulation n°2016/679, referred to as GDPR, from the 25 April 2016), and with the applicable regulations in France. As such, you acquire certain conferred rights:
Right to access (Article 15 of the GDPR)
You may at any time access the personal data in our possession. This information concerns, in particular, the categories of data which we process, the purposes of the treatment, the source of the data if we have not collected it directly from you and, if necessary, the recipients to whom we have transferred this data. You have the right to receive a free copy of your data; if you would like to receive additional copies, we reserve the right to invoice you for them.
Right to rectification (Article 16 of the GDPR)
You may at any time ask us to rectify any erroneous or obsolete personal data. Based on the most recent information in our possession, we will take all appropriate measures to ensure that the data we have concerning you, and which we are continuing to use, are accurate, complete, up to date and relevant.
Right to remove (Article 17 of the GDPR)
You can, freely and at any time, ask us to delete your personal data.
In accordance with article 17 of the GDPR, this may be the case if:
Your data is no longer necessary in terms of the purposes to which they were collected or processed;
You have revoked your consent upon which the treatment of your data is based, and if there is no other legal basis to justify their treatment or conservation;
You oppose the treatment of your data for commercial purposes;
Your data was processed illegally;
However, we may conserve certain information concerning you when the law requires it, to comply with our legal obligations or when we have a legitimate reason to do so, such as to improve security.
Please note that if you request the deletion of your personal information, we will still conserve some of your data, even after your account is closed:
If it is reasonably necessary to fulfil our legal obligations and, in particular, to meet the legal conservation durations, meet our regulatory requirements, resolve disputes, maintain security, answer requests from the authorities, prevent fraud and abuse, and apply the User Terms and Conditions.
Because we are maintaining the Service’s tools in order to protect them from any accidental or malevolent loss or destruction, residual copies of your personal information may not be deleted from our backup systems for a limited period of time.
Right to oppose (Article 21 of the GDPR)
You have the right to freely oppose, at any time, the treatment of your personal data. Under these circumstances, we will no longer process your personal data.
This right may not however be exercised if we can demonstrate pressing reasons which justify the treatment of your personal data, and which take precedence over your own interests.
Right to limitation (Article 18 of the GDPR)
You have the right to restrict the treatments to which your personal data are subject. You may ask us to stop using all or part of your personal data, or restrict our use of it if:
You are contesting the accuracy of the data for the period in which we can verify the accuracy of the data;
The treatment is illegal, but you are nevertheless opposed to your data being deleted and impose, by default, a limitation on the treatment of your data;
We no longer need your data, but you need to it exercise, impose or defend your rights;
You are opposed to the treatment while it is uncertain that the legitimate reasons we invoke take precedence over yours.
Right to portability (Article 20 of the GDPR)
You have the right to portable data, i.e. the right to receive the personal data you’ve provided in a structured, commonly used and legible format, and the right to transmit this data to another treatment manager.
However, you only have this right if the treatment of your data is based on your consent, or if it is necessary for the execution of a contract. You can ask us to send you, personally, a copy of your data. We can also send it directly to another treatment manager which you have nominated beforehand.
Death (Article 63 of the law n°2016-1321 from the 07 October 2016 for a digital Republic)
You have the right to define directives relating to the destination of your personal data after your death.
To do this, you can contact us using our Contact section.
RESPONSE TIMES FOR REQUESTS CONCERNING YOUR RIGHTS
In principle, we strive to answer all requests concerning the aforementioned rights within at most one month.
However, and in compliance with the terms of article 12.3 of the GDPR, this period may be extended to a maximum of two months due to the complexity and number of requests which we must process. In this case, we will inform you of the extension of the response time in the month following the delivery of your request.
RESTRICTION OF INFORMATION WHEN EXERCISING YOUR RIGHTS
In certain specific cases, we may be unable to provide information about all of your data due to legal requirements. If we must refuse your request for information, then we will inform you of the reasons for this refusal by all means necessary.
SECURITY
We ensure the security of your Personal Data and protect your privacy. As such, we ensure that all technical and organisational measures are in place to ensure the security of your personal data, in compliance with the currently applicable security standards.
Security measures in place
In virtue of article 32 of the GDPR, we are implementing and continually updating the administrative, technical, organisational and physical measures in place to protect your information from being accessed, lost, destroyed or altered without authorisation. Some of the protection measures we use to protect your information are firewalls and data encryption, and information access control.
USING COOKIES
We use cookies and similar technology to offer you a personalised and secure service and guarantee optimised, personalised browsing on the Site.
The term “cookie” covers various trackers which are deposited or read on your terminal when you browse web pages. Cookies are used on the site for various purposes listed below, principally to facilitate your browsing, or to take visitor statistics.
We do not collect any trackers which would allow us to directly or indirectly identify you without your prior consent. You can at any time oppose the collection of cookies.
DEFINITION OF COOKIES AND OTHER TRACKERS
A cookie, sometimes called a “tracker”, is a data file saved onto the hard drive of your device and read by your browser on your device when you first view a web page. The vast majority of websites use cookies to optimise the functions they offer. Cookies also allow you to maximise the security of your interactions by conserving your preferences for later visits from the same device. Certain cookies expire when you close your browser, while others remain on your device to be used for later visits.
Certain cookie functions may also be completed using similar technologies, such as pixels, web tags and tracking URLS which provide, for example, the read status of a specific email or access to a link.
USING COOKIES
Cookies allow us to recognise your computer, your tablet or your mobile in order to personalise the services we offer you via the Site.
In particular, we use cookies to ensure fully personalised browsing on the site. Cookies allow you to connect to the Service, save your login preferences, subscribe to online services and use tools such our simulators and offer comparisons.
We use this technology for various reasons, for example:
- To determine the user preferences,
- To optimise browsing,
- To allow you to use and simplify the Service’s functions,
- To analyse the performance, the effectiveness and good working order of the Service,
- To better understand the interactions with the Service and how to improve it,
- To propose personalised content,
- To secure the Service,
- To preserve the confidentiality of your information when you browse our website.
To this end, we display a banner at the bottom of your screen when you first connect to the site. You can at any moment refuse for cookies to be left on your terminal by configuring your browser. If this is the case, we will not be able to guarantee optimal and fully personalised use of the site, and we cannot be held responsible for any consequences relating to the alteration of your browsing conditions on the site as a result of your choice to refuse, block or limit the use of the cookies needed for the Site to work properly.
The information collected via cookies can in no way allow us to directly or indirectly identify you, and are only intended to help improve the performance of the Site. This may concern analytical cookies, such as visitor measurement cookies, advertising cookies, or even social media sharing cookies.
COOKIE CATEGORIES
In compliance with the CNIL recommendations, cookies which are strictly necessary for the Site to work are not subject to any prior obligation from you. Inversely, we will ask your prior agreement before any cookies sent by third parties are installed, which are subject to their own confidentiality policies. We therefore recommend that you consult these policies on the websites of these third parties.
THIRD PARTY SOCIAL PLUG-INS
The Service may use social network plug-ins, provided and operated by third-party companies. As a result, it is possible that information may be sent to the third-party partner. If you are not connected to your account opened with the third-party partner, they will not be able to identify you. If you are logged into an account opened with the third-party partner, then they will be able to connect certain data or actions relating to your interactions with the Service to the account you have with the party in question. Our personal data confidentiality policy only concerns the personal data which you have shared with us. We can in no way be held responsible for any personal data which you send to these third-party sites. Please see the confidentiality policies for the third party to find out more about their data practices.
COOKIE MANAGEMENT
When you first visit the site, we will ask for your consent before using cookies. You can modify your preferences concerning the content of the personalised cookies. Most navigators automatically accept cookies, so you can therefore revoke your consent to the use of cookies at any time by modifying the settings of your browser or device.
Please note that if you choose to refuse cookies, you will still be able to view the Service. However, certain sections may not work as intended, and may not work at all
HELP WITH COOKIE MANAGEMENT
Cookie settings vary for each browser. It is described in the help menu for your browser.
To guide you through your settings, the CNIL has developed a page dedicated to helping you manage cookies. Click this link to view it: https://www.cnil.fr/fr/cookies-les-outils-pour-les-maitriser.
DATA CONSERVATION
We conserve your data for as long as you use the Service and our internet or mobile app platforms. We may also conserve them even if you decide to no longer use our Service, in particular in order to comply with the applicable legislation, protect our interests or impose our rights or those of third parties when applicable and legitimate. Certain data may be conserved for an additional period for complaint management purposes, to meet our legal or regulatory obligations or to respond to requests from the relevant authorities.
Your personal data is anonymized after the following periods:
- 3 years after the last use of the Service
MODIFICATION OF THE PRESENT PERSONAL DATA PROTECTION POLICY
We may be required to modify the present personal data protection policy at any moment, in compliance with the present clause. If we modify it, we will publish the new version and update the date of the last update listed at the top of the present personal data protection policy. We recommend that you regularly consult this page in order to stay up to date with any new modifications or updates. If you do not agree with the terms of the personal data protection policy, we recommend that you do not use the Site.
COMPLAINTS TO THE RELEVANT AUTHORITIES
If you consider that we have not adequately responded to your request or your questions, you have the right to file a complaint with the relevant authority for the protection of personal data, the National Commission for Computers and Freedom (CNIL), at the following web address: https://www.cnil.fr/fr/plaintes; or by post to the following postal address: CNIL – 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07.
CONSULTING THE APPLICABLE TEXTS
The text of the General Data Protection Regulations (GDPR) is freely accessible at the following web address: https://eur-lex.europa.eu/legal-content/FR/TXT/?uri=CELEX:32016R0679; or on the CNIL website at the following web address: https://www.cnil.fr/fr/reglement-europeen-protection-donneesde, and all other applicable texts in terms of the protection of personal data and the protection of your rights and freedoms on the internet (https://www.cnil.fr).
CONTACT
If you have any questions concerning the present personal data protection policy or the Service’s practices in terms of data treatment, you can contact us by:
Sending an email to dpo@jeconomise.fr
Or writing to us at the following address: GEO.3L, 1 Rue Du Guesclin 44000 NANTES.
Please note that we may ask to check your identity before taking any steps concerning your request.