Privacy policy

1. Data controller

The controller of personal data processing carried out through the Vivactis Europe website is:

VIVACTIS GROUPE COMMUNICATION

60 avenue Charles de Gaulle

92200 Neuilly-sur-Seine

France

For any question concerning the protection of your personal data or to exercise your rights:

k.gerin@vivactis.fr

2. Data that may be collected

When you use the website contact form, Vivactis Groupe Communication may collect the following information:

• first and last name;
• company or organisation;
• country;
• professional email address;
• nature or subject of your request;
• information you choose to provide in the free-text field relating to your project.

Technical data strictly necessary for the operation, security and maintenance of the website may also be processed.

We ask you not to communicate, through the contact form, sensitive data or health data relating to an identifiable person.

3. Purposes of processing

Data collected through the website is used to:

• receive and process requests addressed to Vivactis Europe;
• identify the most appropriate Vivactis contact for the request;
• respond to requests for information or contact;
• organise, where appropriate, an exchange relating to a project or professional collaboration;
• follow up on exchanges initiated by the user;
• ensure the security, operation and maintenance of the website;
• where applicable, produce general website traffic statistics under the conditions described in the Cookie Policy.

The data submitted via the contact form is not automatically used to send commercial communications or newsletters without an appropriate legal basis.

4. Legal bases

Depending on the nature of the request, the processing of requests submitted through the form is based:

• on Vivactis Groupe Communication's legitimate interest in responding to professional enquiries and developing its B2B relationships;
• or on the performance of pre-contractual measures where the request directly concerns a project, a commercial proposal or a future contractual relationship.

Processing strictly necessary for the security and operation of the website is based on Vivactis Groupe Communication's legitimate interest in ensuring the availability and security of its digital services.

Where processing requires your consent, in particular for certain cookies or trackers, consent constitutes the legal basis for the processing concerned.

5. Data recipients

Personal data is accessible only to persons who need it in the course of their duties.

Depending on the nature of your request, it may be communicated to:

• Vivactis Groupe Communication teams responsible for handling your request;
• Vivactis Europe network teams or entities concerned by your project, where necessary to respond to you;
• technical service providers involved in the hosting, maintenance or security of the website, to the extent necessary for their assignments.

Where these service providers process data on behalf of Vivactis Groupe Communication, they act in accordance with the instructions given to them and with applicable data protection obligations.

6. Transfers of data outside the European Economic Area

Whenever possible, Vivactis Groupe Communication favours processing and service providers that allow data to remain within the European Economic Area.

If certain service providers or tools used in connection with the website involve the transfer of data to a country outside the European Economic Area, Vivactis Groupe Communication ensures that such transfer is based on a mechanism compliant with the GDPR and, where required, on appropriate safeguards.

This section will be updated if the technical tools selected for the website involve such transfers.

7. Retention period

Data collected in connection with a contact request is retained for the time necessary to process and follow up on the request.

Where the contact forms part of a B2B prospecting or commercial relationship, the data may then be retained for a maximum period of three years from the last contact initiated by the data subject, unless a legal obligation requires a different period or a contractual relationship justifies separate retention.

Technical data and logs necessary for website security are retained for a period proportionate to their purpose.

Retention periods relating to any audience measurement tools are specified in the Cookie Policy.

8. Your rights

Under applicable regulations, and depending on the nature of the processing, you have the following rights:

• right of access to your personal data;
• right to rectify inaccurate or incomplete data;
• right to erasure under the conditions provided for by regulations;
• right to restriction of processing;
• right to object to processing based on legitimate interest;
• right to data portability where applicable;
• right to withdraw your consent at any time for processing based on consent.

You can exercise your rights by writing to:

k.gerin@vivactis.fr

In order to protect your data, Vivactis Groupe Communication may ask you for additional information to verify your identity where necessary.

You also have the right to lodge a complaint with the French Data Protection Authority, the Commission nationale de l'informatique et des libertés (CNIL).

9. Security

Vivactis Groupe Communication implements appropriate technical and organisational measures designed to protect personal data against destruction, loss, alteration, disclosure or unauthorised access.

Access to data is limited to persons and service providers who need to know it in the course of their duties.

10. Third-party websites and services

The website may contain links to websites or services operated by third parties.

Vivactis Groupe Communication is not responsible for personal data processing carried out by these third parties. We invite you to consult their own privacy policies.

11. Changes to the Privacy Policy

Vivactis Groupe Communication may amend this policy to take account of regulatory, technical or functional changes to the website.

The applicable version is the version published on the website on the date of consultation.