Personal Data Protection Policy

This English version is provided for convenience; the French version prevails.

Our philosophy and our commitments

Ucc Experts is committed to protecting your personal data and strives to ensure a high level of protection for your personal data in accordance with European Regulation 2016/679 and the French Data Protection Act No. 78-17. In this respect, you will find below our personal data protection policy, explaining in particular what personal data we collect, the processing carried out and on what basis, its retention, and your personal rights. We invite you to read it carefully. Our Data Protection Officer is available to answer any of your questions; you may contact them at the following address: rgpd@ucc-experts.fr. You can find the text of the applicable European Regulation here: https://eur-lex.europa.eu/legal-content/FR/TXT/?uri=CELEX%3A32016R0679 or you may contact/refer the matter to the regulatory authority (CNIL) via its website www.CNIL.fr. This version of the personal data policy may be amended by us as the case may be, and you will be informed thereof.

Your data controller

Ucc Experts is the data controller for your personal data, whose contact details are set out below: 150 rue Legendre 75 017 Paris; it is referred to by its name or "We" herein.

Your personal data and its collection by Ucc Experts

Your personal data may be collected during:

your visit to our site,
our exchanges,
our prospecting activities,
the formation or performance of our contracts.

We do not collect any data that is not necessary for the processing purpose mentioned at the time of collection, or data prohibited by law or regulation. The collection of certain data may be mandatory or optional, and you are informed of mandatory information. Your personal data may be collected by third-party service providers or partners, who undertake to comply with European and national regulations on personal data. Our policy is not to transfer your data outside the European Union; should we exceptionally do so, such transfer may only take place to a country or organisation covered by an adequacy decision (Article 45 GDPR) or providing appropriate sufficient safeguards (Article 46 GDPR). We do not make any automated decisions.

Our processing of your personal data

We process your personal data by entering it into databases; it is stored, retained and, as the case may be, rectified, deleted, archived, anonymised or pseudonymised, and transferred to trusted third parties. We may process your personal data for the following processing purposes, or for purposes specified to you at the time of collection:

Informing you about our commercial offers (products, services, etc.) and promotions – Communicating with you

We may use your personal data for commercial prospecting purposes, in particular to send you information about our products/services, our commercial and promotional offers, quotes and other pre-contractual documents, and our news by email, post or telephone.

Performance of your ongoing contracts and customer follow-up

We use your personal data to ensure the performance of ongoing contracts in accordance with your requests. We may also send you any information regarding your order or ongoing contracts, their performance, your invoices and contractual documents, advice, the performance of our warranties where applicable, and our legal obligations. We also use your personal data to manage our customer relationship, your requests or complaints, any disputes where applicable, and to track your customer history.

Improving the use of our services and enhancing our offers

We process your personal data to enable you to make optimal use of our services, to improve our offers and products/services, and to track your user journey, carry out satisfaction surveys, polls and anonymous statistics.

Your payments

Your bank details may be collected either directly by us or by a dedicated, selected service provider, who guarantees the complete confidentiality of your banking data; such details are retained only for as long as necessary for the duration of the contractual relationship or within the limits permitted by law.

Protection against fraudulent activity

The personal data collected may be used to combat fraud, in particular in relation to payments or direct debits made. In this respect, our payment security service providers may be recipients of such data.

Ensuring compliance with the law and court decisions

Your data may be used to:

respond to a request from an administrative or judicial authority, a law enforcement officer, a court officer, or to comply with a court decision;
ensure compliance with our general terms and conditions of sale/service;
protect our rights and/or obtain compensation for any damage we may suffer or limit its consequences;
prevent any act contrary to applicable law, in particular as part of fraud risk prevention.

We may also process your personal data for the following purposes:

Various technical diagnostics
Technical diagnostics
Internet advertising targeting: We may use your data to target advertising on our site or that of our partners by cross-referencing it with other data.
Advertising targeting: We may use your data to target advertising on our site or that of our partners by cross-referencing it with other data.

The legal basis for the processing of your personal data

In accordance with the applicable regulations, the processing of your personal data by us is lawful where it is based on one of the following grounds:

Your consent to the processing of your data by us: you accept the processing of your personal data by means of express consent. You may withdraw this consent at any time from our DPO; or
The existence of a contract between you and us: the processing of data is then justified by the requirements of performance of the contract; or
Our legitimate interest in the processing of your personal data, provided that such proportionate interest respects your fundamental rights and your private life; or
The law or applicable regulations, where these oblige us to process and retain your personal data.

Arrangements for and duration of retention of your personal data

We manage your personal data according to three phases:

an active phase, in which data is retained for the period indicated below in an "active" database: your personal data is then accessible only to persons with an operational need to access it in order to carry out the authorised processing
an archiving phase (for an additional period beyond retention in the "active" database) where a legitimate reason so justifies: your personal data is then archived with restricted access and for a limited period.
A deletion or anonymisation phase: at the end of the additional archiving within the periods set out below, your personal data is deleted or anonymised (such that it can no longer constitute personal data identifying you).

Your personal data is retained for the period necessary for the requirements of its processing, our customer relationship where applicable, and the performance of contracts, and within the limits specifically laid down by regulation; we may retain your personal data in archive storage for the purposes of retaining accounting, tax or evidentiary records for the duration of the applicable limitation periods. By way of example, we set out below the retention periods applicable to the following processing operations (subject to regulations imposing a different retention period):

Consent given by you to the collection of your personal data may be withdrawn by writing to our DPO by email or by post to the addresses set out at the head of this document, stating your surname, first name, email and address, together with the precise nature and subject matter of your withdrawal request.

You may also send us any comments regarding your personal data to Ucc Experts, 150 rue Legendre 75 017 Paris

Exercising your rights over your personal data

You have:

A right of access, which allows you to obtain: confirmation as to whether or not data concerning you is being processed; communication of a copy of all personal data held by the data controller.
Confirmation as to whether or not data concerning you is being processed;
Communication of a copy of all personal data held by the data controller.
A right to request the portability of certain data: this allows you to receive your personal data in a structured, commonly used and machine-readable format.
A right of objection: this allows you to no longer be the subject of commercial prospecting by us or our partners, or, on grounds relating to your particular situation, to cause the processing of your data for research and development, fraud prevention or combating purposes to cease.
A right of rectification: this allows you to have information concerning you corrected where it is out of date or inaccurate. It also allows you to have incomplete information concerning you completed.
A right of erasure: this allows you to obtain the erasure of your personal data, subject to statutory retention periods. It may apply, in particular, where your data is no longer necessary for the processing.
A right of restriction: this allows you to restrict the processing of your data in the following cases: in the event of unlawful use of your data; if you contest the accuracy thereof; if you need the data in order to establish, exercise or defend your rights.
In the event of unlawful use of your data;
If you contest the accuracy thereof;
If you need the data in order to establish, exercise or defend your rights.

In such cases, the data will no longer be subject to active processing, and may not be amended for the duration of the exercise of this right.

A right to obtain human intervention: data controllers may use automated decision-making in connection with the taking out or management of your contract. In such cases, you may ask the Data Protection Officer what the determining criteria for the decision were

You may exercise these rights by email to: rgpd@ucc-experts.fr or by letter to the following address: 150 rue Legendre 75 017 Paris, stating your surname, first name, address and email (and, where applicable, your customer reference), as well as the subject matter of your request, in clear and intelligible terms. Ucc Experts undertakes to respond to your verified request within one month of receipt. Should any difficulty arise, you may contact our Data Protection Officer directly by email: rgpd@ucc-experts.fr or refer the matter to the Commission Nationale de l'Informatique et des Libertés (CNIL).

Our processors and partners

Ucc Experts may transmit your personal data to processors carrying out services involving the processing of your data, in compliance with the purposes referred to herein; such processors must afford your personal data the same level of confidentiality as Ucc Experts and have undertaken to be in full compliance with the regulations on personal data, in particular the GDPR. We do not trade in your personal data in any way; if you wish to know more and to find out specifically the identity of the service providers or partners to whom your personal data has been transmitted, you may contact our DPO at the following address: rgpd@ucc-experts.fr. The service providers or partners who may have access to your personal data may in particular include:

service providers who may manage outsourced services for the performance of our services and contracts;
service providers helping us to improve our services, carry out data analysis and optimise our offers,
carry out surveys and statistics;
statutory auditors, chartered accountants, consultants, lawyers, audit firms, IT and managed-services providers, security providers;
investors and acquirers.

We may also transmit your personal data to French authorities, administrations and courts, in particular in connection with legal proceedings or legal formalities requiring such disclosure.

A cookie is a file placed on your device (computer, tablet, etc.) by Ucc Experts when you use the website, depending on your browser. During its storage period, this file will make it possible to identify your computer on your future visits to the site, enabling us to retain your visit and browsing data. Ucc Experts may use various personal data collection systems, in particular by means of cookies on our website, for which your consent is sought; the following cookies may potentially be concerned:

necessary cookies: for the optimised use of the site (for example: identification, shopping basket, etc.)

Ucc Experts may also issue third-party cookies enabling content from our site to be shared with third parties or tools for expressing your appreciation (e.g. "Like", from social networks); you may then be identified by the social network, which may track your browsing. It is your responsibility to familiarise yourself with its privacy and cookie management policy, our company having no connection with such tools. Cookies are subject to your acceptance on our website on your first visit. The validity period of consent to the placing of cookies and trackers is 13 months maximum, from the date they are first placed on your device following the expression of your consent. You may manage your acceptance or refusal of cookies directly from your browser settings. You may thus either accept all cookies, be notified when a cookie is placed, or refuse all cookies. If you refuse all or some cookies, certain functionalities of the Site may be impaired or certain pages may be inaccessible.

To disable cookies: If you use Internet Explorer 8 and later versions: 1. Go to "Tools" in the menu bar and click on "Internet Options" 2. Click on the "Privacy" tab at the top 3. Move the slider up to the "Block all cookies" setting to block all cookies, or down to the "Accept all cookies" setting to accept all cookies.

For further information, see http://windows.microsoft.com/fr-fr/internet-explorer/delete-manage-cookies

If you use Firefox 30.0 and later versions: 1. Click the "menu" button and select "Options" 2. Select the "Privacy" panel. 3. In the History area, for the "History settings" option, select "Use custom settings for history". 4. Tick the "Accept cookies" box to enable cookies, or untick it to disable them. If you have problems with cookies, make sure that the "Accept third-party cookies" option is not set to Never. 5. Choose how long cookies may be kept. Keep until: "They expire": Each cookie will be deleted on its expiry date, set by the site issuing the cookie.

Keep until: "Firefox is closed": cookies stored on your computer will be deleted when you close Firefox. Keep until: "Ask me every time": a warning will be displayed every time a website wishes to send a cookie, asking whether you agree to save the cookie or not. 6. Click OK to close the "Options" window. For further information, see https://support.mozilla.org/fr/products/firefox/privacy-and-security/cookies

If you use Google Chrome: 1. Go to the "Tools" menu 2. Click "Settings" 3. Click "Advanced settings" 4. Click "Privacy/Content settings" 5. "Cookies" should be selected. Then select "Block third-party cookies and site data" For further information, see https://support.google.com/chrome/answer/95647?hl=fr

If you use Safari 5.0 and later versions: 1. Choose Safari > Preferences and click "Security". 2. In the "Accept cookies" section, indicate whether and when Safari should accept cookies from websites. To see an explanation of the options, click the help button (which looks like a question mark). If you have set Safari to block cookies, you may need to temporarily accept cookies in order to open a page. Repeat the steps above, selecting "Always". Once you have finished with the page, disable cookies again and delete the cookies for that page.

For further information, see http://support.apple.com/kb/ht1677?viewlocale=fr_FR If you have a different type or version of browser, you are invited to consult your browser's "Help" menu.