Edflex ("Edflex" or "we") may process personal data ("Data") of visitors to the Site ("you"). We place Data protection at the heart of our concerns and this Data Protection Policy allows us to inform you about the processing we implement, in compliance with all European and French regulations on the protection of personal data and privacy, and in particular the General Data Protection Regulation 2016/679 of April 27, 2016 ("GDPR") and Law No. 78-17 of January 6, 1978 relating to information technology, files and freedoms as amended.
Your Data is only processed to:
Create your account and login ;
Answer your contact requests and queries;
Host your Data;
Improve our services and the functionality of the Site;
Ensure the security of the Site;
To ensure the exercise of your rights and the defense of our rights;
Analyze the statistics of use of the Site.
We process your Data (i) with your consent, which you may withdraw at any time; (ii) where it is necessary for the provision of our services or to respond to your requests; (iii) where it enables us to comply with a legal obligation to which we are subject; (iv) to ensure our legitimate interests relating to the security of the Site, its proper functioning and to send you communications by email
If you no longer wish to receive communications from us, you may go to your user profile section under the "Settings" tab and set your preferences or click on the unsubscribe link provided in our emails. You can also contact us at the following address: contact[at]edflex.com
Only the Data strictly necessary to achieve the objectives specified above are processed. This Data is collected directly from you at the time of your request for contact or during the use of the Site (identity, contact details, content that you view, connection data, data from technical cookies or tracers with your consent, preferences, types of requests and any other information that you communicate to us on the Site's collection forms).
As soon as it is necessary, we thank you for updating your Data.
We will only pass on your Data to our subcontractors and partners when this is necessary to achieve one of the purposes mentioned above. Your name may be shared with other users of the Site when you recommend content. Finally, your Data may be transmitted to third parties legally entitled to access it upon specific request, in certain cases provided for by law: judicial authority, administrative authority, etc. Your Data may also be communicated to third parties if this is necessary to protect and/or defend our rights, or to ensure compliance with these provisions.
We take care to work with subcontractors who do not transfer your Data outside the European Union. To learn more about the appropriate safeguards in place in this regard, you can contact us at dpo[at]edflex.com
We only keep your Data for 3 years from the date of our last connection, unless you request its deletion.
We also keep your connection logs to the Site for security purposes for a period of 6 months. In addition, in accordance with applicable law, Data necessary to defend our rights is retained for a period of 5 years after the end of the relationship with us.
However, your Data may be kept longer if a longer retention period is permitted or imposed by virtue of a legal, contractual, fiscal or social obligation.
In accordance with the Regulations (in particular Articles 15 to 22 of the RGPD), you have the following rights regarding the processing of your Data, within the legal limits:
Right of access: to obtain information about your Data and a copy of your Data;
Right to information: to obtain information on the conditions of processing (recipients, purposes, categories of data, etc.);
Right of rectification: to correct or update one's Data when they are inaccurate or incomplete;
Right to object: to oppose the processing of Data for reasons related to his or her particular situation, or to withdraw consent for processing on this legal basis;
Right to withdraw consent, when consent is the legal basis for processing;
Right to limitation: to request not to process all or part of the Data temporarily, without requesting their erasure;
Right to erasure: to request the deletion of one's Data. This right cannot be applied if the processing of this Data is necessary by virtue of a legal obligation, in particular concerning the obligation to fight against money laundering and the financing of terrorism.
Right to portability: to obtain one's Data in a structured and machine-readable format and to be able to transmit it easily to a third party;
The right to define specific directives for the treatment of your Data after your death.
You can exercise your rights via the contact address mentioned below. If you are unsure of your identity, you may be asked to provide proof of your identity. We may reject any request that is improper or unfounded under the laws and regulations.
When you exercise your rights, we undertake to respond to you as soon as possible and, in any event, within the legal time limits.
To contact us and ask questions about the processing of your Data, send us an email at dpo[at]edflex.com
If you do not receive a satisfactory response from us, you may contact our DPO by mail at the following address
Me Yaël COHEN-HADRIA - 4 rue Jules Lefebvre (We Work), 75009 Paris
If you do not receive a satisfactory response, you may contact the supervisory authority, the Commission Nationale de l'Informatique et des Libertés ("CNIL"), located at 3 Place de Fontenoy - TSA 80715, 75334 PARIS CEDEX 07.