The term "ISD-SA" is used in this document to refer to any company in the ISD-SA group.
In general, you can visit the ISD-SA website without communicating any personal information about yourself. In any case, you are in no way obliged to transmit this information to ISD-SA.
Nevertheless, in case of refusal, you may not be able to benefit from certain information or services that you have requested. In this respect, ISD-SA may in some cases ask you to provide your surname, first name, e-mail address, telephone number, company and position (hereinafter your "Personal Information"). By providing this information, you expressly accept that it will be processed by ISD-SA, for the purposes indicated in point 2 below and for the purposes indicated at the end of each form.
In accordance with the General Data Protection Regulation (GDPR) adopted by the European Parliament on 14 April 2016, and the French Data Protection Act of 6 January 1978 as amended, ISD-SA informs you of the following:
Identity of the controller
The data controller is ISD-SA, whose registered office is at 42 bis Rue Berthier, 78000 Versailles, France.
Purposes of the processing
ISD-SA may process your Personal Information:
- for the purpose of providing you with the information or services you have requested (in particular: the sending of newsletters, commercial offers, etc.); and/or
- for the purpose of contacting you about various ISD-SA related events, including product updates, services and customer support.
Only ISD-SA is the recipient of your Personal Information. This information, whether in individual or aggregated form, is never transmitted to a third party, notwithstanding the subcontractors that ISD-SA uses (you will find more information about them in point 7 below). Neither ISD-SA nor any of its subcontractors market the personal data of visitors and Users of its Site.
Your Personal Information is kept by ISD-SA only for the time corresponding to the purpose of the collection as indicated in 2 above, which will in any case not exceed 1 year.
Computer and Freedom Rights
You have the following rights regarding your Personal Information, which you can exercise by writing to us at email@example.com
Right of access and communication of data
You have the right to access your Personal Information.
However, due to the obligation of security and confidentiality in the processing of personal data which is incumbent on ISD-SA, you are informed that your request will be processed subject to you providing proof of your identity, in particular by producing a scan of your valid identity document.
ISD-SA informs you that it will be entitled, if necessary, to oppose the manifestly abusive requests (by their number, their repetitive or systematic character).
To help you in your approach, in particular if you wish to exercise your right of access by means of a written request to the postal address mentioned in point 1, you will find on the CNIL website a model letter drawn up by the Commission Nationale de l'Informatique et des Libertés (the "CNIL").
Right to rectify data
Under this right, the law entitles you to request the rectification, updating, blocking or deletion of data concerning you which may be inaccurate, erroneous, incomplete or obsolete.
You can also define general and specific directives concerning the fate of personal data after your death. Where applicable, the heirs of a deceased person may require that the death of their relative be taken into account and/or that the necessary updates be made.
To help you in your approach, particularly if you wish to exercise your right to rectification on your own behalf or on behalf of a deceased relative, by means of a written request to the postal address mentioned in point 1, you will find a model letter drawn up by the CNIL on its website.
Right to object
The exercise of this right is only possible in one of the following two situations:
- Where there are legitimate reasons for exercising this right; or
- When the exercise of this right aims to prevent the data collected from being used for commercial prospecting purposes.
To help you in your approach, in particular if you wish to exercise your right to object by means of a written request sent to the postal address indicated in point 1, you will find a model letter drawn up by the CNIL by clicking on the following link
ISD-SA undertakes to process your request for access, rectification or opposition or any other additional request for information within a reasonable period of time, which may not exceed 1 month from receipt of your request.
Authorised service providers and transfer to a third country of the European Union
ISD-SA informs you that it has recourse to its authorised service providers to facilitate the collection and processing of the data that you have communicated to us. These service providers may be located outside the European Union and have access to the data collected through the various forms on the Site (with the exception of the form allowing you to exercise your rights to Information Technology and Civil Liberties, which is proposed and operated by ISD-SA).
ISD-SA has previously ensured that its service providers have implemented adequate guarantees and respected strict conditions regarding confidentiality, use and protection of data. In particular, vigilance has been exercised to ensure that there is a legal basis for any transfer of data to a third country.
Complaint to the competent authority
If you consider that ISD-SA is not complying with its obligations with regard to your Personal Information, you may submit a complaint or a request to the competent authority. In France, the competent authority is the CNIL to which you can send a request electronically by clicking on the following link: https://www.cnil.fr/fr/plaintes/internet