Security and protection of personal data
Definitions
- Publisher: The natural or legal person publishing online communication services for the public.
- The Site: All the websites, internet pages and online services provided by the Publisher.
- The User: The person using the Site and the services.
Nature of the data collected
Within the framework of use of the Sites, the Publisher may collect data about its Users from the following categories:
Civil status, identity, identifying information, etc.
Communication of personal data to third parties
No communication to third parties
Your data is not communicated to any third parties. However, you are hereby informed that it might be divulged in application of a law or regulation, or by virtue of a decision made by a competent regulatory or judicial authority.
Prior notification of the communication of personal data to third parties in the event
of mergers.
Prior notification and the possibility of opting out before and after a merger.
If we were to participate in a merger or acquisition, or any other form of asset sale, we undertake to guarantee the privacy of your personal data and to inform you before it is transferred or made subject to new privacy rules.
Purpose of reusing any personal data collected
To perform customer management activities involving:
- contracts; orders; deliveries; invoices; accounting and particularly management of customer accounts
- a loyalty programme within one or several legal entities
- monitoring customer relations such as carrying out satisfaction surveys, managing complaints and providing an after-sales service
- selecting customers for research, surveys and product tests (unless the persons concerned have given their consent in accordance with the conditions set out in Article 6, these activities must not lead to the establishment of profiles which could reveal any sensitive data - racial or ethnic origins; philosophical, political, union or religious opinions; sexual habits or health of the individuals concerned)
To canvass for new customers:
- managing canvassing technical activities (including, in particular, technical operations such as standardisation, enrichment and deduplication)
- selecting individuals for customer retention, canvassing, surveys, product tests and promotional work. Unless the persons concerned have given their consent in accordance with the conditions set out in Article 6, these activities must not lead to the establishment of profiles which could reveal any sensitive data (racial or ethnic origins; philosophical, political, union or religious opinions; sexual habits or health of the individuals concerned)
- invitations
To formulate trade statistics
To organise competitions, lotteries and any promotional activities, excluding online gambling subject to the authorisation of the Online Gaming Regulations Authority
To manage outstanding debts and complaints, as long as this does not involve breaches and/or does not mean that an individual cannot benefit from a right, service or contract
To manage opinions about products, services or content
Data aggregation
Aggregation with non-personal data
We may publish, divulge and use aggregated information (information relating to all our Users or specific groups or categories of User which we combine so that an individual User cannot be identified or cited) and non-personal information for the purposes of analysing the sector and the market, demographic profiling, promotional and advertising purposes and other business purposes.
Aggregation with personal data available on the User's social media accounts
If you connect your account to another providing a different service for crossposting purposes, the aforementioned service may provide us with your profile and login details, as well as any other information with regard to which you have authorised disclosure. We can combine information about all our other Users, groups and accounts with the personal data available about the User.
Collection of identity data
Free access
Prior registration or identification is not required to access the Site. There is no requirement to provide personal data (surname, first name, address, etc.) when visiting the Site. No personal data is recorded just for visiting the Site.
Collection of personally identifiable data
Use of a username purely to access services
We only use your electronic identifiers for and during execution of the contract.
Collection of device data
Collecting profile data and technical data to provide services
Some technical data from your device is automatically collected by the Site. In particular, this includes your IP address, your Internet provider, hardware configuration, software configuration, browser type and language, etc. This data is required in order to supply services.
Collecting technical data for advertising, business and statistical purposes
Your device's technical data is automatically collected and recorded by the Site for advertising, business and statistical purposes. This information helps us customise and continually improve your experience on our Site. We do not collect or retain any personal data (surname, first name, address, etc.) which might be attached to a piece of technical data. The data collected might be resold to third parties.
Cookies
Cookie retention period
In accordance with the recommendations of France’s Data Protection Commission (CNIL), cookies can be retained for a maximum of 13 months after they are first placed in the User's device. The same is true of the validity of the User's agreement to use of these cookies. Cookie lifetimes are not extended upon each visit. A User must therefore renew their consent after that time.
Purpose of cookies
Cookies can be used for statistical purposes, and particularly to optimise User services, by processing information showing how often a page is accessed, page customisation, any operations performed and any information consulted.
Please note that the Publisher may place cookies on your device. A cookie records information about how a service was navigated (the pages you viewed, the data and time of your visit, etc.) which we can read during subsequent visits.
User’s right to refuse cookies and deactivation leading to a reduced service
You acknowledge that you have been informed that the Publisher may use cookies and you authorise it to do so. If you would prefer cookies not to be used on your device, most browsers allow you to deactivate cookies in the settings options. However, please note that some services may no longer work correctly.
Potential marrying of cookies with personal data to enable the service to function
The Publisher may need to collect browsing data via cookies.
Retention of technical data
Technical data retention period
Technical data is only retained for the period strictly necessary to carry out the activities referred to above.
Retention period for personal data and anonymisation
Retention of data during the contractual relationship
In accordance with Article 6-5° of French Data Protection Law No.° 78-17 of 6 January 1978, personal data to be processed is not retained beyond the time required to execute the obligations defined upon conclusion of the contract or the predefined duration of the contractual relationship.
Retention of anonymised data beyond the contractual relationship / after an account has been deleted.
We retain personal data for the period strictly required to carry out the activities described in these Terms and Conditions. Beyond that time, it shall be anonymised and retained exclusively for statistical purposes. It shall not lead to any operations of any kind.
Removal of data after deletion of an account
Data purging processes are put in place to ensure that data is effectively deleted as soon as the retention or archiving period required to fulfil any determined or imposed purposes has come to an end. Further, in accordance with French Data Protection Law No.° 78-17 of 6 January 1978, you have the right to delete your data. You may exercise this right at any time by contacting the Publisher.
Deleting data after 3 years’ inactivity
For security reasons, if you have not logged onto the Site after a period of 3 years you will receive an email inviting you to log on as soon as possible. If not, you data will be deleted from our database.
Deleting an account
Deleting an account upon request
A User may delete their Account at any time simply by sending a request to the Publisher OR via the Account Deletion menu in the Account settings, where applicable.
Deleting an account in the event of a breach of the Terms and Conditions
If any of the provisions in these Terms and Conditions, or any other document incorporated herein by reference, are breached the Publisher reserves the right to terminate or restrict your use of and access to services, your account and all Sites, without any prior notice and at their sole discretion.
Instructions in the event of a security breach detected by the Publisher
User information in the event of a security breach
We undertake to implement all the appropriate technical and organisational measures to guarantee an appropriate level of security vis-à-vis risks of accidental, unauthorised or illegal access, disclosure, alteration, loss or destruction of any of your personal data. If we become aware that any of the personal data stored on our servers or those of our service providers has been accessed illegally, or unauthorised access has occurred resulting in an occurrence of the risks identified above, we undertake to:
- Notify you of the incident as soon as possible;
- Examine the causes of the incident and inform you;
- Take the necessary steps within a reasonable timeframe to reduce any negative effects or damage which could result from the aforementioned incident.
Limitation of liability
Under no circumstances may the commitment defined in the previous point as regards notification in the event of a security breach be understood to be recognition of fault or liability as regards the occurrence of the incident in question.
Transfer of personal data overseas
No transfer outside the European Union
The Publisher undertakes not to transfer its Users’ personal data outside the European Union.
Modification of the Terms and Conditions and the Privacy Policy
In the event of modification of these Terms and Conditions, a commitment not to substantially reduce the level of privacy without prior notification to the persons involved
We undertake to inform you if there is a substantial change to these Terms and Conditions and we undertake not to substantially reduce the level of privacy of your data without notifying you and obtaining your consent.
Applicable law and appeal mechanisms
Arbitration clause
You expressly agree that any disputes which might stem from these Terms and Conditions, and particularly their interpretation or execution, shall fall within the jurisdiction of an arbitration procedure subject to the regulations of the arbitration platform chosen by mutual agreement and which you shall support unreservedly.
Data portability
Data portability
The Publisher undertakes to provide you with the possibility of ensuring all your data is returned to you upon request. The User is therefore guaranteed better control of their data and retains the possibility of reusing it. This data must be provided in an open and easily reusable format.
This site, like many others, uses small files called cookies to help us personalize your experience. Learn more about cookies and how you can control them.
What is a cookie?
A cookie is a small file that may be placed on your device that allows us to recognize and remember you. It is sent to your browser and stored on the hard drive of your computer or tablet or mobile device. When you visit our sites, we may collect information about you automatically via cookies or similar technology.
How do we use cookies?
We use cookies in a variety of ways to enhance your experience on our site, including:
- Staying connected;
- Understanding how you use our site;
- Show you content that is relevant to you;
- Show you products and services that interest you.
Cookie Policy :
Definition:
Cookies are text files that are deposited on a user's terminal (computer, tablet, smartphone, etc..) at the time of viewing content to collect standard Internet history and behavior information. Cookies do not directly identify a user, but identify a browser or terminal.
Use and storage:
When you visit our (website/application) we may collect information about your activity and preferences through cookies.
We use different cookies for different purposes and the following table describes in detail how they work:
| Cookie | Éditeur/Domaine | Durée | Description |
|---|
| external_no_cache |
.qista.com |
1 hour |
This cookie is used to check and record whether or not a visitor's browser allows caching of a page. This cookie is strictly necessary and is associated with the Magento e-commerce platform. |
| SRV |
.qista.com |
12 months |
|
| frontend_cid |
.qista.com |
1 hour |
This cookie is used to check and record whether or not a visitor's browser allows caching of a page. This cookie is strictly necessary and is associated with the Magento e-commerce platform. |
| frontend |
.qista.com |
1 hour |
This cookie is used to manage user sessions. This cookie is associated with Magento and is necessary for the operation of the site. |
| __atssc |
.qista.com |
1 year |
This cookie is used by the Addthis sharing service. It is used to update the share count. |
| __atuvc |
.qista.com |
1 year |
Used to display and load a content sharing bar on the main social networks |
| _gat |
.qista.com |
1 minute |
This cookie is set by Google Universal Analytics to restrict the rate of requests and thus limit data collection on high traffic sites. |
| _ga_8E0TDXERDH |
.qista.com |
24 months |
This cookie is set by Google Analytics. |
| _ga |
.qista.com |
24 months |
The _ga cookie, installed by Google Analytics, calculates visitor, session, and campaign data and also tracks site usage for the site analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognize unique visitors. |
| _gid |
.qista.com |
1 day |
Set by Google Analytics, the _gid cookie stores information about how visitors use a website, while also creating a report to analyze website performance. Some of the data collected includes the number of visitors, their source and the pages they visit anonymously. |
| _gcl_au |
.qista.com |
3 months |
Provided by Google Tag Manager to test the advertising effectiveness of websites using their services. |
| _ga_K4D5P0VT1D |
.qista.com |
24 months |
This cookie is set by Google Analytics. |
| _hjSession_669679 |
.qista.com |
30 minutes |
|
| _hjSessionUser_669679 |
.qista.com |
12 months |
|
| _hjFirstSeen |
.qista.com |
30 minutes |
Hotjar sets this cookie to identify the first session of a new user. It stores a true/false value, indicating whether this was the first time Hotjar saw this user. |
| _hjIncludedInPageviewSample |
.qista.com |
2 minutes |
Hotjar sets this cookie to know if a user is included in the data sampling defined by the site's page view limit. |
| _hjIncludedInPageviewSample |
.qista.com |
30 minutes |
Hotjar sets this cookie to detect a user's first page view session. This is a True/False indicator set by the cookie. |
| test_cookie |
.doubleclick.net |
15 minutes |
The test_cookie is defined by doubleclick.net and is used to determine if the user's browser supports cookies. |
| _fbp |
.qista.com |
3 months |
Facebook sets this cookie to display relevant ads to users by tracking user behavior on the web on sites that have the Facebook pixel or Facebook social plug-in. |
| fr |
.facebook.com |
3 months |
Facebook sets this cookie to display relevant ads to users by tracking user behavior on the web on sites that have the Facebook pixel or Facebook social plug-in. |
| ysc |
.youtube.com |
session |
The YSC cookie is set by Youtube and is used to track views of embedded videos on Youtube pages. |
| VISITOR_INFO1_LIVE |
.youtube.com |
5 months, 24 days |
Cookie set by YouTube to measure bandwidth that determines whether the user gets the new or old player interface. |
| yt-remote-device-id |
.youtube.com |
session |
YouTube sets this cookie to store the user's video preferences using the embedded YouTube video. |
| yt-remote-connected-devices |
.youtube.com |
session |
YouTube définit ce cookie pour stocker les préférences vidéo de l'utilisateur utilisant la vidéo YouTube intégrée. |
Disable third-party cookies on your browser
Some browsers such as Google Chrome or Mozilla Firefox have the ability to block third-party cookies. This blocking limits certain functionalities and may generate errors/bugs.
For more information you can consult this guide of the CNIL: https://www.cnil.fr/fr/cookies-les-outils-pour-les-maitriser
Disable third-party cookies on Google Chrome, Microsoft Edge and other Chromium browsers: https://support.google.com/accounts/answer/61416
Disable third-party cookies on Mozilla Firefox and other Gecko browsers: https://support.mozilla.org/fr/kb/cookies-tiers-et-protection-contre-pistage
