ARTICLE 1: RECITALS
The purpose of this confidentiality policy is to inform users of the website:
- How their personal data is collected. Personal data is any information that can be used to identify a user. It may include first and last names, age, postal or e-mail address, location or IP address (unlimited list);
- What rights they have on this data;
- Who is responsible for processing the personal data collected and processed;
- Who are the recipients of this personal data;
- What is the website's policy on cookies.
ARTICLE 2: PRINCIPLES GOVERNING THE COLLECTION AND PROCESSING OF PERSONAL DATA
Pursuant to Article 5 of European Regulation 2016/679, personal data is:
- Processed lawfully, fairly, and in a transparent manner in relation to the data subject;
- Collected for specified, explicit and legitimate purposes (see Article 3.1 hereof) and not further processed in a way that is incompatible with those purposes;
- Adequate, relevant and limited to what is necessary for the purposes for which it is processed;
- Accurate and, where necessary, kept up to date. All reasonable steps must be taken to ensure that personal data that is inaccurate, having regard to the purposes for which it is processed, is erased or rectified without delay;
- Kept in a form that allows identification of data subjects for no longer than is necessary for the purposes for which it is processed;
- Processed in such a way as to ensure appropriate security of the data collected, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
Processing is lawful only if, and insofar as, at least one of the following conditions is met:
- The data subject has consented to the processing of his/her personal data for one or more specific purposes;
- The processing is necessary for the performance of a contract to which the data subject is party, or in order to take steps at the request of the data subject prior to entering into a contract;
- The processing is necessary to comply with a legal obligation by which the data controller is bound;
- The processing is necessary to protect the vital interests of the data subject or of another natural person;
- The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
- The processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data prevail, in particular where the data subject is a child.
ARTICLE 3: PERSONAL DATA COLLECTED AND PROCESSED WHEN THE USER BROWSES THE WEBSITE
Article 3.1: Data collected
We collect the following personal data in the course of our business:
- Last name; First name; Telephone, e-mail address
This data is collected and processed for the following purpose(s):
- Answer a question you have asked us
Article 3.2: Data collection method
The data is kept by the data controller in reasonable conditions of security for a period of 12 months.
The company may retain some personal data beyond the above-mentioned periods in order to fulfil its legal or regulatory obligations.
Article 3.3: Data hosting
The RPC Lease website is hosted by:
Tribu and co
76 rue Georges Courteline 37000 Tours, France
Contact: +33 (0)2 47 38 49 74 – contact@tribu-and-co.fr
ARTICLE 4: DATA CONTROLLER AND DATA PROTECTION OFFICER
Article 4.1: Data controller
Personal data is collected by RPC Lease, a simplified joint stock company with a capital of €10,000, registered with the Paris Trade and Companies Register under the number 953 580 909.
The data controller can be contacted:
By postal mail at this address: RPC Lease - 14 Avenue de l'Opéra - 75001 - PARIS France
By e-mail at contact@rpclease.com
ARTICLE 5: THE USER'S RIGHTS WITH REGARD TO DATA COLLECTION AND PROCESSING
Users whose personal data is processed are entitled to the following rights, pursuant to European Regulation 2016/679 and the Data Protection Law (Law 78-17 of 6 January 1978):
- Right of access, rectification and erasure of the data (set out in Articles 15, 16 and 17 of the GDPR respectively);
- Right to data portability (Article 20 of the GDPR);
- Right to restrict (Article 18 of the GDPR) and to object to the processing of the data (Article 21 of the GDPR);
- Right not to be subject to a decision based solely on automated processing;
- Right to determine the subsequent handling of the data after death;
- Right to refer the matter to the competent supervisory authority (Article 77 of the GDPR).
To exercise your rights, please write to RPC Lease.
In order for the data controller to process the user's request, the user may be required to provide certain information, such as: last and first names, e-mail address and account, personal space or subscriber number.
Visit cnil.fr for more information about your rights.
ARTICLE 6: CONDITIONS OF MODIFICATION OF THE PRIVACY POLICY
The publisher of the RPC Lease website reserves the right to modify this Policy at any time to ensure the users of the website of its compliance with the governing law.
Such changes is any shall not affect purchases previously made on the website, which shall remain covered by the Policy in force at the time of purchase and accepted by the user when validating the purchase.
Users are invited to familiarise themselves with this Policy each time they use our services, without our having to formally notify them.