Definitions
Publisher: Benilar, publisher of online public communication services.
Site: All websites, web pages and online services available through www.benilar.com.
User: Any person using the Site and its services.
1 — Nature of data collected
When the Site is used, the Publisher may collect the following categories of User data:
- Connection data (IP addresses, event logs, etc.)
- Location data (movements, GPS and GSM data, etc.)
2 — Disclosure of personal data to third parties
No disclosure to third parties
Your data is not disclosed to third parties. You are nevertheless informed that it may be disclosed pursuant to a law or regulation, or under a decision by a competent regulatory or judicial authority.
3 — Prior information in the event of a merger or acquisition
Prior opt-in before data is transferred following a merger or acquisition
If we take part in a merger, acquisition or other form of asset transfer, we undertake to obtain your prior consent before transferring your personal data and to maintain the level of confidentiality to which you consented.
4 — Data aggregation
Aggregation with non-personal data
We may publish, disclose and use aggregated information — combined so that an individual User can no longer be identified or mentioned — and non-personal information for industry and market analysis, demographic profiling, promotional, advertising and other commercial purposes.
Aggregation with personal data available through the User’s social accounts
If you connect your account to another service for cross-posting, that service may provide profile, connection and other information whose disclosure you have authorized. We may aggregate information relating to our Users, groups and accounts with personal data available about the User.
5 — Collection of identity data
Open access
Viewing the Site does not require registration or prior identification. It can be accessed without providing nominative data such as your first name, surname or address. We do not record nominative data merely because you view the Site.
6 — Collection of identification data
Use of the User’s identifier only to access services
We use your electronic identifiers only for and during performance of the contract.
7 — Collection of device data
Technical and profiling data collected to provide the service
Certain technical data from your device is collected automatically by the Site. This may include your IP address, Internet service provider, hardware and software configuration, browser type and language. Collection of this data is necessary to provide the services.
Technical data collected for advertising, commercial and statistical purposes
Technical data from your device is automatically collected and stored by the Site for advertising, commercial and statistical purposes. This information helps us personalize and continually improve your experience. We do not collect or retain nominative data that may be attached to technical data. The collected data may be sold to third parties.
8 — Cookies
Cookie retention period
In accordance with CNIL recommendations, cookies are retained for no more than 13 months after they are first placed on the User’s device, as is the validity period of the User’s consent. Cookie life is not extended with each visit and consent must therefore be renewed after that period.
Purpose of cookies
Cookies may be used for statistical purposes, in particular to optimize services based on access frequency, page personalization, actions performed and information viewed. The Publisher may place cookies on your device recording information about your navigation, including pages viewed and the date and time of access.
User’s right to reject cookies
If you do not want cookies to be used on your device, most browsers allow you to disable them through their settings.
9 — Retention of technical data
Technical data is retained only for the period strictly necessary to achieve the purposes described above.
10 — Personal data retention and anonymization
Retention during the contractual relationship
In accordance with Article 6-5 of French Law No. 78-17 of 6 January 1978 on information technology, files and civil liberties, personal data is not retained beyond the time required to perform the obligations defined when the contract was entered into or beyond the predetermined contractual relationship.
Anonymized data after the contractual relationship or account deletion
We retain personal data only for the period necessary for the purposes described in this Policy. Beyond that period, it will be anonymized and retained exclusively for statistical purposes.
Deletion following account deletion
Data purge mechanisms are implemented to ensure effective deletion when the necessary retention or archiving period has expired. You also have the right to request deletion at any time by contacting the Publisher.
Deletion after three years of inactivity
For security reasons, if you have not authenticated on the Site for three years, you will receive an email asking you to connect promptly, failing which your data will be deleted from our databases.
11 — Account deletion
Deletion upon request
The User may delete their Account at any time by requesting deletion from the Publisher or, where applicable, using the account deletion menu in Account settings.
Deletion following a breach of the Privacy Policy
If one or more provisions of this Policy or any incorporated document is breached, the Publisher reserves the right to terminate or restrict, without prior notice and at its sole discretion, your use of and access to the services, Account and Site.
12 — Security breaches identified by the Publisher
Informing the User
We undertake to implement appropriate technical and organizational measures ensuring a level of security appropriate to the risks of accidental, unauthorized or unlawful access, disclosure, alteration, loss or destruction. If we become aware of unlawful or unauthorized access to personal data stored on our servers or those of our providers, we undertake to:
- Notify you of the incident as quickly as possible;
- Investigate its causes and inform you;
- Take reasonable measures to reduce any adverse effects and harm.
Limitation of liability
The commitments relating to security breach notification may not be interpreted as an admission of fault or liability concerning the incident.
13 — International transfers of personal data
No transfer outside the European Union.
The Publisher undertakes not to transfer Users’ personal data outside the European Union.
The Publisher transfers Users’ personal data to countries recognized as providing an equivalent level of protection.
The Publisher transfers Users’ personal data outside countries recognized by the CNIL as providing sufficient protection: the Publisher has obtained CNIL authorization for such transfer.
14 — Changes to this Privacy Policy
If this Policy is changed, we undertake not to substantially reduce the level of confidentiality without first informing the persons concerned. We will inform you of any material change and will not substantially reduce the confidentiality of your data without informing you and obtaining your consent.
15 — Governing law and remedies
Arbitration clause
You expressly agree that any dispute arising from this Policy, including its interpretation or performance, will be subject to arbitration under the rules of a platform chosen by mutual agreement, to which you will adhere without reservation.
16 — Data portability
Data portability
The Publisher undertakes to offer you the ability to retrieve all data concerning you upon request. The User retains greater control over their data and can reuse it. The data will be provided in an open, readily reusable format.