📝Privacy Policy

At N01ZET, the protection of your personal data is a priority. During your use of the site www.n01zet.com (hereafter the 'Site'), we are led to collect personal data concerning you. The purpose of this policy is to inform you about the ways in which we process this data in compliance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter the 'GDPR').

1. Purpose of this privacy policy and identity of the controller

During your use of the Site, the data controller is the company N01ZET, Société par actions simplifiée, (LLP in England) registered in the RCS of Paris under the number 902 420 991 and whose registered office is located at 33 Rue La Fayette - 75009 Paris (hereinafter 'We'). When you transmit personal data to us relating to your employees and correspondents for the creation of accounts on our platform N01ZET (hereinafter the 'Solution'), We intervene as your subcontractor within the meaning of the RGPD, i.e. We process the data on your behalf, for your account and according to your instructions. In this context, you act as the data controller and are required, in accordance with your obligations under the RGPD, to provide appropriate information to your employees and correspondents, users of the Solution.

2. What data do we collect?

Personal data is data that can be used to identify an individual directly or by cross-referencing with other data. We collect data in the following categories:

• Identification data (Last name, first name, email, phone number);

• Data related to your company (SIRET/company name, legal form, company address);

• Connection data (IP address, logs);

Mandatory data are indicated when you provide us with your data. They are marked with an asterisk and are necessary to provide you with our services.

3. On which legal bases, for which purposes and for how long do we keep your personal data?

Purposes	Legal basis	Retention periods
Responding to your information and contact requests	Our legitimate interest in developing and promoting our business	For customers: data is kept for the duration of the contractual relationship. For prospects: data is kept for a period of 3 years from your last contact, for prospecting purposes.
To constitute a file of customers and prospects	Our legitimate interest to develop and promote our activity	For customers: data is kept for the duration of the contractual relationship. For prospects: data is kept for a period of 3 years from your last contact, for prospecting purposes,
To send newsletters, solicitations and promotional messages	Our legitimate interest to keep our customers and prospects loyal and informed of our latest news	The data is kept for 3 years after your last contact with us
To deliver personalized advertising	Your consent	Data is kept for 3 years
Manage requests to exercise rights	Our legitimate interest in responding to your requests and keeping track of them	If we ask you for proof of identity: we keep it only for the time necessary to verify your identity. Once verification is complete, the credential is deleted. If you exercise your right to object to receiving marketing: we keep this information for 3 years.

4. Who are the recipients of your data?

Will have access to your personal data:

(i) The staff of our company;

(ii) Our subcontractors: hosting provider, CRM tool, newsletter sending provider;

(iii) Where applicable: public and private organizations, exclusively to meet our legal obligations.

5. May your data be transferred outside the European Union?

Your data is kept and stored for the duration of the processing on the servers of the company Google Cloud Platform located in the European Union. Within the framework of the tools that we use (see article on the recipients concerning our subcontractors), your data may be transferred outside the European Union. The transfer of your data in this context is secured by means of the following tools:

• either the data is transferred to a country that has been the subject of an adequacy decision by the European Commission, in accordance with Article 45 of the GDPR: in this case, this country ensures a level of protection deemed sufficient and adequate to the provisions of the GDPR;

• or the data is transferred to a country whose level of data protection has not been recognized as adequate to the RGPD: in this case these transfers are based on appropriate safeguards indicated in Article 46 of the RGPD, adapted to each provider, including but not limited to the conclusion of standard contractual clauses approved by the European Commission, the application of binding corporate rules or under an approved certification mechanism.

• or the data is transferred on the basis of one of the appropriate safeguards described in Chapter V of the GDPR.

6. What are your rights regarding your data?

You have the following rights regarding your personal data:

• Right to information: this is the reason we have written this policy. This right is provided for in Articles 13 and 14 of the GDPR.

• Right of access: you have the right to access all of your personal data at any time, under Article 15 of the RGPD.

• Right of rectification: you have the right to rectify your inaccurate, incomplete or obsolete personal data at any time pursuant to Article 16 of the GDPR.

• Right to limitation: you have the right to obtain the limitation of the processing of your personal data in certain cases defined in Article 18 of the GDPR.

• Right to erasure: you have the right to demand that your personal data be erased, and to prohibit future collection of your personal data on the grounds set out in Article 17 of the GDPR.

• Right to lodge a complaint with a competent supervisory authority (in France, the CNIL), if you consider that the processing of your personal data constitutes a violation of the applicable texts. (Article 77 of the GDPR)

• Right to define directives concerning the conservation, deletion and communication of your personal data after your death, in accordance with Article 40-1 of the Data Protection Act.

• Right to withdraw your consent at any time: for purposes based on consent, Article 7 of the GDPR provides that you may withdraw your consent at any time. Such withdrawal will not affect the lawfulness of the processing carried out before the withdrawal.

• Right to portability: under certain conditions specified in Article 20 of the GDPR, you have the right to receive the personal data you have provided to us in a standard machine-readable format and to require its transfer to the recipient of your choice.

• Right to object: under Article 21 of the GDPR, you have the right to object to the processing of your personal data. Note, however, that we may continue to process them despite this objection, for legitimate reasons or the defense of legal rights.

You can exercise these rights by writing to us at the address below. We may ask you on this occasion to provide us with additional information or documents to prove your identity.

7. What cookies do we use?

To learn more about the management of cookies, please consult our Cookie Policy

8. Point of contact for personal data

To learn more about the management of cookies we invite you to consult our Cookies Policy,

Contact email: [e-mail]

Contact address: N01ZET, 33 rue La Fayette 75009 Paris

9. Modifications

We may modify this policy at any time, in particular to comply with any regulatory, legal, editorial or technical developments. These modifications will apply as of the effective date of the modified version. You are therefore invited to regularly consult the latest version of this policy. Nevertheless, we will keep you informed of any significant changes to this Privacy Policy.

Effective date: October 15, 2021.