Legals
The company KAZAAR (hereinafter "Kazaar") is committed to ensuring that the processing of personal data carried out in the course of its activities complies with European Regulation No. 2016/679, known as the General Data Protection Regulation (GDPR).
In this privacy policy (the " Policy"), we explain how and why we use your personal data, what your rights are and how to exercise them.
- What is personal data? Who does this Privacy Policy apply to ?
Personal data ("Personal Data" or "Data") means any information relating to an identified or identifiable natural person, directly or indirectly, in particular by reference to an identifier such as:
- a surname, a first name, an email address;
- an online identifier, an IP address;
- location data or any other element that could identify you.
- Who does this Privacy Policy apply to?
This Policy applies to all our online services and to third parties.
It is intended to inform:
- Website users;
- Prospective clients;
- Clients;
- Suppliers and partners
- Job applicants.
- Who collects your personal data?
The data controller, within the meaning of the GDPR, is:
KAZAAR
Legal form: SASU, Single-shareholder simplified joint-stock companies
Registered office: 10 RUE BLANQUI, 93400 SAINT-OUEN-SUR-SEINE
Contact email: contact@kazaar.com
- How do we collect your personal data?
Website user data
Data is collected via:
- online contact forms;
- browsing the Website, in particular through the use of cookies.
Prospect and client data
Data is collected:
- when requesting information, quotes or commercial proposals;
- in the context of entering into and performing contracts;
- through commercial exchanges (email, telephone, forms).
Candidate data
Depending on the case, data is collected via:
- online recruitment platforms;
- professional social networks;
- our partner recruitment agencies;
- our recruitment section accessible on the Website.
- Why do we collect your personal data?
Website user data
For more information, please consult our Cookie Management Policy.
Prospect data
*The legal basis varies depending on whether the prospecting is addressed to professionals or to individuals.
Client and supplier data
Candidate data
- Are you required to provide your personal data?
Some data is necessary for the management of our services and contractual relationships.
Mandatory fields are marked with an asterisk "*".
If you fail to provide this data, some requests may not be processed.
- How long do we retain your personal data?
We retain your Personal Data for the period strictly necessary to fulfil the purposes for which it was collected and processed.
Where applicable regulations impose a specific retention period, in particular for accounting, tax, social or commercial purposes, your Data is retained for the minimum period required by applicable local legislation.
At the end of the applicable periods:
- Data is deleted; or
- irreversibly anonymised; or
- archived securely where necessary for the establishment, exercise or defence of legal claims.
Indicative retention periods :
- With whom do we share your personal data?
Your data may be shared with:
- authorised internal departments, within the scope of their respective responsibilities;
- subsidiaries and entities of the Altavia Group, where necessary for the internal organisation of the group, the pooling of certain services (IT, support, administrative management) or the management of commercial relationships;
- our technical service providers (hosting, IT maintenance, CRM tools, IT support, etc.);
- our advisors (accountants, lawyers, auditors);
- the Data Protection Officer (DPO), in the exercise of their supervisory, advisory and compliance duties as provided for in Article 39 of the GDPR;
- administrative or judicial authorities where required by law or where a legally founded request is made to us.
Group entities and our service providers act, as applicable, as separate data controllers or processors within the meaning of the GDPR. When acting as processors, they provide sufficient guarantees regarding security, confidentiality and personal data protection and bound by contractual commitments in accordance with Article 28 of the GDPR.
- Is your personal data transferred outside the European Union?
We are committed to limiting as far as possible the transfer of personal data outside the European Union.
To date, your personal data is primarily processed and hosted within the European Union. However, in certain strictly regulated cases, transfers of Data to countries outside the European Union may be necessary, in particular in connection with the use of certain tools, specific technical services or intra-group transfers.
In the event that such transfers are implemented, we ensure that they are governed by appropriate safeguards in accordance with Articles 44 et seq. of the GDPR, in particular through the implementation of appropriate contractual mechanisms (such as the standard contractual clauses adopted by the European Commission), as well as the application of enhanced technical and organisational measures designed to guarantee a level of protection equivalent to that required within the European Union (information system security, access control, encryption, etc.).
Any transfers of Data within the group to which we belong are also strictly regulated and carried out in compliance with the requirements of the GDPR, in order to ensure the confidentiality, integrity and security of your Personal Data.
v
- What security measures have we taken to protect you personal data?
Nous nous engageons à mettre en œuvre toutes les mesures techniques et organisationnelles nécessaires au respect de la protection de vos Données Personnelles (analyse d’impact, audit, politique de gestion des habilitations et des accès, cartographie applicative).
Nous procédons notamment à des audits de nos prestataires afin de nous assurer de la bonne mise en œuvre de mesures de sécurité permettant de garantir l’intégrité, confidentialité et disponibilité de vos Données.
Nos contrats avec nos prestataires incluent une partie dédiée à la protection des Données, en conformité avec les lois applicables.
- What are your rights?
In accordance with applicable regulations, you have the following rights:
- Right of access: Request a copy of the Data concerning you held by the Data Controller
- Right of rectification: Correct or complete inaccurate Data concerning you
- Right of erasure: Request the erasure of all or part of your Data
- Right to object: Object to our processing of your Data, including in the context of profiling activities, where the processing is based on our legitimate interest. This right does not apply to processing that you have initiated yourself (contact request, quote request), for which you may instead exercise your right of erasure above.
- Right of withdrawal: Withdraw your consent at any time
- Right to restriction of processing: Restrict the use of your Data while your request is being processed
- Right to data portability: Request to receive part of your Data processed by us in a machine-readable format.
Where a Data breach likely to result in a high risk to your rights and freedoms is detected, you will be informed of such breach without undue delay.
- How to exercise your rights?
These rights and directives may be exercised by writing to us:
- by post to the following address:
KAZAAR
10 RUE BLANQUI, 93400 SAINT-OUEN-SUR-SEINE
- by email: dpo@altavia-group.com
Depending on the type of request and in case of doubt about your identity, we may ask you to verify your identity upon receipt of your request.
A response will then be sent to you within 1 month of receipt of the request. In certain cases, related to the complexity of the request or the number of requests, this period may be extended by 2 months.
You also have the right to lodge a complaint with CNIL, the competent data protection authority in France, via the following website:
- Amendment of this Privacy Policy
We may update this Policy by publishing a new version on our Website, in which case you will be informed during your next visit to the Website.
- Contact
For any questions regarding the Privacy Policy, you may contact us by the follonwing means :
- Par email : dpo@altavia-group.com
- By post:
KAZAAR
10 RUE BLANQUI, 93400 SAINT-OUEN-SUR-SEINE