01/03/2022 – This confidentiality policy defines and advises you how Bretagne Commerce International uses and protects any information you may communicate to us when using our website or availing of our services.
This confidentiality policy may be modified or supplemented at any time by Bretagne Commerce International, mainly with a view to complying with any changes in legislation, regulations, case law or technology. The date of updating will be stated clearly at the top of the page. It is therefore up to you to consult this policy regularly to become aware of possible modifications.
The personal data gathered on our website or when using our services are processed by Bretagne Commerce International in its role as processing manager.
BRETAGNE COMMERCE INTERNATIONAL
Association governed by the Law of 1901
35 place du Colombier 35012 Rennes France
Tel.: +33 2 99 25 04 04
What are the purposes and bases for the personal data processing carried out?
When you send us your personal data, you are advised that they will be processed by Bretagne Commerce International for the purposes stated at the end of the collection form and detailed in this confidentiality policy. Every one of these purposes has a legal basis determined in accordance with Article 7 of the General Data Protection Regulation (GDPR).
Based on our legitimate interest, we carry out the following processing:
- Responding to your contact requests submitted to Invest in Bretagne (supporting a project, for example);
- Carrying out our information and communication activities with you and sending you information (information e-mails on Invest in Bretagne and its activities, information on events organised or attended by Bretagne Commerce International);
- Producing anonymous statistics on visits to our website that can help us to improve our services.
Lastly, Bretagne Commerce International may process your personal data in order to comply with its legal and regulatory obligations (mainly fiscal and accounting obligations).
Which personal data are collected?
Bretagne Commerce International does not collect so-called “sensitive” data, i.e. relating to racial or ethnic origin, political, philosophical or religious opinions, trade union membership, health or sexual orientation.
You are not obliged to provide us with this information. Any mandatory data is indicated at collection by an asterisk. Thus, you can visit the Invest in Bretagne website without providing us with personal information. However, you may then be unable to avail of all the information and services on offer.
Please note that any links to other websites found on the Invest in Bretagne website have their own confidentiality policy which we suggest you view. Also, we refuse any liability relating to the use of your personal data by these third-party websites.
Personal information storage area
Your personal information is stored on our website in a secure IT system specific to Bretagne Commerce International (CRM), with access limited to our employees. Your personal data may also be stored by our sub-contractor partners. For further information, please refer to the heading “Who receives the personal information collected?” .
Your personal information is stored by Bretagne Commerce International as long as required for the purpose for which it has been collected. We determine the storage times for your personal data based on the applicable legal provisions (recommendations from the CNIL (French Data Protection Agency), Post and Electronic Communications Code, for example).
Any personal information collected for information and collection is stored for three years with effect from the last contact. Once the three years have elapsed and provided no exchange has taken place, we shall contact you to find out whether you wish to continue to receive information on our services.
Who receives the personal information collected?
Your personal data are primarily intended for Bretagne Commerce International internal services. However, they may be sent to sub-contractors we use to provide you with the services offered on our website, in accordance with the purposes stated above.
Thus, we may transfer your data to the following recipient category – our service provider who carries out our Microsoft Dynamics for Marketing e-mailshots.
Your rights regarding your personal information
In accordance with the General Data Protection Regulation adopted by the European Parliament on 14 April 2016 and the French Data Protection Act of 6 January 1978 amended, you have several rights regarding your personal information:
- You may remove your consent at any time;
- You have a right of access and portability of your information. As such, you may request a summary of personal data collected;
- You have a right to rectify information collected by Bretagne Commerce International. As such, you may request that information collected is rectified, updated or locked if it proves to be inaccurate, erroneous, incomplete or obsolete;
- You have a right to be forgotten. As such, you may request the removal of your personal information. This will only be possible if there is no legal obligation preventing it;
- You have a right to oppose the processing of your data under the conditions of Article 21 of the GPDR.
We may carry out identity checks to ensure the confidentiality and safety of your data. Thus, in some cases, you may be asked to produce a copy of proof of identity. This will be deleted once the check has been made.
You can exercise your rights by contacting our Data Protection Officer at the following address firstname.lastname@example.org. Bretagne Commerce International undertakes to respond to your requests within a reasonable time of no more than one month from receipt of your request, unless circumstances justify an extension to this period (complexity or number of requests, for example).
If, after contacting us, you feel that your request has not been met, you have the right to submit a claim to the French Data Protection Agency (CNIL).