Personal data protection policy, RGPD

The VITRINEMEDIA Group is concerned about the confidentiality and protection of its users' personal data. In the interest of transparency, VITRINEMEDIA has adopted a Personal Data Protection Policy relating to identifiable data collected or processed by VitrineMedia.

VITRINEMEDIA has updated its Personal Data Protection Policy in accordance with the applicable regulations, in particular Regulation (EU) 2016/679 of 27 April 2016 (RGPD) and Law No. 78-17 of 6 January 1978, as amended, relating to information technology, files and freedoms (Loi Informatique et Libertés).

Any processing of personal information communicated to VitrineMedia is carried out under the responsibility of VITRINEMEDIA, whose contact details are:

• VITRINEMEDIA
• 50 Route de la Reine
• 92100 Boulogne-Billancourt 
• France

For any questions, the Data Protection Officer (DPO) can be contacted. Contact details are given in Article 7.

VITRINEMEDIA may also process your data as a subcontractor of its customers who are themselves responsible for processing it. This personal data protection policy only applies to cases where VitrineMedia is responsible for the processing.

Depending on the case, VITRINEMEDIA may collect two types of information during visits to the group's websites.

The first type corresponds to the personal data provided by users during:

• Getting in touch, requesting additional information,
• Downloading a digital medium (e.g.: Product catalog, white paper, etc.).

Different information will then be collected depending on the case, such as:

• Identification data: surname, first name, IP address;
• Contact details: postal address, e-mail, telephone number, company name;
• Data relating to interactions between the user and VITRINEMEDIA;
• Data relating to the processing of e-mails and communications addressed to you, such as the date or time of sending.

The second type of information is statistical in nature and is intended to optimize the user experience of the company's websites. 

This second type of information includes IP addresses (showing the network connection), the pages visited and the path taken by the visitor on our sites. We may record data such as the browser and operating system you are using, but no personally identifiable data is collected.

If you decide to voluntarily provide us with personal information, it will be stored in our secure databases (or those of our service providers such as our web service providers) in accordance with appropriate procedures to protect the access and integrity of such information. 

The data you have entered on the website can only be viewed by authorized persons within the VITRINEMEDIA Group, who are in charge of the website, support and hosting operations of this website. 

The persons authorized to access the relative data of users of the site are: 

• The marketing team
• The sales team

The information you provide will be stored and used only for purposes approved by you.

We remind you that we do not share contact information with other third parties.

When you visit the VitrineMedia site, we may use various cookies, subject to your choices and the technical parameters in place on your Internet browser, notably for advertising purposes. You can configure the cookies allowed in the consent banner.

A cookie is a text file that can be saved, subject to your choices, in a dedicated space on your device's storage (computer, tablet, etc.) when you consult an online service using your browser software.

It is transmitted by a website server to your browser. Each cookie is assigned an anonymous identifier. The cookie file allows its issuer to identify the device in which it is stored during the validity or registration period of the cookie concerned. A cookie does not directly trace back to a natural person.

VITRINEMEDIA uses three types of cookies:

• Session or preference cookies, which are essential for navigation and the proper functioning of the site,
• Cookies for audience measurement,
• Advertiser cookies.

The purpose of these cookies is to:

• Measure the number of users and analyze how our services are being used, in order to make them easier to use, improve them and ensure that they meet the needs of our customers.
• Measure navigation paths on our sites for statistical purposes and to allow VitrineMedia to better understand its visitors. VitrineMedia uses Google Analytics, Google Ads, Hotjar and Matomo solutions, configured according to the recommendations of the CNIL to be in compliance with the GDPR.
• Advertiser cookies are intended to display advertisements that are relevant and interesting to the individual user.
• Cookies expire and are purged no later than 24 months after being placed on the user's computer or mobile device. 

You can access the privacy policy of Google solutions: 
https://policies.google.com/technologies/partner-sites

The following is a list of the providers used that are necessary for the proper functioning of the website:

• CloudFlare, this company allows secure web browsing and faster access to pages.
• Google Recaptcha, a module to identify human visitors and avoid web attacks. 
• Stripe, we use Stripe to ensure card payments on our online shop VM Shop
• Ausha, a tool to broadcast the podcasts we create on the website and on the various streaming platforms.

If you do not wish to receive cookies, you can set your browser to refuse them automatically or customise your preferences from our consent banner.

VitrineMedia is likely to collect your data via:

• The VITRINEMEDIA Group's websites (in particular when creating a customer account, subscribing to a service);
• Specialized sites for sending an application (example: Indeed, Monster, etc.);
• Social networks: via the buttons on the Facebook, Twitter and LinkedIn pages, you can follow and/or like VITRINEMEDIA publications. The information provided by these actions may be used by the social network concerned. We encourage you to consult the privacy policy of these networks for details of the possible consequences;
• Exchanges with us, whether you are a customer or a third party;
• The other entities of the VITRINEMEDIA Group in order to provide you with continuous technical support 24 hours a day. The different entities of the VITRINEMEDIA Group share among themselves certain customer information related to its services. Not all VitrineMedia Group entities are located in countries that offer a level of personal data protection equivalent to that expected by the GDPR. However, the personal data protection policy of each entity is identical and respects personal data rights.

VITRINEMEDIA may process your personal data based on a legal obligation, your consent, a contractual relationship with you and/or for the pursuit of its legitimate interests. 

VITRINEMEDIA collects and processes your personal data for various purposes:

• Communicate with you by email or regular mail as part of the provision of its services;
• Provision of services;
• Fight against fraud; when ordering, supporting documents may be requested to limit fraud.
• Send invitations to events, satisfaction surveys, newsletters if you wish;
• Meet legal or administrative obligations;
• Anonymous statistical analysis;
• In the event that your personal data are processed for different purposes, VitrineMedia Group will inform you and, where required by law, obtain your prior consent.

Personal data are stored in accordance with legal and fiscal provisions for a period of time that does not exceed that necessary for the purposes for which they are collected and processed.

VITRINEMEDIA gives you access to a wide range of information you have provided, namely:

• Name
• First name
• Email address
• Telephone number
• Address
• Country
• Company name

You have the right to access, rectify, transfer, oppose and delete personal data. 

You can revoke your consent to the processing of your data at any time if it has your consent as a legal basis (for example: sending the newsletter, etc.). 

If you have any questions about your rights or wish to exercise them, you can contact our Data Protection Officer: 

• By e-mail to the following address: dpo@vitrinemedia.com
• By postal mail: for the attention of the DPO, 26 rue du Prado 34170 Castelnau-le-Lez, France

VITRINEMEDIA takes all necessary precautions, as well as appropriate technical and organizational measures, to preserve the security of your personal data and in particular to prevent it from being distorted, damaged or accessed by unauthorized third parties.

Because the protection of personal data is important to VITRINEMEDIA, our website is hosted on servers located in France - therefore within the European Union - in order to guarantee an appropriate level of protection for all data that is collected and processed, including applicative maintenance.

VITRINEMEDIA's websites may provide links to third-party websites such as Facebook, Twitter, LinkedIn, etc...

VITRINEMEDIA has no control over the content of third-party sites or the privacy practices of such third parties that they may collect.

Consequently, VitrineMedia declines any responsibility concerning the processing by these third parties of your Personal Data.

This Personal Data Protection Policy is subject to French law to the exclusion of the rules of international law.

In the event of a dispute and in the event that an amicable agreement cannot be reached, the competent courts shall be those of the Paris Court of Appeal, notwithstanding multiple defendants or the intervention of third parties.