INTRODUCTION
Letsrockdata SAS, headquartered at 42 Rue de l'Aiguillerie, 34000, Montpellier, France, takes the protection of personal data seriously and is committed to managing the data it collects about you in a transparent and fair manner, in accordance with the Data Protection and Freedom Act of 6 January 1978 and the EU Regulation No. 2016/679 of the European Parliament and of the Council in application on 25 May 2018 on the protection of personal data (hereinafter GDPR).
Aware of the importance of ensuring the confidentiality of data, Letsrockdata makes strong commitments to the protection of personal data. We are committed to protecting and respecting your privacy. The purpose of this policy is to oversee the compliance of the processing of personal data that Letsrockdata implements.
As an intermediary in sending this email, LetsRockData Sas informs you that it complies with the European Data Protection Regulation GDPR EU Regulation 2016/679, harmonised by Decree no. 101/2018 which supplements Decree no. 196/2003 and which obtained your data from the controller to whom you have given the authorization to transfer to third parties for the sending of commercial information electronically. Your data is integrated into our commercial database in order to serve as a mediator in this mailing and will be deleted once the commercial program is completed and/or interrupted. We inform you that in all cases, you can and must exercise your right of access, modification, cancellation and opposition by contacting the controller where you are registered (at the bottom of the page) or by writing to contact@letsrockdata.com who will act as an intermediary with the processing company and owner. In order to respect the law and guarantee the safety and confidence of all users, we inform you that this site belongs to LetsRockData Sas with the registration number: 94874786000013 and the address 42 Rue de l'Aiguillerie, 34000, Montpellier, France. For any questions or suggestions, please contact contact@letsrockdata.com
Interpretation and Definitions
INTRODUCTION
TABLE OF CONTENTS
What are the objectives of our Policy?
What data is collected and for what purposes?
Do we share your data?
On what legal basis do we process your data?
How is your consent collected?
What are your rights?
How do we guarantee the security of your data?
International Transfers
How is your data kept?
Document Updates
WHAT ARE OUR POLICY OBJECTIVES?
The purpose of this policy is to provide simple, clear and complete information to individuals (hereinafter “you”, “your”, “your”) about the processing of personal data about you.
This Policy covers Processing performed as part of:
Website management « theadviceofcharles.com »
LetsRockData’s commercial prospecting activity
Hiring LetsRockData employees
Managing LetsRockData customers, service providers and partners
For all these Processes, LetsRockData is the entity that determines the means and purposes and thus acts as Data Controller within the meaning of the applicable Personal Data regulations and in particular the EU Regulation 2016/679 on the protection of natural persons at the Processing of Personal Data and the free movement of such Data (hereinafter "GDPR").
WHAT DATA IS COLLECTED AND FOR WHAT PURPOSES?
In accordance with the principle of minimization, LetsRockData undertakes to collect and process only personal data that is adequate, relevant and not excessive for the purposes for which it is collected. Personal data are data that make it possible to identify directly (for example a surname, a first name) or indirectly a natural person (for example an identifier, the IP address). No data collection form is available on the « theadviceofcharles.com » website. We indirectly collect your personal data when we proceed with the purchase of prospective database. The reason you are on these databases is because you have given your consent to have your data on them and you have consented to have your data used for commercial purposes. LetsRockData does not capture them without your knowledge or knowledge. Also, when you have participated in a competition or a commercial operation organized by a third company, and to which you have given your free, specific, univocal and informed consent, In order for your data to be transmitted to LetsRockData in its capacity as sponsor of this operation, we may indirectly collect the following data concerning you:
Identification data: this includes any information that would allow us to identify you: last name, first name, email address, postal code, date of birth. This data is collected for the purposes of managing our marketing campaigns. They allow us to send you our offers that meet your criteria. For example: offers for a geographical area, offers for people in a specific age group, etc.
Connection Data: Your IP address, the version of the web browser used. This data allows us to know the date on which your consent was given, on which collection form, on which computer tool. We may collect the following data about you directly for the purposes of managing your requests for rights and managing recruitment at Letsrockdata :
Identification data: this includes any information that would allow us to identify you: last name, first name, email address, proof of identity in case of doubt about your identity.
Management data: date of request, reason for request, date of response to your request
Data collected for the purposes originally intended shall not be used for any further purpose.
DO WE SHARE YOUR DATA?
LetsRockData may have to share your personal data with other companies for commercial prospecting purposes as long as you have given your consent when collecting the data in the context of a contest and/or commercial transaction. Each processing set up by LetsRockData has internal recipients who are intended to access and process the data concerned. These recipients ensure reliability and confidentiality according to our instructions. In case of recourse to service providers for the management of our processing in-house (human resources management, IT maintenance management, LetsRockData compliance management etc.), LetsRockData only authorizes its service providers to use your personal data to the extent necessary to perform services on our behalf or to comply with legal requirements and we endeavour to ensure that your Personal Data is permanently protected. LetsRockData may also be required to disclose your Data to Third Parties when such disclosure is required by law, a regulatory provision or a court decision, or if this communication is necessary to protect and defend our rights. LetsRockData ensures that these third parties are located on the European Economic Area ('EEA'). In the case of third parties outside the EEA, including countries that do not offer the same level of data protection as your country of residence. LetsRockData will either: enter into Data Transfer contracts that comply at least with the standard contractual clauses adopted by the European Commission;to ensure that these Third Parties located are enterprises have adequate national legislation and registered as such with their national administration.
ON WHAT LEGAL BASIS DO WE TREAT YOUR EXPENSES?
LetsRockData only collects, uses and shares your personal data in accordance with the regulations. We may process your data either because:
Because you gave your consent. For sponsorship operations and contests we use your data as soon as you have authorized the company managing the contests and commercial operations to share your data with its partners.
To fulfill our contract with you. LetsRockData is required to process personal data in the context of professional recruitment and in the framework of its contractual relations with its partners, providers, suppliers.
To meet a legal obligation. In addition to the necessary human resources processing, the processing of requests for rights in accordance with the applicable Personal Data Protection Legislation is also required.
Because this processing is in our legitimate interest. As part of a contact request, LetsRockData keeps your data in the interest of managing your request properly. The information concerned is that provided in the contact email. This data may be used for other purposes such as managing your rights, managing the business relationship, etc.
Because this processing is necessary to safeguard a person’s vital interests. None of our processing is based on this legal basis.
HOW IS YOUR MONEY COLLECTED?
As part of its commercial relations and in the acquisition of databases, LetsRockData shall ensure that the legal consent standards are complied with by its data providers in accordance with Article 4 paragraph 11 and Article 17 of the GDPR. LetsRockData endeavours to monitor the legality of the consent collected by its database providers. As part of our contractual relations, our partners ensure compliance with the legal conditions for obtaining consent and their compliance with regard to the protection of personal data. They are individually responsible for their collection processing. We remain responsible for the use of the database they provide to us. Also, suppliers ensure that valid consent is obtained according to the following criteria:
Free consent: people must have a real and continuous choice. Example: Participation in competition games and/or commercial operations must not be subject to consent to the sharing of data with partners. Consent must be dissociated from other treatment modalities. The person may refuse or withdraw consent without prejudice.
Specific consent: the data controller who collects your data undertakes to clearly and precisely describe the purpose of the collection for the purpose of sharing data with partners.
Informed consent: Those giving consent must have received adequate information about the processing of their data. This information, which is easily accessible, must enable people to make an informed decision. This information includes: the identity of the data controller organising the competition and/or commercial operation, the purposes of the processing, the categories of personal data processed, the information of individuals about their rights, the possibility for individuals to withdraw their consent at any time.
Unequivocal consent: the person concerned by the treatment gives his consent by an affirmative and clear act. It must be a deliberate and specific action on treatment. To do so, LetsRockData requires its data providers to collect consent through an opt-in box, a form to be completed, or a declaration of consent to be signed.
Consent must be obtained by the data provider at the time of collection of personal data and before processing. Consent is valid for the duration of data retention. The data subject has the right to withdraw their consent at any time by using functional unsubscribe links available at the end of all commercial communication emails or upon request at mail contact@letsrockdata.com. Once the consent is revoked, LetsRockData shall ensure that the withdrawal is recorded in its systems and databases as soon as possible, so that the Personal Data is no longer processed for the purpose in question (for example, a customer who revokes their Consent to Receive Advertising should no longer receive advertising). Withdrawal of the Consent: Does not affect the lawfulness of the Consent-based Processing prior to its withdrawal, and does not necessarily require the deletion of the Personal Data concerned to the extent that they-this may be useful for another Processing and/or of administrative interest.
WHAT ARE YOUR DROITS ?
If you no longer wish to receive e-mails from LetsRockData, you can unsubscribe simply by clicking on the unsubscribe link at the bottom of any email addressed to you. This opposition to commercial prospecting can be done at any time and without justification on your part. In addition, your personal data belongs to you, and as such, you have a certain number of rights. You have the right to:
Access: You have the right to know what personal data we hold about you, to consult it and to obtain a copy.
Rectification: If you notice an error, you can ask us to correct the incorrect information at any time.
Removal: Under certain conditions, you may ask us to delete your personal data. Please note that we may keep certain information about you when the laws and regulations in force require us to do so or when we have a legitimate reason to do so (e.g. performance of a contract or prevention of legal action).
Limiting Responsible Processing: Under certain conditions, you may ask us to limit the use we make of your personal data, for example, for as long as it takes to review a correction request.
Portability: You have the right to ask us to transmit to you or another controller the personal data you have provided to us in a structured, commonly used and machine-readable format.
Objection: in certain cases, you may object to the use of your personal data for certain processing operations (e.g. direct marketing operations).
In order to respond to your request, we may ask you to justify your identity. We have 30 days to respond to your request from the time your request is received. However, in case of too much demand or in case of complex request, this period can be extended to 90 days. If this is the case, you will be informed. At any time, you can also withdraw the consent you gave us to process your data for a specific purpose. When you exercise your rights, our Data Protection Officer processes your Personal Data for the purposes of managing your request (civility, last name, first name, copy of the identity document if necessary, date of the request, nature of the request, response made). You can exercise your rights or ask any question about the management of your personal data by LetsRockData by contacting: By mail:LetsRockData - for the attention of the DPO -42 Rue de l'Aiguillerie, 34000, Montpellier, France By email:contact@letsrockdata.com
You also have the right to contact the Commission Nationale de l'Informatique et des Libertés (CNIL).
HOW DO WE GUARANTEE THE SECURITY OF YOUR DATA?
LetsRockData makes every effort to provide an optimal level of protection against loss and alteration. Appropriate physical, technical and organisational security measures shall be taken to ensure the confidentiality of the data and in particular to prevent unauthorized access. Access to personal data is restricted to employees who need to know it and who have been trained in privacy and security compliance. LetsRockData also requires all its subcontractors to provide appropriate contractual and technical guarantees to ensure the security and confidentiality of personal data.
INTERNATIONAL TRANSFERS
Personal data collected by LetsRockData is not transferred to countries within or outside the European Union.
HOW IS YOUR DATA STORED?
Your personal data is kept for as long as necessary to fulfil the purpose for which it was collected or in accordance with legal requirements. The retention period varies according to several factors, including: The time required to respond to your requests, questions, and claims; The time required to manage LetsRockData’s business activities, namely three (3) years from your last action on our mailings ; The time of the management of the exercises of your rights for a period of six (6) years with the exception of the copy of your ID if necessary kept one (1) month; The time of the legal proceedings, The time taken to analyze your application and up to two (2) years from its receipt; 13 months for functional cookies deposited on your computer. For persons who have exercised their right to object to the commercial prospecting or who have carried out the erasure request, the e-mail addresses will be kept for 3 years unless expressly requested by the person concerned on a «repeater» list. The aim is not to contact the person on a new database at a later date. Beyond the expected period, your personal data will be permanently deleted or anonymized for statistical purposes.
DOCUMENT UPDATES
This document may be updated regularly to reflect changes in the content of the services offered to you. We recommend that you check this page regularly to keep you informed of the conditions under which we process your personal data. Contact Us If you have any questions about this privacy policy, you can contact us: • By email:contact@letsrockdata.com
Documento en versión PDF
Last Updated: 01 June 2023
