In the context of its activity and for supply purposes of Services, DUE DILIGENCE is required to collect and process the personal data of its users (hereinafter the “Users”). This confidentiality policy, implemented by DUE DILIGENCE, aims to provide Users with summary and global information on the processing of personal data operated by DUE DILIGENCE. We attach particular importance to respecting the privacy of Users and the confidentiality of their personal data, and thus undertake to process the data in compliance with applicable laws and regulations, and in particular Law No. 78-17 of January 6, 1978 relating to data processing, files and freedoms (hereinafter the “Data Protection Act”), and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 relating to protection individuals with regard to the processing of personal data and the free movement of such data (hereinafter the “GDPR”).

Definitions

Personal data: constitutes personal data all information relating to an identified or identifiable natural person, that is to say who can be identified, directly or indirectly, by reference to an identification number or to one or more elements which are specific to him.

Processing of personal data: constitutes processing of personal data personal character any operation or any set of operations relating to such data, whatever the process used, and in particular the collection, recording, organization, conservation, adaptation or modification, extraction, consultation, use, communication by transmission, distribution or any other form of provision, reconciliation or interconnection, as well as locking, erasure or destruction.

Cookie: a cookie is information stored on the hard drive d ‘a user by the server of the site he is visiting. It contains several data: the name of the server which deposited it, an identifier in the form of a unique number, possibly an expiration date. This information is sometimes stored on the computer in a simple text file which a server accesses to read and record information.

Controller – DPO: The controller of personal data referred to herein is the company TIRIA, SARL with a capital of 6000 euros, registered with the RCS of AUCH under the number 505 235 192 and whose head office is located 36 av Charles de Gaulle 32600 L’Isle jourdain The company TIRIA has designated a Data Protection Officer who can be contacted at the following address: contact@tiria.fr.

Data collected

TIRIA collects Users’ data in order to make them available services for which they have subscribed to the platform. The compulsory or optional nature of the data entered (to be able to finalize the registration of the User and provide him with the services of DUE DILIGENCE) is indicated during the collection by an asterisk. In addition, certain data are collected automatically as a result of the User’s actions on the site (see the paragraph relating to cookies).

Purpose

The personal data collected by TIRIA and DUE DILIGENCE when providing the services is necessary for the performance of contracts concluded with the User, or to allow TIRIA and DUE DILIGENCE to pursue its legitimate interests in the respect for the rights of the User. Certain data may also be processed based on the collection of the User’s consent. The purposes for which we process data are as follows:

• Commercial and accounting management of the contract;
• Activation and marketing management;
• The detection of malicious behavior (fraud, phishing, spam, etc.);
• Improving the user experience of the site;
• More generally any purpose referred to in article 2 of Deliberation n ° 2012-209 of June 21, 2012 establishing a simplified standard concerning the automated processing of personal data relating to the management of users and prospects .

Data recipients

The personal data collected is intended for the commercial and accounting departments by TIRIA and DUE DILIGENCE. They can be transmitted to TIRIA subsidiaries, or to subcontracting companies which TIRIA and DUE DILIGENCE may call upon in the performance of its services. In this context, personal data may be transferred to a country whether or not it is a member of the European Union. TIRIA implements guarantees ensuring the protection and security of this data, in accordance with the regulations. TIRIA and DUE DILIGENCE does not assign or rent personal data to third parties for marketing purposes, without the express consent of the Users of TIRIA and DUE DILIGENCE. Apart from these hypotheses, the disclosure of personal data to third parties may only take place in the following cases:

• With authorization from them;
• At the request of the legally competent authorities, on judicial requisition, or in the context of legal proceedings.

Durée de conservation des données

To comply with its legal obligations or to obtain the necessary elements to assert its rights, TIRIA and DUE DILIGENCE may archive the data under the conditions provided by regulation. Thus, the personal data collected by TIRIA and DUE DILIGENCE relating to the identity and contact details of its Users are archived for a maximum period of two years after the termination of contractual relations for Customer Users, or from their collection. by the data controller or the last contact from the prospect User for data relating to them. The termination of contractual relations is understood as the express termination of the contract by the User or the non-use of the services of TIRIA and DUE DILIGENCE for a period of five years.

User rights

In accordance with the regulations, the User benefits from the rights of access and rectification of data of a personal nature, which allow him to have rectified, completed, updated or deleted data that is inaccurate, incomplete, ambiguous, outdated. or the collection, use, communication or conservation of which is prohibited. The User also has the rights to request the limitation of processing, and to object for legitimate reasons to the processing of his personal data. The User may also communicate instructions on the fate of his personal data in the event of death. Where applicable, the User may request the portability of his data, or, when the processing is based on legal consent, withdraw his consent at any time. The User can exercise their rights by sending an email to castelbajac@duediligence.fr. The User can also at any time modify himself the data concerning him contacting the customer relations service at the address castelbajac@duediligence.fr

The User can unsubscribe from the DUE DILIGENCE newsletter or marketing emails by following the unsubscribe links in each of these emails. The User may, in the event of a dispute, lodge a complaint with the CNIL, the contact details of which appear at the internet address http://www.cnil.fr. The User will be able to access detailed information on the use of his personal data, in particular concerning the purposes of the processing, the legal bases allowing tiria.fr to process the data, their retention periods, their recipients and, the where applicable, transfers thereof to a country which is not a member of the European Union and the guarantees implemented. To do this, the User can send their request by email to castelbajac@duediligence.fr

Cookies

The www.duediligence.fr website uses cookies that have to facilitate navigation on the site, to execute the service provided by TIRIA and DUE DILIGENCE, to measure the audience of the site or even to allow the sharing of pages of the site.

Types of cookies used:

Cookies necessary for navigation on the site: These cookies are necessary for the operation of the site of www.duediligence.fr.
They allow the use of the main functionalities of the site. Without these cookies, Users cannot use the site normally.

Functional cookies: These cookies allow you to personalize the User experience .

Analytical cookies: These cookies allow to know the use and the performance of the site and to improve its functioning by carrying out analyzes of frequentation of information pages, by monitoring opening rates, click rates and bounce rates at an individual level.

Share button cookies: These social cookies allow users share pages and content on third-party social media via social sharing buttons.

Cookie management

Users have the option to accept or refuse cookies on the site or refuse them once and for all by configuring their browser. If the User chooses to refuse all cookies, the navigation accessing certain pages of the site will be reduced. Depending on the browser used by Users, the methods for deleting cookies are as follows:

On Internet Explorer

• Click on the Tools button, then on Internet Options.
• On the General tab, under Browsing history, click Settings.
• Click on the View Files button.
• Select the cookies to refuse and click on delete.

On Firefox

• Click on the Browser Tools icon, select the Options menu
• In the window that appears, choose “Privacy” and click on “Display cookies”
• Select the cookies to refuse and click on delete.

On Safari

• Click on the Edit icon, select the Preferences menu.
• Click on Security then on Display cookies.
• Select the cookies to refuse and click on delete.

On Google Chrome

• Click on the Tools icon, select the Options menu then click on the Advanced Options tab and access the “Confidentiality” section.
• Click on the “Display cookies” button.
• Select the cookies to refuse then click on delete.

Lifetime of cookies Cookies are stored on the terminal of the User for a maximum period of 13 months from the date of the User’s consent. After this time, consent will be collected again.
Security

TIRIA and DUE DILIGENCE have taken all the necessary precautions to preserve security personal data and, in particular, prevent it from being distorted or damaged or from unauthorized third parties having access to it. These include:

• Multi-level firewall,
• Proven anti-virus and detection of intrusion attempts,
• Encrypted data transmission using SSL / https / VPN technology,
• PCI DSS certified data centers and exams

Furthermore, access to processing by TIRIA services recipients require authentication of the persons accessing the data, using an individual access code and password, which are sufficiently robust and regularly renewed. Data transiting on unsecured communication channels is subject to technical measures aimed at making this data incomprehensible to any unauthorized person. Any question about the security of the DUE DILIGENCE website can be sent to castelbajac@duediligence.fr

Modification of the Privacy Policy

DUE DILIGENCE reserves the right to modify this Policy confidentiality in order to comply with changes in applicable laws and regulations. The changes made will be notified via our website or by email, if possible, at least thirty days before their entry into force.

Contact

Any question regarding the DUE DILIGENCE Privacy Policy can be addressed by email to castelbajac@duediligence.fr.