Privacy and data protection policy

Concerned about respecting the privacy of Internet users, NETCARBON undertakes that the collection and processing of personal information of VISITORS, PROSPECTS and CUSTOMERS (hereinafter together the "USER") of the NETCARBON platform (hereinafter the " PLATFORM ") https://netcarbon.app and/or the website www.netcarbon.fr (hereinafter the " SITE ") be carried out in accordance with EU Regulation No. 2016/679 of the European Parliament and of the Council of 27 April 2016 on the Protection of Individuals with regard to the processing of personal data and on the free movement of such data (hereinafter the "RGPD") and with all the provisions of the French regulations applicable in this regard.

Personal data means any information relating to a natural person who is directly or indirectly identified or identifiable (hereinafter the "DATA ").

The Privacy Policy applies to the USER'S DATA as:

VISITOR, i.e. thephysical person browsing the SITE under the conditions defined in the NETCARBON CGU-V and who has not subscribed to a NETCARBON service, completed the contact form, or carried out newsletter registration ; or

PROSPECT, i.e. the physical person who has subscribed to the newsletter via the SITE and/or who has completed the contact form and/or who has made a request to subscribe to NETCARBON services via the SITE, or

CLIENT, i.e. the physical person who has access to his/her NETCARBON customer account on the PLATFORM after having subscribed to a NETCARBON service.

NETCARBON protects the USER's privacy on the PLATFORM and/or SITE by ensuring the protection, confidentiality, non-alteration, availability and security of the DATA entrusted to it on all of its communication channels. NETCARBON undertakes to take all necessary measures in order to:

● Provide clear and transparent information on how DATA is processed;
● Implement all necessary technical and organizational measures to protect DATA against disclosure, loss, alteration or access by an unauthorized third party ;
● Retain the DATA only for as long as is necessary for the purposes of the specific processing;
● Offer the USER the possibility of accessing and/or modifying his DATA at any time by request expressed by email sent to contact@netcarbon.fr and for the CUSTOMER, via his personal space accessible from the PLATFORM. This confidentiality and DATA protection policy may be modified or adjusted at any time by NETCARBON. The USER undertakes to consult it regularly.

ARTICLE 1 - DATA CONTROLLER

NETCARBON is responsible for processing within the meaning of the RGPD. NETCARBON refers to the S.A.S registered with the RCS of Bordeaux under number 909 287 278 and whose registered office is 2 place de la bourse, 33000 Bordeaux.

ARTICLE 2 - TYPES OF PERSONAL DATA COLLECTED

On the basis of the USER's consent, DATA is necessarily collected, processed and/or stored on the occasion of:
● Browsing the SITE, which uses cookies/tokens;
● Browsing the PLATFORM, which uses cookies/tokens;
● Subscribing to the NETCARBON newsletter via the SITE;
● Filling out the contact form via the SITE;
● Filling out the subscription request for NETCARBON services via the SITE;
● The creation and management of a personal CUSTOMER space on the PLATFORM;
● The provision of NETCARBON services subscribed to by the CUSTOMER;
● The production of statistics on traffic to the PLATFORM and the SITE;
● The production of statistics on interactions via the SITE and the PLATFORM.

In general, NETCARBON, its partners and/or its subcontractors may collect, store and/or process the following DATA concerning the USER:
Identification data;
‍● Connection data;
‍● Billing and anti-fraud data;
Commercial data.

ARTICLE 3 - STORAGE OF PERSONAL DATA

The DATA is stored by NETCARBON on its servers, with a view to processing it in the context of browsing the SITE, using the PLATFORM and putting CUSTOMERS in contact with one another. It is kept for as long as is necessary to implement the functionalities of the PLATFORM and the SITE. Consequently, as long as a USER has a personal CUSTOMER space on the SITE and/or PLATFORM, and/or subscribes to the newsletter, the DATA collected is retained. If the USER unsubscribes from the SITE, PLATFORM and/or newsletter, the DATA collected is deleted by NETCARBON within the deadlines specified in article 4 (Purposes of personal data processing). This DATA is subsequently only kept as archives for the purposes of establishing proof of a right or contract, which may be archived in accordance with the provisions of the French Commercial Code relating to the retention period for books and documents created in the course of commercial activities, and the French Consumer Code relating to the retention of contracts concluded by electronic means.

The USER always remains the owner of the DATA concerning him/her that he/she transmits to NETCARBON. The USER has the right to access, rectify and delete all or part of his or her DATA, as well as the right to oppose the communication of his or her DATA to third parties for valid reasons.

The USER may exercise these rights by writing to the following e-mail address: contact@netcarbon.fr and/or by post to NETCARBON - 2 Place de la Bourse, 33300 Bordeaux. A reply to the USER's request will be sent within forty-five (45) working days.

ARTICLE 4 - PURPOSES OF PERSONAL DATA PROCESSING

DATA may be communicated by NETCARBON to any third party entrusted with the execution, processing and/or management of NETCARBON services. However, NETCARBON may disclose or share a USER's DATA with other third parties under various circumstances, including the following:
● With the USER's consent; or
● In order to comply with the law, applicable regulations, any legal proceedings, court decisions or any other case of mandatory disclosure; or
● To protect the rights, property and security of the SITE, the PLATFORM, and their USERS.

DATA is thus kept for a period that complies with legal provisions and is proportionate to the purposes for which it was collected. This period varies according to the type of DATA collected and processed.

NETCARBON uses the DATA referred to in Article 2 (Categories of personal DATA) for the following purposes:

What DATA is used?
IDENTIFICATION DATA

NETCARBON processes this category of DATA in order to ensure the USER the operation of the PLATFORM and the provision of associated services, with the following sub-finalities:
-The management and updating of the USER's personal information in a dedicated database;
-The processing of requests from the SITE's contact form;
-The provision of services subscribed to by the CUSTOMER.
Why is DATA used?
Data relating to the completion of the contact form by the USER: registration of surname, first name, e-mail address;

Data relating to the completion of the newsletter registration form: registration of e-mail address, and company name (if applicable);

Data relating to the creation and management of the CUSTOMER's personal space (registration of surname, first name, telephone number, e-mail address of the CUSTOMER and of the various USERS - and associated identifiers -, password, company information).

The CLIENT's input data relating to the areas studied as geographical location data and geospatial data.
How long is DATA kept?
Kept for two (2) years from :

- the deletion of the CUSTOMER's account, or

- the PROSPECT's unsubscription to the newsletter, or

- the USER's request for the deletion of his DATA.
CONNECTION DATA

This is the data used to monitor the USER's browsing on the SITE and/or the PLATFORM.

NETCARBON processes this DATA in order to offer the USER the most fluid and simple browsing experience possible on the SITE and/or the PLATFORM, with the following sub-purposes:
- Compilation of visitor statistics;
- Observation and analysis of the USER's browsing;
- Security monitoring and rapid recognition of threats in the event of an attack.
SITE or PLATFORM connection and use data (date and time of visit or use and session ID);

Computer hardware used for browsing;

Operating system of the USER's cell phone or web browser.
Kept for one (1) year from :

- the USER's disconnection from thePLATEFORM and/or SITE, or- the deletion of the CUSTOMER's account, or

- the PROSPECT's unsubscription to the newsletter,

- or the USER's request for the deletion of his DATA.
INVOICING AND ANTI-FRAUD DATA

NETCARBON processes this DATA in order to collect outstanding payments and combat fraud, with the following sub-purposes:
-The collection and securing of payments;
-The management of invoicing and collection;
-The detection and prevention of fraud.
Bank details and invoicing data used to prepare invoices for subscription fees for PLATFORM services.
Retained by NETCARBON's payment service provider after full payment of amounts due by the CLIENT and, for proof purposes in the event of a claim, for six (6) months.
COMMERCIAL DATA

‍NETCARBON
processes this DATA in order to carry out its commercial operations relating to NETCARBON services on the SITE and the PLATFORM, with the following sub-purposes:

-The management of marketing/sales prospecting actions relating to the use of the SITE and/or the PLATFORM;
-The sending of commercial communications relating to subscriptions by e-mail or SMS; -The elaboration of commercial statistics;
-The sending of information on the modification or evolution of NETCARBON services;
-The constitution and management of CUSTOMER and PROSPECTS files.
Data required to produce statistics on the number of visitors to the SITE and/or the PLATFORM; Data required for commercial communication and, in particular, to send the newsletter to PROSPECT who has subscribed to it (e-mail address) via the SITE. Data required to contact the PROSPECT who has filled in the specific form (name, e-mail address).
Kept anonymized as of:
-deletion of the CUSTOMER account, and/or

-unsubscription to the newsletter, or

-the USER's request for the deletion of his DATA.



Cookies or similar technologies (tokens) may be installed and/or read in the USER's browser when using the SITE and/or the PLATFORM: https://netcarbon.fr/cookies.

ARTICLE 5 - RECIPIENTS OF PERSONAL DATA

NETCARBON does not share USER DATA with third parties, except in specific circumstances where it is communicated to the following persons:
● To employees of NETCARBON's internal departments in connection with processing: in accordance with regulations, access to DATA is based on individual, limited and supervised access authorizations.

● Providers of services for monitoring and analyzing CUSTOMER data synchronized on the PLATFORM.

Subcontractors providing, in particular, the following services on behalf of NETCARBON:
- Banking transactions: STRIPE,
- Securing online payments and combating fraud: STRIPE.
- Management of automated postal and digital mailings:
- Management of non-automated digital mail: GMAIL.
- Provision of analytical solutions or audience measurement statistics: GOOGLE ANALYTICS, META.
- Technical and IT maintenance and development: GOOGLE CLOUD PLATFORM.
- Data storage for customer management: HUBSPOT.
- WEBSITE and PLATFORM hosting: WEBFLOW, GOOGLE CLOUD PLATFORM, MONGODB.

ARTICLE 6 - TRANSFER OF PERSONAL DATA OUTSIDE THE EU

NETCARBON stores USER DATA within the territory of the European Union. However, if it has to transfer the DATA to subcontractors or business partners outside the EU, NETCARBON ensures that the processing is governed by the European Commission's standard contractual clauses, which ensure a sufficient level of protection for the privacy and fundamental rights of individuals.

ARTICLE 7 - SECURITY OF PERSONAL DATA

As data controller, NETCARBON takes all necessary measures to preserve the security and confidentiality of DATA and, in particular, to prevent it from being damaged or accessed by unauthorized third parties. To this end, NETCARBON makes every effort to guarantee the physical security of the buildings housing its computer systems, as well as the security of its computer system, notably by providing encryption measures. NETCARBON does not provide the DATA to third parties, unless it is necessary to complete the service that the CLIENT has contracted, in particular with any technical subcontractors of NETCARBON or as part of the procedures for submitting offers and/or reservations made via the PLATFORM. In addition, NETCARBON ensures that its subcontractors comply with data protection regulations. NETCARBON does not make any commercial use of the USER'S DATA with third parties.

ARTICLE 8 - ACCESS, RECTIFICATION, OPPOSITION AND CANCELLATION

8.1 Conformément aux dispositions légales et réglementaires du RGPD, l'UTILISATEUR dispose :
●     D'un droit d'interrogation ;
●     D'un droit d'accès et de rectification de ses DONNEES ;
●     D'un droit d'effacement. En cas de demande de suppression des DONNEES, NETCARBON pourra néanmoins les conserver sous forme d’archivage intermédiaire, et ce pour la durée nécessaire à la satisfaction deses obligations légales, comptables et fiscales ;
●     D'un droit de limitation du traitement de ses DONNEES. Il est important de noter que ce droit ne s’applique que si :
             -       L'UTILISATEUR conteste l’exactitude de ses DONNEES pendant la durée lui permettant de vérifier l’exactitude de ces                       dernières,
              -       L'UTILISATEUR considère que NETCARBON traite illicitement ses DONNEES et exige une limitation de leur utilisation plutôt                       qu’un effacement,
              -       NETCARBON n'a plus besoin des DONNEES de l’UTILISATEUR au regard des finalités visées à l'Article 4 mais que celles-ci                       sont encore nécessaires pour la constatation, l’exercice ou la défense des droits de l’UTILISATEUR en justice ;
              -       En cas d’exercice du droit d’opposition de l’UTILISATEUR pendant la durée de vérification portant sur le point de savoir si les                       motifs légitimes que NETCARBON poursuit prévalent sur ceux de l’UTILISATEUR ;

●     D'un droit à la portabilité de ses DONNEES dans une certaine mesure, c'est-à-dire celle du droit de recevoir les DONNEES qu'il a fourni à NETCARBON dans un format structuré, couramment utilisé et du droit de transmettre ces DONNEES à un autre responsable de traitements ;
●     D'un droit d'opposition à ce que les DONNEES le concernant fassent l'objet d'un traitement ;
●     D'un droit d'opposition à ce que ses DONNEES soient utilisées à des fins de prospection notamment commerciale. A cet égard, le PROSPECT peut se désinscrire à chaque newsletter qu’il reçoit, car elle contient un lien de désinscription sur lequel il peut cliquer pour être retiré des listes d’envoi de NETCARBON ;
●     D'un droit d'opposition au profilage marketing, c’est-à-dire que l’UTILISATEUR continuerait à recevoir des sollicitations commerciales mais celles-ci seront moins pertinentes et ne seront plus ciblées selon ses centres d'intérêts ;
●     Et d'un droit de définir des directives générales et/ou particulières relatives au sort de ses DONNEES et à la manière dont l’UTILISATEUR souhaite que ses droits soient exercés après son décès. A cet égard, en cas de décès qui serait porté à la connaissance de NETCARBON, les DONNEES de l’UTILISATEUR seront supprimées, sauf nécessité de conservation pendant une durée déterminée pour des motifs tenant aux obligations légales et réglementaires de NETCARBON et/ou aux délais légaux de prescription, et après le cas échéant avoir été communiquées à un tiers éventuellement désigné par les soins de l’UTILISATEUR.

8.2 L’UTILISATEUR peut, à tout moment, porter réclamation devant l’autorité de contrôle compétente (en France, la CNIL: www.cnil.fr).Pour toute question relative à la présente politique ou pour toute demande relative à ses DONNEES, l’UTILISATEUR peut contacter NETCARBON en transmettant sa demande par courrier à l’adresse postale suivante : Netcarbon- 2 Place de la Bourse, 33300 Bordeaux,ou par mail à l’adresse électronique suivante : contact@netcarbon.fr .

Concernant les demandes qui parviendraient au DPO par courrier postal en lettre recommandée avec demande d’avis de réception, l’UTILISATEUR est prié d’indiquer l’adresse électronique rattachée à son compte CLIENT ainsi que ses noms et prénoms. Dans l’hypothèse où l’UTILISATEUR ne parvient pas à retrouver l’adresse électronique rattachée à son compte CLIENT ou en cas de doutes sérieux sur l’identité de l’UTILISATEUR, des informations complémentaires relatives à son identité pourront lui être demandées.
NETCARBON adressera une réponse dans un délai de quarante-cinq (45) jours ouvrés maximum suivant la date de réception de la demande de l’UTILISATEUR. 

                                    .                                                       


                                                                                           *************************