Privacy policy


Last update :
September 2022

1. Scope

This Privacy policy (hereinafter – “the Privacy Policy”) describes how Easyence SAS, simplified joint-stock company with a capital of 422 974,40 €, registered in the Paris Trade and Companies Register under SIRENE number 497 513 168 and with registered office on 9, rue des Colonnes in Paris (75002) (hereinafter "EASYENCE") respect the privacy and protection of the personal data of the users (hereinafter “User(s)”) for the following website : https://www.easyence.com/ (hereinafter “Website”).

In particular, the Website allows: 

  • To have information on EASYENCE and on the services and products provided by EASYENCE;
  • To have access to the resources provided on the Website (Customer Cases, Events, White Papers & Reports, Blog)
  • To contact EASYENCE;
  • To log in to your customer area;
  • To apply for jobs positions at EASYENCE.


2. Processing of personal data 

2.1. Description of the processing 

In accordance with applicable laws and regulations, EASYENCE, acting as data controller, and collects certain personal data from Users when they visit the Website.

The categories, purpose of the processing and retention periods of collected personal data are specified in the table below:

Collecting personal data

Purpose

Legal basis

Retention period 


First and last name, professional duties, company, business email address, phone number, message


Receiving and managing contact requests 


The processing is based on the User's consent and on the legitimate interests of EASYENCE


Personal data shall be retained for a period of one year following the reception of the contact request


Email address and the customer area data 


Login and access to the customer area, reset password if lost or forgotten when logging in to the customer area


The processing is required for the execution of the contract, concluded between the User and EASYENCE and based on User consent

Personal data should be deleted at the end of the license period or in end of the business relationship with the User 

Personal data shall be retained for a period of two years following the account creation


First and last name, CV, cover letter


Applications management

Contact with User (Candidate) 

Competency assessment during recruitment interviews

Professional and academic background check


The processing is based on a on pre-contractual measures and on the consent of the User (candidate)


Deletion of the file if the User (Candidate) is not selected, and up to two years from the last contact with the User (Candidate) if he gave a consent to the retention of his/her file


First and last names, email, address (if applicable)


Management of requests for access, erasure, portability of personal data, limitation of processing, rectification and opposition rights


The processing is required to respond to the User's requests and is based on his/her consent


Up to one year following the request to exercise the right

First and last names, email, address (if applicable)


Management of requests for the right to object to commercial prospecting


The processing is necessary in order to respond to demands on the exercise of their right to object


Up to three years following the request to exercise the right to object

 

When User is connecting to the Website, EASYENCE acting as data controller and also collects the following personal data: 

  • Connection logs;
  • Connection data; 
  • Address

If the User applies for a job position through the Website ("Careers" section), he/she is informed that for recruitment, EASYENCE uses the site "Welcome To The Jungle": www.welcometothejungle.co which is hosting by the company Coruscant. The User can apply for the job position at EASYENCE, directly on the Welcome To the Jungle website via the following link: https://www.welcometothejungle.com/en/companies/easyence 

Coruscant can be contacted at the following email address: privacy@wttj.co or to the following postal address: 24 rue du Mail, 75002 Paris, France. 

 

2.2. Categories of personal data 

Access to Users' personal data is limited to those who require it, in order to fulfil the purpose of the processing.

Users' personal data are processed by EASYENCE's authorized stuff members (human resources, sales, marketing, legal department, computer system administration) and by EASYENCE’s service providers.

Users' personal data may also be transmitted by EASYENCE to third parties:

  • if the law or a legal procedure requires EASYENCE to transmit Users' personal data;
  • in response to a request from a public or judicial authority (particularly in the case of a judicial requisition);
  • when EASYENCE considers that the transmission of Users' personal data is necessary or appropriate in order to ensure the safety of individuals or to protect the public.

2.3. Transfer of personal data 

Users' personal data is collected by the Website's host in France: the company OVH SAS, located at 2 rue Kellermann in Roubaix (59100).

And by third party technical service providers, e-mail system, hosting providers, IT companies, communication agencies that EASYENCE uses in the course of its business, some of which are located in the United States.

Users' personal data is hosted on servers located in France and in the United States. Users' personal data is therefore transferred outside the European Economic Area.

EASYENCE must ensure the same level of protection of Users' personal data as provided by the application of the RGPD. EASYENCE has concluded, with companies located outside the European Economic Area, the Standard Contractual Clauses, amended in June 2021 by the European Commission, and implemented the additional security guarantees as set out in the judgment of the Court of Justice of the European Union (CJEU) of July 16, 2020 (known as the "Schrems II" judgment).

 

2.4. Security of personal data 

EASYENCE ensures the security of Users' personal data by implementing appropriate technical and organizational measures in order to guarantee a proper level of securitý to the risks and implements means to guarantee the confidentiality, integrity, the constant availability and resilience of the processing systems and services, any means to restore availability and access to Users' personal data, as well as a procedure to regularly test, analyze and evaluate the effectivenesś of the technical and organizational measures put in place by EASYENCE.


2.5. Retention of personal data 

Users' personal data should be retained only for the period required to fulfil the purpose for which EASYENCE stores such data (in accordance with the retention periods set out in section 2.1 of this Privacy Policy). Personal data may be retained for a longer period, not exceeding the applicable legal statute of limitations, in order to fulfil its legal or regulatory obligations for archiving purposes, to enable it to exercise its rights and/or for statistical or historical purposes. 

At the end of the above-mentioned periods, the personal data will be deleted or EASYENCE will anonymize it.

 

2.6. Users' rights over their personal data

User have the following rights: 

Right of access

User may request access to their personal data. 

They may also request the modification of inaccurate personal data or that incomplete data to be completed.

They also have the right to know the origin of their personal data.

Right to erasure (Right to be Forgotten)

Users may request the erasure of their personal data where:

  1. The data is no longer necessary for the purposes it was collected and processed;
  2. They have chosen to withdraw their consent (where consent has been collected as the legal basis for processing); this withdrawal does not impact the lawfulness of the processing before its implementation;
  3. They have objected to the treatment of their personal data;
  4. The data have been processed unlawfully;
  5. The data should be deleted to comply with a legal obligation; or
  6. Such erasure is required to ensure the compliance with current legislation, in particular with regard to the retention periods applicable to the collected personal data.

Right to object 

User may object to the processing of their personal data in accordance with the legal obligations imposed on EASYENCE.

Right to restriction of processing

User may also request a restriction of processing of their Personal Data if:

  1. They contest the accuracy of such data;
  2. EASYENCE no longer needs this data for processing purposes; and
  3. They objected to the treatment of their personal data;

Right not to be subjected to a decision exclusively based on the basis of an automated data processing

Users shall not be the subject to the decision based exclusively on automated processing that produces legal effects concerning them or significantly affects them, particularly based on profiling.

Right to portability

User may request that EASYENCE provide them with their personal data in a structured, commonly used, machine-readable format, or request to transmit those data directly to another data controller as long as:

  1. The processing is based on their consent; and
  2. It is carried out by automated means.

Right to give directives on the processing of their personal data after their death

Pursuant to the Article 85 of French Data Protection Act of 6 January 1978 as amended, User can give directives on the exercise of their rights under this section after their death, (in particular on the duration of the retention of their personal data, their deletion and/or its communication) as well as designate a person responsible for the exercise of these rights.


In the absence of such directives, EASYENCE will grant the requests of their heirs, as set out in article 85, II of the Data Protection Act.

Right to make a complaint to a supervisory authority

If Users have any concerns or appeals regarding the protection of their personal data, they have the right to make a complaint to the Commission Nationale de l'Informatique et des Libertés via the following link: www.cnil.fr Plaintes en ligne | CNIL

The CNIL can also be contacted at the following address: 3 Place de Fontenoy, 75007 Paris - phone: 01 53 73 22 22.

Users are invited to inform the DPO of the EASYENCE in advance so that the DPO can process the request and attempt to find an amicable solution.

 

Users may exercise their above-mentioned rights and/or ask any questions concerning the processing of their personal data by EASYENCE by email at the following address: dpo@easyence.com or by sending a letter to the following postal address: Délégué à la Protection des Données Personnelles, Société EASYENCE, 89, rue du Faubourg Saint-Denis, 75010, Paris.

In order to process the request as quickly as possible, the Users may indicate in their request the purpose and the context in which his personal data was collected by EASYENCE. EASYENCE may ask the User to provide a copy of both sides of a valid identity document, if there is reasonable doubt about his identity.

 

2.7. Links to third party websites

In order to improve the quality of the Website, EASYENCE may place on the Website links to third party sites. These sites have a different Privacy Policies independent of EASYENCE. Users are invited to consult the Privacy Policy of the third party sites, when they visit them. 

2.8. Cookies

The provisions relating to the deposit of cookies on the Website are part of the Cookie Policy available on the Website.

2.9 Modification of the Privacy Policy 

EASYENCE reserves the right to make changes to this Privacy Policy at any time.

It is recommended to consult this page frequently, by referring to the date of the last modification.

In the event of a major change to the Privacy Policy, EASYENCE will notify Users of such changes.