Mr. Anthony Villeneuve and the protection of personal data - RGPD

Introduction to GDPR

the General Data Protection Regulation RGPD is the legal framework for the processing of personal data in Europe, as of May 25, 2018. Unlike Directive 95/46 / EC, which until then governed such processing, the RGPD is directly applicable in the Union and does not require national transpositions. As such, it will promote the harmonization of legal regimes for the protection of personal data in Europe. Better still, the GDPR has a principle of extraterritoriality which allows, in certain circumstances, to extend its scope of application outside European borders.

As a company processing personal data, Mr. Anthony Villeneuve is subject to the provisions of the GDPR. Mr. Anthony Villeneuve has distinct obligations: in his capacity as processor or data controller.

Definitions

Understanding the real and precise issues of a European regulation is not always easy. Especially when it contains 99 articles, 173 recitals and many guidelines serving to clarify its interpretation. However, this is essential in order to avoid any risk that may result from an overly broad or imprecise interpretation of the regulatory obligations incumbent on your structure. It is therefore essential to understand the few terms defined below:
- Personal data: any information relating to an identified or identifiable natural person. A natural person who can be identified, directly or indirectly, is deemed to be an identifiable natural person.
- Processing: any operation or set of operations carried out or not using automated processes. Applied to data or sets of personal data (collection, recording, transmission, storage, conservation, extraction, consultation, use, interconnection, etc.).
- Controller : the natural or legal person, public authority, service or other body which, alone or jointly with others, determines the purposes and means of processing.
- Processor: the natural or legal person, public authority, department or other body which processes personal data on behalf of the controller.

Mr. Anthony Villeneuve as a subcontractor

It is certainly in this capacity that your expectations of Mr. Anthony Villeneuve are the most important. Mr. Anthony Villeneuve is referred to as a "processor" when he processes personal data on behalf of a client.
This is typically the case when you use the services of Mr. Anthony Villeneuve for WEB and mobile project development on your behalf. Within the limits of his technical constraints, Mr. Anthony Villeneuve will only be able to process the data collected according to your instructions, and this on your behalf.

The commitments of Mr. Anthony Villeneuve as service provider and subcontractor

As a service provider and subcontractor, Mr. Anthony Villeneuve undertakes in particular to implement the following actions:
- Inform you of any use of subcontractors who could process your personal data. To date, no service involving access to stored content is subcontracted outside the company WELLCOM INTERNATIONAL.
- To implement high security standards in order to provide a high level of security to our services. - Notify you as soon as possible in the event of a data breach.
- Help you meet your regulatory obligations by providing you with adequate documentation of our services.

Mr. Anthony Villeneuve as data controller

Mr. Anthony Villeneuve is qualified as a "controller" when he determines the purposes and means of "his" processing of personal data.
This is typically the case when Mr. Anthony Villeneuve collects data for the purposes of invoicing, managing collections and improving the quality of services. As well as performance, sales canvassing, sales management, etc.
In summary, “your” data and all information concerning you or relating to your employees (identity and contact details of the contact person via Mr. Anthony Villeneuve in the context of a request for technical assistance, for example) may be concerned during data processing.
But also when Mr. Anthony Villeneuve processes the personal data of his own employees.
This is why Avilltech wishes to give you elements of understanding of the guarantees implemented to ensure the protection of this personal data.
- Limit data collection to those that are strictly useful. It is as part of this process that when ordering a service, you only enter the necessary data. So that Mr. Anthony Villeneuve can provide billing services. But also of support or to respect its own legal obligations in terms of data retention (in particular on the basis of law n ° 2004-575 of June 21, 2004 for confidence in the digital economy :
- Do not use the data collected for purposes other than those for which they were collected.
- Keep personal data for a limited and proportionate period. Thus, by way of example, the data processed for the purposes of managing the relationship between the customer and Mr.Anthony Villeneuve (last name, first name, postal address, e-mail, etc.) are kept by the company for the duration of the contract and the following thirty-six (36) months. At the end of this period, they are deleted on all media and backups.
- Do not transfer this data to third parties other than companies related to Mr. Anthony Villeneuve who are involved in the execution of the contract.
- Implement appropriate technical and organizational measures to guarantee a high level of safety.

Why do we collect your personal data?

We collect and use your personal data in an adequate, relevant and limited manner to what is necessary for the main purposes below and in accordance with the regulations in force:
-Allow the execution of your contracts or pre-contractual measures taken at your request.
-The study of specific needs in order to offer suitable contracts and services in the exercise of our duty as seller and advice.
-The management of contracts from the pre-contractual phase to termination including electronic signature and payment transactions.
-Customer management, in particular through loyalty actions, monitoring and improvement of the quality of the customer relationship (satisfaction surveys, grouping of contracts, telephone records, emails, SMS, communication on social networks, any other communication…), updating customer knowledge, providing personal spaces and accounts on the internet or mobile (including managing connections, implementing measures to secure your account)… (Marketing)
-Execution of contract guarantees.
- The exercise of remedies.
-The management of complaints.
-The management of disputes.
-The development of actuarial studies.
-The conduct of research and development activities within the framework of the life of the contract.
-Pursue our legitimate interests in terms of commercial prospecting with customers and prospects by carrying out:
* operations relating in particular to loyalty campaigns, testing of new products or new equipment, contests, conducting research and development activities (these are methods of prospecting, loyalty building, communication),
* operations of solicitations, marketing, business development, advertising, management of people's opinions on products, services or content ...
* technical operations allowing files to be completed and updated (which notably includes normalization, enrichment and deduplication).
-To carry out these commercial prospecting operations that may be of interest to you, we analyze your profile (profiling) in order to determine your preferences unless you object.
- Establishment of commercial statistics or the use of our services, sites and applications.
-Institutional and statutory communication operations, in particular by electronic means.
-Respect our legal and regulatory obligations:
* in the fight against money laundering and the financing of terrorism and asset freezes,
* for the detection and identification of dormant contracts,
* for the execution of fiscal and social rules, or the collection of contributions for various state taxes.
-Your prior consent will be requested when it is necessary for the processing of your data and in particular for commercial prospecting by electronic means (Mail, SMS, MMS, etc.)

What personal data do we process?

We collect and process the following data only when it is strictly necessary for the implementation of the purposes described above.
-Data relating to identification, your contact details, etc.
-Data relating to the professional situation such as the name of your company, the field of activity, the job title, etc.
-Connection and traceability data: for example the tracking of the pages viewed (cookies).
-Data relating to the follow-up of the commercial relationship such as requests for quotes, correspondence, comments ...

Who are the recipients of your personal data and their location?

Your personal data is only transmitted to natural or legal persons who have a legitimate vocation to process it:
- Authorized employees within the limits of their functions and missions.
-The managers of the site www.qrcodemedical.com, their service providers, partners, subcontractors as well as interested persons and those intervening in the contract such as lawyers, experts, court officers and any entity and person designated by the regulations.
If applicable, you will be informed of a transfer of your personal data to a recipient (other than those already known) located in a country outside the European Union and of the terms of this transfer.

What are your rights and how can you exercise them?

We implement the necessary means to allow you to exercise your rights.
What are your rights?
- Right of access: You have the right to view the information collected and how it has been processed.
- Right of rectification: You have the right to request a modification of your personal information if it appears no longer to be up to date.
- Right to erasure of data and to limit their processing : You also have the right to request the erasure or limit the use of your data, in particular when they are no longer necessary .
- Right to data portability : In case of processing based on the execution of a contract or on consent, you can recover the personal data that you have provided to us in a structured format or to us ask to communicate them to a person designated by you.
- Right of opposition : You can object to the use of your data, particularly concerning commercial prospecting, including profiling. We inform you that you can also subscribe to the list of opposition to canvassing on the site www.bloctel.gouv.fr .
-You can withdraw your consent to data processing at any time.
-You can define general or specific guidelines relating to the retention, erasure and communication of your personal data after your death which can be registered with a digital trusted third party (the trusted third party must be certified by the CNIL). These directives may designate a person responsible for their execution, failing which your heirs will be appointed.
-You also have the right to lodge a complaint with the CNIL on the website www.cnil.fr or by post in writing to CNIL 3 place de Fontenoy TSA 80715 - 75334 PARIS CEDEX 07 Your rights can be exercised through the following contacts.

Contacts

Mr. Anthony Villeneuve SAS has appointed a data protection officer Mr. Villeneuve Anthony (contact@qrcodemedical.com), to be your privileged interlocutor for the processing of your personal data.
You can exercise your rights and send any request for information concerning your personal data:
By mail: Download the form and send it to us with the front / back copy of an identity document to Mr. Anthony Villeneuve 15 rue Michelet Appartement 18, 82000 Montauban Tarn et Garonne.