Privacy policy

Effective May 14, 2024

EXATECH attaches great importance to protecting your personal data and respecting your privacy.

The purpose of this policy is to inform you of our practices regarding the processing and sharing of data that you provide to us via our application. Connect competition.

By EXATECH we hear the company EXATECH SAS with capital of €40,000, registered office: 18, rue des Gardes, 91370 VERRIERES LE BUISSON – RCS Evry: B 401 501 283, (hereinafter " EXATECH).

Preamble

EXATECH is solely responsible for the processing of personal data within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, applicable as of May 14, 2024.

Personal data is any data that can be used to identify you directly or indirectly, including your name, gender, age, postal address, telephone number, and email address.

In accordance with legal and regulatory obligations, we collect, use, share, and store this information under enhanced security conditions and for limited periods of time, proportional to the purposes for which it is intended.EXATECH a fixed.

1. Data collection

EXATECH collects data via information provided by the application user Connect competition.

2. Nature of data and purposes of data processing

These personal data processing operations have the following characteristics:

Purpose of processing : Reservation of services related to the stay of candidates during a competition organized by EXATECH.

Purpose of processing organize the stay of candidates for a competition or examination thatEXATECH is responsible for organizing

Treatment duration: 2 years

Categories of persons concerned : User

Type of personal data concerned: civility, surname, first name, e-mail address, password, postal address, telephone number, cBANK DETAILS.

The information collected about you enables us to provide the services you have requested.

We use your personal data for the purposes we have identified, which are based on one or more of the following legal grounds:

  • Your consent ;
  • Our legitimate interests ;
  • A legal, regulatory, judicial or administrative obligation.

3. Transfer of personal data to third parties

Your personal data will be transmitted only to our partners, within the limits provided for by the provisions in force, the contract binding us to them, and in accordance with this policy.

We may pass on some of this data to third parties, within the limits of the provisions in force and in accordance with this policy.

These third parties are :

3.1 Subcontractors

Your personal data may be passed on to external service providers who process it on our behalf and in accordance with our instructions, particularly in the context of technical services.

These include third-party companies providing support services, as well as logistics, transport and delivery service providers.

3.2. State authorities

In order to comply with legal, regulatory, judicial or administrative obligations or to respond to requests from administrative and judicial authorities, we may be required to communicate your data to these authorities whenever we are legally obliged to do so.  

4. Transfer of personal data outside the European Union

Your personal data is processed and hosted on servers located in the European Union; it will never be transferred to a subcontractor whose servers are located in a country outside the European Union.

If necessary, we will inform you and take all necessary measures to guarantee the security of your data and compliance with legal and regulatory obligations. In particular, we will ensure that your data is protected in the same way as if it were used within the European Union.

5. Data retention period

We keep your data for the period necessary for the purposes of processing, i.e. 2 years.

6. Rights of persons concerned

The use of your data is possible either because of the performance of our contractual relationship, or because you have expressly consented to it, to protect and guarantee our legitimate interests or to meet a legal obligation.

However, at any time, you have the right to access, portability, rectification and deletion of your data or limitation of their processing. You can exercise these rights by contacting cil@exatech-group.com.

If, for any reason whatsoever, you consider that our response is not satisfactory, you may lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés), which is responsible for ensuring the protection of personal data on French territory.

7. Computer security

7.1. General principle

We implement all appropriate technical and organizational measures to ensure the security, integrity and confidentiality of your personal data and to prevent any accidental or unlawful destruction, loss, alteration, disclosure, intrusion or unauthorized access to such data.

7.2 Security vulnerability management

We have put in place a procedure for the prevention, management and remediation of security breaches and the notification of personal data breaches, in compliance with legal and regulatory provisions. This procedure enables us to effectively address vulnerabilities and potential personal data breaches.

We undertake to notify the competent supervisory authority, i.e. the CNIL, of any breach of personal data as soon as possible and, if possible, no later than 72 hours after becoming aware of it, if the breach in question is likely to pose a risk to your rights and freedoms.

We also undertake to notify you, as soon as possible, if the breach is likely to result in a high risk to your rights and freedoms. We will also inform you of the measures taken to remedy the data breach, including measures to mitigate its consequences.

8. Modification of the privacy policy

We may amend this policy from time to time, in particular in order to comply with any changes in legislation, regulations, case law or technology. In such a case, the date of the update will be clearly identified at the top of the present policy. These modifications are binding on the User as soon as they are put online. It is therefore advisable for the User to consult the present privacy and cookie use policy on a regular basis in order to take note of any changes.

9. Contact

EXATECH has appointed a Data Protection Officer. He can be contacted at the following address: cil@exatech-group.com and is suitable for the following subjects

  • Managing the rights listed in point 6
  • Filing a claim
  • Questions about this Privacy Policy and confidentiality

10. Cookies policy

A cookie is a file placed on your terminal (computer, mobile or tablet) when you visit a site or view an advertisement. Its purpose is to collect information about your browsing habits and to send you services and offers tailored to your terminal and your centers of interest.

Cookies deposited on the site have a maximum lifetime of 15 minutes after disconnection.

When you visit our website for the first time, cookies are deposited, subject to the choices you have made concerning cookies.

Certain so-called "functional cookies" are automatically deposited as they are necessary for the provision of the service. No prior consent is required for these cookies. The present application deposits only this type of cookie, to the exclusion of all others. They are only intended to improve your user experience and offer you personalized interfaces, and do not collect any other information.

Back to top