In the normal course of its retail management services activity, UPTIFY processes personal data. The collection and processing of personal data is carried out in accordance with the French law n° 78-17 of 6 January 1978 on data processing, files and liberties, modified by the European Regulation 2016/679 of 27 April 2016 on the protection of personal data.
UPTIFY attaches great importance to the protection of the privacy and personal data of all persons involved in its activity. UPTIFY undertakes to collect only the personal data that is relevant and necessary for the normal performance of its activity, the terms and conditions of collection and processing of which are set out in this Personal Data Protection Policy.
HOW IS YOUR PERSONAL DATA COLLECTED?
In the normal course of its interim management consulting activity, UPTIFY may collect your personal data – clients, prospects, suppliers, employees, interim managers – in both paper and electronic format.
WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA?
UPTIFY processes your personal data in the cases permitted by the applicable regulations:
- in the context of pre-contractual negotiations or the contractual execution of our agreements;
- as part of our legitimate interest under certain conditions;
- in the context of your consent when required.
WHAT PERSONAL DATA IS COLLECTED AND PROCESSED BY UPTIFY?
UPTIFY takes the principle of collecting data that is essential and limited to the normal functioning of its activity and for which it is processed. For interim managers and candidates, the data collected by UPTIFY may include: Civil status / Name and first name / Postal address and personal email / Personal telephone numbers / Date of birth / Training and diplomas / Professional situation (past and present functions, career path), as well as any information indicated in the CV transmitted, with the exception of so-called sensitive information / All administrative information necessary for the contractualization.
For clients, prospects, suppliers and service providers, the data collected by UPTIFY may include: Civil status / Name and first name / Company / Professional position / Professional contact details / All administrative information necessary for the contract. This data is only collected from you and on professional social networks.
WHY IS YOUR DATA COLLECTED?
UPTIFY collects and uses your Personal Data for the normal needs of its activity and in particular for the following purposes:
- exchange with you in the context of our professional relations (client, prospect, supplier, candidate)
- allow you to request, obtain or receive information about UPTIFY
- to carry out satisfaction surveys, analyses and statistics in order to improve our services and our knowledge of our clients and prospects
- to update your data (update campaigns) and to enable you to exercise your rights with UPTIFY (requests for access, rectification, deletion, portability and opposition)
- to fulfil our pre-contractual and contractual obligations
- to carry out the administrative management of our relations concerning in particular contracts, orders, invoices… or for any other purpose imposed by the legislation in force
- to enable you to participate in specific events organized by UPTIFY
- to manage applications for positions at UPTIFY.
HOW LONG WILL YOUR DATA BE STORED?
UPTIFY only keeps your Personal Data for as long as is necessary to fulfil the purposes set out above, subject to the legal possibilities of archiving, obligations to retain certain data and/or anonymization, and according to the following criteria:
- Personal Data of customers, prospects, suppliers and service providers: Personal Data is kept for the duration of the commercial relationship. It will then be kept for commercial prospecting purposes or to feed our supplier database for a period of 5 years from the date of the last contact.
- Personal data of candidates: Personal Data is kept for a period of 3 years from the date of the last contact.
WHO HAS ACCESS TO MY PERSONAL DATA?
Your personal data is confidential and only the employees and associates of UPTIFY, for whom access to your Personal Data is necessary for their activity, may access it, without prejudice to its possible transmission to the bodies responsible for a mission of control or inspection in accordance with the applicable regulations. The employees and partners of UPTIFY are bound by confidentiality obligations with regard to your Personal Data.
WHAT ARE THE SECURITY SAFEGUARDS IN PLACE?
UPTIFY ensures the security of your Personal Data by implementing enhanced data protection through the use of physical and IT security measures. Despite these reasonable measures to protect your personal data, no transmission or storage technology is infallible. Thus, and in accordance with the applicable European regulations, in the event of a proven breach of Personal Data likely to give rise to a high risk for the rights and freedoms of the persons concerned, UPTIFY undertakes to communicate this breach to the competent supervisory authority and, where required by the said regulations, to the persons concerned (individually or in general, depending on the case). It is of course also your responsibility to exercise caution to prevent any unauthorised access to your Personal Data and to your terminals (computer, smartphone, tablet, etc.). In addition, the website www.uptify.com may provide links to third party websites that may be of interest to you. UPTIFY has no control over the content of these third party websites or over the practices of these third parties with regard to the protection of personal data that they may collect. Accordingly, UPTIFY disclaims any responsibility for the processing by such third parties of your Personal Data, not subject to this policy. It is your responsibility to inform yourself about the Personal Data protection policies of these third parties.
WHAT ARE MY RIGHTS REGARDING MY PERSONAL DATA?
UPTIFY strives to provide you with clear and accurate information about the conditions under which your Personal Data is processed (right of information).
You also have the following rights:
Right of access, rectification and deletion of your Personal Data:
The right of access allows you to have access to UPTIFY to all the Personal Data concerning you as well as confirmation as to whether or not your Personal Data is processed, and the conditions of this processing. You also have the right to obtain from UPTIFY, as soon as possible (and by default, within 30 days), the rectification of your Personal Data. Finally, subject to the exceptions provided for by the applicable law (e.g.: retention necessary to comply with a legal obligation), you have the right to ask UPTIFY for the deletion, as soon as possible, of your Personal Data, in the following cases:
- your Personal Data is no longer necessary for the purposes for which it was collected or otherwise processed;
- you wish to withdraw your consent on which the processing of your Personal Data was based and there is no other basis for such processing;
- you consider and can establish that your Personal Data has been unlawfully processed;
- your Personal Data must be erased in accordance with a legal obligation.
Right to object to the processing of your Personal Data:
Where the processing of your Personal Data is necessary for the performance of a task carried out in the public interest or in the exercise of public authoritý vested in UPTIFY, or due to the legitimate interests of UPTIFY or a third party, the right to object allows you to have the right to object to the processing of any Personal Data in relation to your particular situation.
If your Personal Data is processed for the purpose of canvassing, you have the right, regardless of the legal basis for such processing, at any time and free of charge, to object to such processing, including profiling insofar as it is related to such canvassing, whether it is initial or subsequent processing.
Right to limit the processing of your personal data:
The applicable regulations provide that this right may be invoked in certain cases, in particular the following:
- when you dispute the accuracy of your Personal Data;
- when you consider and can establish that the processing of Personal Data is unlawful, but you object to the erasure of the Personal Data and demand instead the restriction of the processing;
- when UPTIFY no longer needs your Personal Data but it is still necessary for the establishment, exercise or defense of legal claims;
- when you object to the processing which would be based on the legitimate interest of the controller, during the verification as to whether the legitimate grounds pursued by the controller prevail over those of the data subject.
Right to the portability of your Personal Data:
Where processing is based on your consent or a contract, this right to portability allows you to receive the raw Personal Data you have provided to UPTIFY in a structured, commonly used format and to transmit this Personal Data to another controller without UPTIFY interfering with it. Where technically possible, you may request that such Personal Data be directly transmitted to another controller by UPTIFY. The data concerned by the portability is limited to the raw data that you have transmitted to us, excluding data resulting from a work of UPTIFY.
Right to withdraw consent to process Personal Data:
Where UPTIFY processes your Personal Data on the basis of your consent, you may withdraw it at any time by sending a request to UPTIFY. On the other hand, and in accordance with the applicable law, the withdrawal of your consent is only valid for the future and cannot therefore call into question the lawfulness of the processing carried out prior to this withdrawal nor be based on any other grounds such as, for example, the performance of a contract.
Right to lodge a complaint with a supervisory authority:
If, despite the efforts of UPTIFY, you believe that your rights have not been respected, you have the right to lodge a complaint with a supervisory authority. A list of supervisory authorities is available on the European Commission’s website.
HOW TO EXERCISE MY RIGHTS?
You can exercise your rights relating to the protection of Personal Data by sending us your request, together with a copy of any identity document, as follows
by email to alain.quillet@uptify.com – By post : to the attention of Data Protection Office (DPO), 47 rue Guersant, 75017 Paris.
UPTIFY undertakes to reply to you as soon as possible, and in any event within one month of receiving your request. If your request is submitted in electronic form, the information will also be provided to you electronically where possible, unless you expressly request otherwise. If we do not comply with your request, we will inform you of the reasons for our failure to act and you will have the right to lodge a complaint with a supervisory authority and/or to seek legal redress. For the purposes of traceability and proof of the deletion of your data, we will retain your request for deletion, the date of the actual deletion and the date of the response sent by UPTIFY for a period of 5 years from the actual deletion of the data.
DATA OFFICER
UPTIFY has appointed Alain Quillet as Data Protection Officer (DPO).
APPLICABLE LAW
This Policy is subject to French law. In the event of a dispute and in the event that an amicable agreement cannot be reached, the competent courts will be those within the jurisdiction of the Paris Court of Appeal, notwithstanding multiple defendants or the introduction of third parties