Personal Data Protection Policy

of Tilkee

Alternative Text

Dernière date de mise à jour : 07/05/2019

Preambule

TILKEE, société de droit français immatriculée au registre du commerce et des sociétés de Lyon sous le numéro 789120649, sise 22 rue Constantine, 69001 LYON, France (ci-après « TILKEE ») procède au traitement de Données Personnelles (telles que définies ci-après) dans le cadre de son activité, ce qui inclut les Données Personnelles des personnes qui utilisent les services de TILKEE via les sites Web ou/et les applications de TILKEE (ci-après dénommés, les « Plateformes Numériques »).

TILKEE is a company incorporated in France and entered on the Lyon Trade and Companies Register under number 789120649, located at 22 rue Constantine, 69001 LYON, France (hereinafter referred to as “TILKEE”) and processes Personal Data (such as this is defined hereunder) as part of its business activities, which includes Personal Data of people who use TILKEE services via the TILKEE Websites and/or applications (hereinafter referred to as “Digital Platforms”).

This “Personal Data Protection Policy” (hereinafter referred to as the “Policy”) is intended to inform all natural persons concerned (hereinafter “You” or “Your”) as to the manner in which TILKEE collects and uses Personal Data and the ways in which You can control this use.

1. Definitions

2. Scope

The Policy is applicable regardless of Your Hardware, regardless of which Digital Platforms You use to access TILKEE services (Websites or applications) and at all times.

This Policy outlines the principles and guidelines for protection of Your Personal Data, which includes Personal Data collected on or via the TILKEE Digital Platforms. TILKEE collects Personal Data online (including by email) or offline; this Policy is applicable regardless of the mode of collection or processing.

The Digital Platforms may propose links to third party Websites likely to be of interest to You. TILKEE does not have any control over the content of third party websites or the practices of third parties in terms of Personal Data protection. Consequently, TILKEE hereby relinquishes all liability concerning processing of Your Personal Data by these third parties. It is Your responsibility to seek information concerning personal data protection policies of these third parties.

3. Collecte des Données Personnelles

Personal Data collected by Tilkee may include the following and any other Personal Data that may be relevant for the purposes set out below:

Tilkee for sales & Tilkee for marketing

Users
  • full name;
  • photo(s);
  • postcode;
  • postal address;
  • town/city;
  • email address;
  • telephone number(s);
  • login and password;
  • IP address.
Visitors (viewer)
  • IP address;
  • email address (if access link with prospect authentication);
  • full name and telephone number and email address (if electronic signature);

Browser version, OS, and traffic measure are also collected.

Tilkee for jobs

Users
  • full name;
  • photo(s);
  • postcode;
  • postal address;
  • town/city;
  • email address;
  • telephone number(s);
  • login and password;
  • IP address;
Visitors (viewer)
  • No personal data collected

Browser version, OS, and traffic measure are also collected

In all instances, Personal Data collected is however limited to data required for the below purposes.

TILKEE pays particular attention to obtaining the consent for collection of Personal Data.

Tilkee as controller

TILKEE as Controller undertakes to request Your consent prior to each time it collects any item of Personal Data.

Consent may be given in various forms (opt-in, validation button, etc.) but will always require You to be clear and informed of the use of Your Personal Data.

Tilkee as processor

TILKEE as Processor is under no circumstances liable for the data You deliberately choose to enter into the Digital Platforms.

TILKE as Processor reminds You that You have legal obligations concerning obtaining the consent of Your own clients and prospective clients. You must obtain their clear and explicit consent to be canvassed by email and by the use of TILKEE.

TILKEE as Processor undertakes to reiterate the consent of Your clients or prospective clients when they use the Digital Platforms.

TILKEE may under no circumstances be held liable for any fraudulent canvassing which does not respect its rules and legislation in force.

PLEASE NOTE: TILKEE is under no circumstances whatsoever liable for the Personal Data entry of Your prospective clients on the Digital Platforms or in documents stored on these. TILKEE may also not be attributable for processing of Data which does not concern this Personal Data.

Personal Data is generally collected so as to allow for proper operation of TILKEE as well as improvement of marketing and advertising efforts of TILKEE, better adaptation of products and services offered by TILKEE to client requirements or respect of declarations concerning obligations for which provision is made by law and other activities necessary for the optimal use of our services.

Tilkee as controller

TILKEE as Controller collects and uses Personal Data for its business activities and for the following purposes:

– To allow you to request and obtain information about TILKE and TILKEE products and services;

– To allow for interactive and personalised use of the Digital Platforms;

– To work out Your requirements and areas of interest and provide You with the most suitable products and/services;

– To access all characteristics and options offered by the Digital Platforms;

– To allow TILKEE to manage surveys;

– To allow TILKEE to manage its marketing activities;

– To allow TILKEE to manage its commercial relations: commercial opportunities, offers, purchases, contracts, orders, invoicing, etc.

– To offer you commercial or support services;

– To allow you to purchase software, product or service licences;

– To allow You to register for seminars, webinars or events;

– To allow TILKEE to manage its Research and Development activities: development requests, incidents, quality issues, tests, etc.

– To process applications and manage sources of recruitment;

– To manage Your training and/or certification for TILKEE product and services;

– With Your consent, send marketing and commercial emails or any other email which may inform You of TILKEE developments and its Digital Platforms;

– Any other purpose in relation with TILKEE as Controller.

Tilkee as processor

TILKEE as Processor only collects Your Data and that of Your Clients for Your legitimate interests following consent of each of the parties.

TILKEE as Processor collects and uses Your Personal Data for its business activities and notably the following purposes:

– To allow for interactive and personalised use of the Digital Platforms;

– To enable evaluation of viewing of Your documents by Your clients or prospective clients

– To enable printing of various studies and evaluations provided by TILKEE

– To enable proper operation of services offered by the various TILKEE Digital Platforms

– To offer you a better user experience

– To manager requests and various problems which may arise on the Digital Platforms

– To allow for security of the Digital Platforms and Data they contain

– Any other purpose in relation with TILKEE as Processor.

The Digital Platforms may use cookies or other technologies which collect or store Personal Data. Cookies may be permanent (and remain after You log out of the Digital Platforms so as to be used during Your subsequent visits to the Digital Platforms) or temporary (and disappear when You log out of the Digital Platforms).

TILKEE uses cookies:

TILKEE may also use third party services (such as Google Analytics, LinkedIn, etc.) so as to perform services on its behalf and notably to:

In this instance, invisible pixels and cookies provided by these third-party service providers may be used and stored. During the transfer of information generated by cookies, the parameters of cookies ensure that the IP address is anonymised with geolocation and prior to storage.

When You browse on the Digital Platforms, cookies are activated by default and data may be read or stored locally on Your hardware.  You will be informed the first time that cookies are proposed, and You can decide whether to accept or refuse. By continuing to use the Digital Platforms, You expressly accept the use of cookies by TILKEE.

You can also configure Your browser so as to automatically refuse cookies. However, if this is the case, some functions and characteristics of the Digital Platforms may not correctly operated and You may not be able to access some parts or services of the Digital Platforms.

4. Personal Data Processing and Management

TILKEE oversees protection and security of Personal Data that You choose to send it, so as to ensure their confidentiality and prevent them from being damaged, misused, destroyed or disclosed to unauthorised third parties.

TILKEE has taken physical, electronic and organisational protective measures to prevent any loss, improper use, access or unauthorised distribution, alteration or destruction of Personal Data. Amongst these protective measures, TILKEE integrates specially developed technologies to protect Personal Data during transfer.

As all Personal Data is confidential, access is limited to employees, service providers and agents of TILKEE on a need to know basis as part of their mission. All people having access to Your Personal Data are bound by an obligation of confidentiality and risk disciplinary measures and/or sanctions if they default in respect of these obligations.

However, it is important that You take care to prevent any unauthorised access to Your Personal Data. You are responsible for the confidentiality of Your password and information in Your account. Consequently, You should ensure that You close each session in the event of shared use of the same computer.

Data is stored, archived and encrypted by leading hosts in Europe.

Personal Data processing notably includes the use, storage, transfer, adaptation, analysis, modification, declaration, sharing and destruction of Personal Data depending on that which is required in light of legal circumstances or requirements.

All Personal Data collected is stored for a limited term in line with the purpose of processing and solely for the duration for which provision is made by applicable legislation:

Tilkee as controller

For any contract signed with TILKEE, the following Data is stored for the indicated term:

Identity and contact
5 years after the end of contractual obligations
Commercial relations5 years after the end of contractual obligations
Commercial relations12 months after collection
Payment terms
13 months after debit

For canvassing, TILKEE stores the following Personal Data for the corresponding durations:

Identity and contact3 years from last contact
Connection data12 months from collection

For direct marketing, TILKEE stores the following Personal Data for the corresponding durations:

Identity and contact
3 years from last contact
Tilkee as processor

For Your canvassing requirements, TILKEE stores the following Personal Data of Your prospective clients for the corresponding durations:

Identity and contact
3 years from last contact
Connection data12 months from collection

For Your direct marketing requirements, TILKEE stores the following Personal Data of Your prospective clients for the corresponding durations:

Identity and contact
3 years from last contact

PLEASE NOTE: TILKEE is under no circumstances liable for the Personal Data that You enter in documents which You store on the Digital Platforms.

TILKEE, as proof of transparency, offers its users a Privacy Center which is a privacy management platform allowing You to access Personal Data You have conferred to TILKEE in real time.

5. Transfer and Communication of Personal Data

In the event of accessing the Digital Platforms from a country which is not a member of the EU and whose legislation pertaining to collection, use and transfer of data differs from those in the EU, You accept and consent in line with this Policy to transfer Your Personal Data to the EU.

TILKEE may transfer Your Personal Data outside the EU, under the condition that it ensures, prior to transfer, that entities outside the EU, which includes affiliate companies and subsidiaries of TILKEE, offer an adequate level of protection, pursuant to European legislation.

TILKEE only sends Your Personal Data to companies, organisations or third parties in the following circumstances:

TILKEE only sends Your Personal Data to companies, organisations or third parties with Your consent. TILKEE will always seek Your authorisation before sending Sensitive Personal Data to third parties.

TILKEE sends Your Personal Data to other companies, sub-contractors or trusted persons who process these on its behalf, pursuant to its instructions, pursuant to these Confidentiality Rules and in respect of all other appropriate security and confidentiality measures. TILKEE will undertake such transfers to:

TILKEE sends Your Personal Data to other companies, sub-contractors or trusted persons who process these on its behalf, pursuant to its instructions, pursuant to these Confidentiality Rules and in respect of all other appropriate security and confidentiality measures. TILKEE will undertake such transfers to:

TILKEE does not share Your Personal Data with companies, organisations or third parties unless, in good faith, access, use and protection or disclosure of this Data is reasonably justified to:

If legislation in force permits, TILKEE retains the right to:

If TILKEE should learn that a third party to whom TILKEE has sent Personal Data for the aforementioned purposes, uses or discloses Personal Data without respecting this Policy or in breach of applicable legislation, TILKEE will take all reasonable measures to prevent or bring an end to such use or disclosure. These transfers may take place by Internet or any other method deemed as necessary by TILKEE pursuant to applicable legislation.

6. Your rights over Personal Data conferred

TILKEE undertakes to process and protect Personal Data which You send us in a loyal manner in agreement with the GDPR. However, it may be that You decide to take action over this data. You have several ways of acting, including the following:

PLEASE NOTE: As to the right of deletion, rectification or objection to holding Personal Data, TILKEE will no longer process personal data unless TILKEE shows that there are legitimate and imperious grounds for processing which prevail over the interests and rights and liberties of the person concerned, or for observation, exercising or defence of rights in court.

7. Notification of Personal Data infringements

In case of observation of an infringement of personal data likely to lead to a risk for the rights and liberties of natural persons, TILKEE will notify the control authority (the National Data Protection Authority [CNIL]), by the latest 72 hours after becoming aware thereof. Where necessary, we will notify You:

Where applicable, where the infringement is likely to lead to a high risk for the rights and liberties of a natural person, TILKEE will contact the people concerned by any personal data infringement. Communication with the person concerned will include the following information:

8. Dispute resolution

Although TILKEE has taken reasonable measures to protect Personal Data, no transfer or storage technology is totally infallible.

However, TILKEE is concerned to guarantee the protection of Personal Data. If You should have any reason so as to believe that the security of Your Personal Data has been compromised or misused, You are invited to contact TILKEE at the following address: dpo(at)tilkee.com.

TILKEE will investigate all claims concerning the use and disclosure of Personal Data and seek to resolve these pursuant to the principles appearing in this Policy.

Unauthorised access to Personal Data or the improper use thereof may constitute an infringement as defined by local legislation.

9. Effective date and Modifications to the Personal Data Protection Policy

This Policy may be updated in line with TILKEE requirements and circumstances and if legislation requires. We consequently invite you to regularly read updates.

Any translation of this Policy or any content of the Digital Platforms are only provided as a guide.

If any stipulation in this policy, binding You to TILKEE is declared invalid or unwritten by a judge, all other stipulations remain applicable ipso jure. TILKEE reserves the right to amend or re-write the stipulation in question.

10. Acceptance of the TILKEE Personal Data Protection Policy

As soon as You access the Digital Platforms, You unreservedly accept the Personal Data Protection Policy. If You do not wish to comply with the rights and obligations indicated in the Policy, TILKEE invites You to leave the Digital Platforms and not to access these in future.

By accepting the Personal Data Protection Policy, each User uses the Digital Platforms pursuant to their intended use, the rights assigned by TILKEE and regulations applicable and/or in force.

11. Contact

For any questions concerning this Policy, to no longer receive information from TILKEE or for any request for a modification, addition, update or deletion of Your Personal Data, You can send an email to the following address: dpo(at)tilkee.com.