Company : SWEALINK
The purpose of this policy is to inform you about how we use and protect your personal data, as well as the reasons why we process your data.
1 – what personal data do we collect?
The personal data we collect are your name, surname, address, telephone number, e-mail address. We take care to limit the personal data we collect to what is strictly necessary to enable us to manage our customers, prospects or suppliers and to comply with our regulatory obligations. We treat them with the maximum attention and respect. We do not keep any customer payment data.
- How do we collect your personal data?
We collect personal data either directly from you, by paper form, telephone or internet, or they are sent to us by a third party to whom you have given your consent.
- What are the legal bases for the use of your personal data?
We need to process your data as part of your request for information as well as for managing the execution of the sales contract or services. We may also use your personal data in the context of legal obligations and, where applicable, for the protection of the vital interests of a natural person.
- To which recipients may your personal data be disclosed?
In order to fulfill the aforementioned purposes, we may be required to disclose some of your personal data only to our delivery, access and payment providers, SCALE COMMERCE, ILOK and BRAINTREE, for the execution of your order as well as to the judicial or administrative authorities within the framework of legal obligations. Under no circumstances do we transmit your data to third parties without your permission.
- How and where do we store your personal data?
The personal data we keep is stored on our computers and web hosting in France. We make every effort to keep personal data in the safest and most secure way, and to keep them only for as long as necessary. We take appropriate physical, technical and organisational measures to prevent, as far as possible, any breach of personal data.
Our subcontractors store your data on their computers and servers in the United Kingdom, considered by the European Union as offering “adequate” level of data protection, as well as in the United States of America. The latter country is now not considered as «adequate». Therefore, the contracts with our American subcontractors contain binding clauses in accordance with the GDPR.
- How long do we keep your personal data?
We retain your personal data for the period necessary for our relationship, increased by 5 years, except for a longer legal or regulatory obligation.
- Exercising your rights
You have, with regard to the personal data concerning you that we hold, a right of access, rectification, erasure and portability, which you can exercise directly with SWEALINK, on simple request by telephone, e-mail, contact form or mail, with a double-sided copy of an identity document.
In accordance with the applicable regulations, you are entitled to lodge a complaint with the CNIL in France.