DFNS is aware of the importance of data privacy and is committed to implementing the highest standards of confidentiality and security to ensure that your privacy is respected and protected.
This Privacy Policy informs you of the commitments and practical measures taken by DFNS to ensure that your personal data is kept confidential.
Data Controller
DFNS, registered with the Paris Trade and Companies Register under number 888 176 575, whose registered office is located at 142 rue de Rivoli 75001, Paris, France, is the data controller. DFNS is responsible for collecting and processing your personal data.
Personal Data Collected and Processed by DFNS
When you use DFNS' website, the company collects the following personal data:
- Contact data: e-mail address, telephone number, etc.
- Identification data: surname, first name, country, etc.
- Connection data: IP address, browser type and version, operating system and other software installed in your environment, mobile platform, technical identifier(s), error reports and execution data.
Purposes and Legal Basis of Processing
DFNS ensures that it only collects and processes data that is strictly necessary for the purpose for which it is processed.
The organization collects and processes personal data to provide marketing services and manage business relationships for these purposes:
- Sending of articles and newsletters or marketing materials, invitation to events
- Management of the business relationship
DFNS collects and processes personal data to protect legitimate interests for these purposes:
- Registration and prospection
- Fraud prevention
- Personalization of offers
Consent. For certain activities, including marketing and cookies, we seek your consent prior to processing your personal data. You may withdraw this consent at any time.
Recipients of Personal Data
In accordance with the purposes set out in this Policy, DFNS may share your personal data with:
- Duly authorized DFNS employees and managers. Any employee with access to personal data must follow strict confidentiality obligations.
- DFNS' subsidiaries when necessary to carry out operations for which data were collected.
- Service providers acting as subcontractors, performing services related to DFNS' offerings, including email service providers, telephony service providers, and identity document analysis services.
- Administrative or legal authorities, and authorized third parties, when data sharing is required by law.
How Long We Keep Your Personal Data
The retention periods we apply to your personal data are limited and proportionate to the purposes for which they were collected.
Management of prospect information: Data is kept for three (3) years from the date of collection or our last contact with the prospect.
Fraud prevention: Only data necessary for pre-litigation or litigation purposes are archived until the legal statute of limitations is acquired. The statute of limitations in civil and commercial matters is five (5) years. In the event of litigation, this data is kept for the duration of the procedure and until the expiry of the ordinary and extraordinary remedies.
Management of cookies: The duration of data retention shall not exceed 13 months.
Transfers of Data Outside the European Economic Area ("EEA")
The personal data will be processed exclusively on the territory of (i) France, and/or any other member state of the European Union, and/or any other signatory state of the agreement on the European Economic Area, (ii) and/or any other state ensuring an adequate level of protection.
Your Rights
- The right of access: You can obtain information about the data held and the processing carried out.
- The right of rectification: You can modify or correct your data.
- The right to erasure: You can request deletion of your data in certain circumstances. Note that legal or regulatory provisions or legitimate reasons may require retention.
- The right to restriction and objection: You may ask for restriction or objection to processing in certain circumstances. The organization may continue processing if there is a legitimate reason.
- The right to portability: You can request data in electronic form and/or ask transmission to a third party where technically possible.
Exercising Your Rights
You can exercise your rights and contact the personal data protection department through:
- Email: legal@dfns.co
- Postal address: Data Privacy — 198 Avenue de France, 75013 Paris, France
For any request to exercise your rights, we may ask you to provide an official document of identity in order to verify that you are the person concerned by the personal data that is the subject of the request.
Response Timeline
We undertake to respond to any request as soon as possible. You will receive a response within a maximum of one (1) month from the receipt of your request. However, we inform you that this period may be extended by two (2) months if your request is particularly complex or given the number of requests. In this case, you will be informed of such an extension and the reasons for it within a maximum of one (1) month from the receipt of your request.
Regulatory Complaints
You may also file a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL), the French personal data regulator: www.cnil.fr
Data Security
DFNS ensures the security of your personal data by taking all physical, technical and organizational measures to ensure the confidentiality, integrity and availability of personal data, including encryption and anonymization. We also require all of our employees and partners of DFNS to adhere to strict standards of personal data security.
Changes
We will update this Privacy Policy periodically. Any changes will be posted on this page with a current revision date.