1. Purpose
This privacy policy (hereinafter the “Privacy Policy”) illustrates the commitment of the company Savistas, a Sole Proprietorship Simplified Joint Stock Company (SASU) with a share capital of €2,000, registered in the Avignon Trade and Companies Register under number 991 797 382 00017 and whose registered office is located at 81 Rue du Traité de Rome, 84000 Avignon (hereinafter the “Company”) with respect to your privacy and the protection of your personal data on the website: https://www.savistas.fr/ (hereinafter the “Site”).
The Site allows you in particular to:
- Present the Savistas project
- Explain the educational AI solution
- Show the benefits for:
- students
- parents
- teachers
- companies
- Contact the Company.
2. Processing of your personal data
2.1. Description of the processing of your personal data
In accordance with applicable laws and regulations, the Company, acting as data controller, collects some of your personal data during your visit to the Site.
In order to respond to your contact requests, the Company collects your following personal data:
- your last name;
- your first name;
- your email address;
- your phone number;
- the content of your message.
When you connect to the Site, the Company also collects your following personal data:
- your connection logs;
- your connection data;
- your IP address.
Data marked with an asterisk are optional, you are not obliged to provide them to the Company.
The Company uses your personal data for the following purposes:
| Purpose | Legal basis | Personal data retention period |
|---|---|---|
| Reception and management of contact requests with the Company | The processing is based on your consent | Until the withdrawal of your consent or for a period of three years from the last contact with you |
| Management of requests for access, portability, erasure, restriction of processing, rectification, and objection rights | The processing is necessary to respond to your requests to exercise your rights | Up to one year from your request to exercise your right(s) |
| Management of requests for the right to object to commercial prospecting | The processing is necessary to respond to the request to exercise the right to object | Up to three years from the exercise of your right to object |
2.2. Recipients / transfers of your personal data
Access to your personal data is restricted to authorized persons only in order to achieve the purpose of the processing, in particular to the service providers involved in delivering the service, and to the members of the Site management team.
Your personal data may also be disclosed by the Company to third parties:
- if the law or a legal procedure requires the Company to share your personal data;
- in response to a request from a public or judicial authority (notably in case of a judicial requisition);
- when the Company considers that the transfer of your personal data is necessary or appropriate to ensure the safety of individuals or protect the public.
Your personal data is transmitted to the company o2switch (Chemin des Pardiaux, 63000 Clermont-Ferrand) which hosts the Site in France.
Therefore, your personal data is not subject to any transfer outside the European Economic Area.
You can access social network pages by clicking on the share buttons provided for this purpose. The collection of information by social network share buttons is subject to the privacy policies of these third parties. We invite you to read the policies of these social networks to know the use made of your personal data.
2.3. Security of your personal data
The Company ensures the security of your personal data by implementing appropriate technical and organizational measures to guarantee a level of security adapted to the risk:
- the pseudonymization and encryption of your personal data;
- any means to guarantee the constant confidentiality, integrity, availability, and resilience of processing systems and services;
- any means to restore the availability and access to personal data;
- a procedure for regularly testing, analyzing, and evaluating the effectiveness of the technical and organizational measures implemented.
2.4. Retention of your personal data
The Company retains your personal data only for the duration necessary for the operations for which they were collected and in compliance with the regulations in force.
2.5. Your rights on your personal data
You have the following rights regarding your personal data:
You can request access to your personal data.
You can also request the rectification of your personal data that is inaccurate or that your incomplete personal data be completed.
You also have the right to know the origin of your personal data.
You can request the deletion of your personal data when:
- Your personal data is no longer necessary to achieve the purposes for which they were processed;
- You have chosen to withdraw your consent (in cases where consent is the legal basis of the processing), this withdrawal not impacting the lawfulness of the processing prior to its implementation;
- You have objected to the processing of your personal data;
- Your personal data has been processed unlawfully;
- Your personal data must be erased to comply with a legal obligation; or
- The deletion of your personal data is required to ensure compliance with the legislation in force, in particular with regard to the applicable retention periods.
You can object to the processing of your personal data in compliance with the legal obligations imposed on the Company.
You can also request the restriction of the processing of your personal data if:
- You contest the accuracy of your personal data;
- The Company no longer needs your personal data for the purposes of the processing; and
- You have objected to the processing of your personal data.
You have the option not to be subject to a decision based solely on automated processing producing legal effects concerning you or significantly affecting you in a similar way, notably based on profiling.
You can request the Company to provide you with your personal data in a structured, commonly used, machine-readable format, or request that they be “carried” directly to another data controller under the following conditions: that the processing is based on your consent; and that the processing is carried out by automated means.
Pursuant to Article 85, I of the French Data Protection Act of January 6, 1978 as amended, you can define instructions on the exercise of your rights under this section after your death (in particular on the retention period of your personal data, their erasure and/or communication), as well as designate a person responsible for the exercise of these rights.
In the absence of such instructions, the Company will comply with the requests of your heirs, as restrictively set out in Article 85, II of the French Data Protection Act.
You can withdraw your consent to the processing of your personal data at any time.
The withdrawal of your consent only applies to the future and does not call into question the lawfulness of processing carried out by the Company on the basis of your consent prior to your withdrawal or the lawfulness of processing based on another legal basis such as the performance of a contract between you and the Company.
If you have concerns or complaints regarding the protection of your personal data, you have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés via the following link: Online Complaints | CNIL
The CNIL is also reachable at the following address: 3 Place de Fontenoy, 75007 Paris - phone: +33 1 53 73 22 22.
You are invited to inform the Company's Data Protection Officer in advance so that they can process the request and attempt to find an amicable solution.
You can exercise your aforementioned rights and/or ask any question relating to the processing of your personal data by the Company to the Company's Data Protection Officer by email at the following address: [email protected]
In order for the Company to process your request as quickly as possible, you can indicate its subject and the context in which your personal data were processed by the Company.
In case of reasonable doubt about your identity, the Company may ask you to provide a copy of both sides of a valid identity document. The latter will be deleted by the Company as soon as your request is granted.
The Company may retain the copy of your identity document for the sole purpose of establishing proofs, in the event of a dispute with you.
2.6. Links to third-party sites
In order to improve the quality of the Site, the Company may include links on the Site pointing to third-party sites. These sites have a different and independent privacy policy from that of the Company. You are invited to consult the privacy policy of the third-party sites you visit.
2.7. Language
This Privacy Policy is written in the French language.
In the event that it is translated into one or more foreign languages, only the French version shall prevail in the event of a dispute.
2.9. Modification of the Privacy Policy
The Company reserves the right to make changes to this Privacy Policy at any time.
The Company recommends consulting this page regularly by referring to the date of its last modification.
In the event of a significant modification of the Privacy Policy, the Company will notify you.
Any question about your data?
Our team is available to answer all your questions regarding the management of your personal data.