PRIVACY POLICY

Compliant with the General Data Protection Regulation (GDPR)

The purpose of this privacy policy is to inform all users of the website www.tecknokit.fr (including any subdomains) about the data collected whilst they are browsing and using the site, and about the obligations of the website publisher in this regard (‘the Provider’).
This privacy policy is deemed to be up to date, to be the only one applicable to the use of the aforementioned website, and to apply to all categories of users. It is accessible on the Website at all times, and the Service Provider strongly recommends that you read it carefully.
The Service Provider undertakes to implement, in good faith, the necessary measures to respect your privacy and to act in accordance with applicable regulations.
Article 1. Definitions
. It is understood that the terms used in this Privacy Policy are to be understood in accordance with the definitions set out in Article 1 of the Service Provider’s General Terms and Conditions of Use.
Article 2. Declaration
. The collection and processing of personal data carried out in connection with the use of the Website is conducted in accordance with the rules in force within the European Economic Area, under the responsibility of Mr Franck Goddard, as designated in the Legal Notice.
Article 3. Purpose and objectives of data collection
. The collection and processing of data via the Website are carried out to optimise the management of relations between the Service Provider and Users/Customers; this purpose is broken down as follows:
– to measure the Site’s audience;
– to optimise the technical efficiency of the Website’s use, which may include, in particular, browsing, registration, subscription, written exchanges, the publication of reviews and comments, purchases and orders, making contact, connecting with others, downloading and archiving specific content, managing personal accounts and Content, notifications, invitations, requests and various communications from the Service Provider whilst using the Website.
– to enable the Service Provider to send newsletters by email to Users and Customers (aimed in particular at informing them about the use and development of the Website, upcoming Product releases, useful advice from the Service Provider, etc.);
– to enable the Service Provider to send commercial solicitations by email to Users and Customers, for offers similar to those available on the Website.
Article 4. User Consent
. Under no circumstances shall personal data be collected via the Website without the data subjects having been provided with the necessary information and having been given a genuine opportunity to give their consent prior to such collection.
Article 4.1. Information banner
. An information banner appearing upon entry to the Website reminds users that their consent to the use of cookies and the collection of certain resulting information, as well as to this privacy policy, is deemed to have been given by their continued use of the Website, whether:
– by scrolling down the page in question;
– by clicking on any link on the Website;
– by clicking on the “I accept” button (or equivalent) located on this information banner.
. A final button (“Find out more”) on this information banner also allows users to view this Privacy Policy as soon as they enter the Site, so that they can familiarise themselves with all the terms and conditions of data collection.
Article 4.2. Explicit consent (opt-in)
. Users’ consent is systematically and explicitly obtained by means of a physical or digital signature, and/or by ticking a box, and/or by any other means of obtaining consent in a clear and unambiguous manner (opt-in), in particular in the following cases: contacting the Service Provider using one or more online contact forms, to subscribe to Services, purchase Products, or use features that by their nature require the use of data provided and/or collected.
. In all cases, the Service Provider provides users with a clear and effective means of withdrawing their consent to current and/or future processing, by any means, such as: ‘opt-out’ and unsubscribing from emails, etc.
. All the conditions governing the exercise of Users’ rights regarding their personal data are set out in Article 11 of this Privacy Policy.
Article 5. Scope of data collection
Article 5.1. Data collected when visiting the Website
. When browsing information pages, the Service Provider collects by default only the data strictly necessary for browsing and that which enables the analysis and measurement of the Site’s audience: data relating to the IP address (identification of the internet connection and the device), the pages viewed, as well as all types of data accessible via basic Google Analytics, concerning possible interactions between Users and the Site:
– number of page views;
– traffic sources;
– dates and times;
– locations of visits (approximate geolocation).
Article 5.2. Data collected when using the Site’s features
. The scope of data processing carried out on the Website varies depending on how the Website is used, and may include the following information:
– Valid email address, first name and surname, telephone number;
– Billing address, bank details, company name (if applicable);
– The subject of the message and a free-text field when using the Site’s form and/or messaging service.
– When using technical support, the User may also be required to provide specific information such as the relevant order number, the URL of the page on which the Product subject to the technical support request is installed, as well as any downloadable attachments.
. Whether the provision of information is mandatory or optional varies depending on the use of the Website, and is indicated directly online where applicable.
. Users undertake to provide only complete, accurate and valid information, and agree to hold the Service Provider harmless in the event of any damage resulting from their own failure to do so.
. Similarly, Users acknowledge that their failure to provide mandatory information validly entitles the Service Provider to refuse, suspend or terminate any Service and/or order for a Product that may have been provided to the User on the basis of such information.
. By virtue of its power to moderate and monitor all activities on the Website, the Service Provider reserves the right to carry out any necessary checks on the data provided by Users, including requesting additional supporting documents.
Article 6. Use of cookies
. The operational functioning of the Website may require the use of cookies, which are ‘tracking’ files stored on users’ devices and which provide the Service Provider with access to standard connection information (IP address, time of browsing, approximate location, etc.).
. The information collected will be used solely to monitor usage patterns, the volume, type and configuration of traffic passing through the Website, to develop its design and layout, and more generally to improve navigation and the use of the Website.
Cookies do not collect any personal data that could identify you, either on your hard drive or online, and the information collected is anonymous or anonymised.
. Users acknowledge that they must consult and check the privacy settings of their own web browser (which stores and manages them) if they refuse the use of these cookies.
. The Service Provider recommends that users who accept these cookies configure their settings accordingly, thereby facilitating their browsing and use of the Website.
. Users are therefore free to choose in their browser settings whether or not they wish to accept cookies; if they do not accept them, they acknowledge that they cannot hold the Service Provider liable for any difficulties they may encounter whilst browsing, which may make it difficult or even impossible to use the Website as a whole.
Article 7. Interaction with third-party websites and applications
. Users may interact with the Site by clicking on buttons representing third-party sites and applications (in particular via social media buttons, sites belonging to the Service Provider, any third-party service providers and/or partners and/or subcontractors of the Service Provider).
. Users acknowledge that using these buttons results in the transfer of information to the Service Provider, as well as to the relevant third-party sites, and that they remain fully responsible for their contractual relationships with the aforementioned sites and networks, which publish their own privacy and personal data protection policies regarding the data transferred, collected and processed on this occasion (profile, settings, etc.).
. Under no circumstances shall the Service Provider be liable for any damage resulting from the use of this process in relation to users or the said third parties, and shall be solely responsible for the data processing for which it is responsible.
Article 8. Security of processing
. The Service Provider undertakes to take all necessary and/or useful precautions to safeguard the security of the processing and the data collected, in accordance with physical and logical security standards (protection of premises, protection of servers, etc.) falling within its remit, concerning browsing, registration, subscription and the use of the Website in general, and excluding any obligation regarding backups and/or security measures which fall under the responsibility of the service provider in charge of hosting the Website (see Legal Notice).
. Backups are carried out regularly by the Site’s host, as well as by the service provider responsible for its creation and maintenance, in order to ensure the Site can be restored in the event of a problem affecting its security, integrity or existence.
. In particular, the Service Provider, as the website publisher and the party responsible for the security of browsing and the use of the Website itself, implements measures to prevent the data being processed from being distorted, damaged or accessed by unauthorised third parties, notably by controlling access to the processing and securing any data communications (site security, HTTPS protocol, encryption, etc.).
Any information accessible on the internet via an external link from the Site is not under the control of the Service Provider, who accepts no liability for its content or for any IT security breaches, nor for any consequences arising therefrom.
Article 9. Confidentiality of processing
. It is understood that data provided by Users, where intended for publication on the Site, is not, by its nature, confidential, and that Users release the Service Provider from liability for its public dissemination on the Site where applicable. They may request its removal by email at contact@teknokit.fr.
. The Service Provider shall not disclose any confidential personal data collected during the use of the Website to any third party whatsoever, in any form whatsoever, with the exception, on legitimate grounds and on a strictly confidential basis, of the persons mentioned below:
– Any employees of the Service Provider (including interns);
– The technical service provider(s) responsible for the creation and maintenance of the Website on the one hand, and for data hosting on the other;
– Any person(s) responsible for the Service Provider’s accounting, including any external service provider;
– Any partner(s) of the Service Provider (see the following article);
– Third parties authorised by law (in particular upon an express and reasoned request from judicial or accounting authorities, etc.).
It is also unreservedly accepted that the use of the Website as a whole may result in the automatic transfer, without any intervention by the Service Provider, of certain connection data (pages visited, operating systems, languages, countries, etc.) to the third-party service provider(s) responsible for the services enabling the Service Provider to collect and process its own data (in particular Google Analytics).
Article 10. Data retention and time limits
Article 10.1. Renewal of Users’ consent
. The data collected shall be lawfully retained for the entire duration of the commercial relationship between the Parties, and for as long as it serves the purpose for which it was lawfully collected initially and for which it continues to be processed, and for as long as this purpose remains legitimate, proportionate, and consented to by the user concerned.
. The retention periods indicated therefore commence from the end of the commercial relationship.
. The retention periods for the data collected vary depending on the type of data, which is subject to different legal and regulatory requirements (allowing for longer retention or, conversely, requiring its deletion).
. In any event, the periods correspond to the need for the Parties to fulfil their contractual obligations and are set at:
– fourteen (14) months for connection data and potential audience measurement data (in particular, cookies, which are programmed to be automatically deleted after this period);
– fifteen (15) months for bank details (where these are collected and retained);
– a maximum of three (3) years for other types of data.
. Data is retained for the purposes of improving the use of the Website, optimising the commercial relationship, ensuring secure browsing, and as evidence of the Service Provider’s commercial activities.
. The Service Provider undertakes, at the end of this period, to seek renewed consent from Users to continue processing their data (Opt-in), and, in the absence of explicit consent, to cease sending any newsletters and all commercial communications (Opt-out).
Article 10.2. Data archiving
. Once the time limits set out in Article 10.1 have expired, any collected data that has not been validly deleted may be archived on an electronic medium for evidential purposes, with strictly limited access.
. The retention periods for this data for the purposes of its legal archiving are defined by the following applicable regulations, and depending on the type of data concerned (https://www.cnil.fr/sites/default/files/typo/document/20120719-REF-DUREE_CONSERVATION-VD.pdf).
Article 11. Data subjects’ rights regarding their collected data
. Users have the right to access, rectify, object to, and/or delete data concerning them, which they may exercise at any time by email to: contact@teknokit.fr or by post (see the Legal Notice).
. The Service Provider undertakes to process any justified request for such data, responding to such requests within thirty (30) calendar days of receipt of the request. These requests shall be formalised by an email confirming receipt and, where applicable, the fulfilment of the request, or the reason for refusal.
. For security reasons and to prevent fraudulent requests, the Service Provider may validly require that such a request be accompanied by proof of identity, which it will delete or destroy after processing the request, subject to the application of any legal provision requiring its archiving, and in accordance with the terms of Article 10.2 of this Privacy Policy.
. Users unreservedly acknowledge that, in the event of a justified request for the deletion of their personal data, such data may be permanently deleted without the possibility of recovery, and that such deletion may prevent the continuation of their contractual relationship as well as their use of the Services, due to the necessity of such data for creating and maintaining a personal account on the Website and for using the Website as a whole.
. In any event, deletion shall not apply to content owned by the Service Provider, and shall not prevent the latter from using data and content for which valid consent has been given by users under the T&Cs.
Article 12. Complaints, Disagreements and Disputes
. By express agreement between the Parties, this Privacy Policy is governed exclusively by French law and must be interpreted in accordance with French law.
. In the absence of an amicable resolution of any disputes, and by express agreement between the Parties, disputes that cannot be settled amicably, relating to the collection and processing of Users’ and Customers’ personal data, and to this Privacy Policy, concerning its validity, interpretation, performance, consequences and effects, shall be submitted to the French courts:
– where no specific mandatory provision applies, to the jurisdiction of the courts of the place where the Service Provider has its registered office.
– in all other cases, the competent court shall be determined by the applicable mandatory provisions and according to the specific circumstances of the case (place of residence of the claimant, place of receipt of the goods, etc.).