{"id":12263,"date":"2020-02-10T16:18:45","date_gmt":"2020-02-10T16:18:45","guid":{"rendered":"https:\/\/ispgroup.elena-fernandez.net\/privacy-policy\/"},"modified":"2024-12-02T09:03:32","modified_gmt":"2024-12-02T09:03:32","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/ispgroup.elena-fernandez.net\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\n[et_pb_section fb_built=&#8221;1&#8243; _builder_version=&#8221;3.27.3&#8243; background_color=&#8221;#081c32&#8243; background_enable_image=&#8221;off&#8221; max_height=&#8221;500px&#8221; custom_margin=&#8221;||-5%||false|false&#8221; custom_margin_phone=&#8221;||-10%||false|false&#8221; custom_padding=&#8221;||0px||false|false&#8221; background_last_edited=&#8221;on|tablet&#8221; background_position_tablet=&#8221;center&#8221; background_position_phone=&#8221;center&#8221; custom_css_main_element=&#8221;height:100vh;&#8221;][et_pb_row column_structure=&#8221;1_2,1_2&#8243; _builder_version=&#8221;3.27.3&#8243; max_width=&#8221;80%&#8221; module_alignment=&#8221;center&#8221;][et_pb_column type=&#8221;1_2&#8243; _builder_version=&#8221;3.27.3&#8243;][et_pb_text _builder_version=&#8221;4.2.1&#8243; text_font=&#8221;|700|||||||&#8221; text_text_color=&#8221;#61bfc2&#8243; text_font_size=&#8221;36pt&#8221; text_line_height=&#8221;1.1em&#8221; header_text_align=&#8221;left&#8221; hover_enabled=&#8221;0&#8243; header_text_align_tablet=&#8221;&#8221; header_text_align_phone=&#8221;&#8221; header_text_align_last_edited=&#8221;on|phone&#8221; header_font_size_tablet=&#8221;&#8221; header_font_size_phone=&#8221;24pt&#8221; header_font_size_last_edited=&#8221;on|phone&#8221;]<h1>Privacy Policy <\/h1>\n[\/et_pb_text][\/et_pb_column][et_pb_column type=&#8221;1_2&#8243; _builder_version=&#8221;3.27.3&#8243;][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=&#8221;1&#8243; _builder_version=&#8221;3.27.3&#8243;][et_pb_row _builder_version=&#8221;3.27.3&#8243; hover_enabled=&#8221;0&#8243;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;3.27.3&#8243;][et_pb_text _builder_version=&#8221;3.27.4&#8243; text_font_size=&#8221;14pt&#8221; text_font_size_tablet=&#8221;&#8221; text_font_size_phone=&#8221;&#8221; text_font_size_last_edited=&#8221;on|phone&#8221;]<h2><span style=\"color: #081c32; font-size: xx-large;\"><\/span><span style=\"color: #081c32; font-size: xx-large;\">Personal Data Processing Policy applicable to contacts, clients, prospects, and beneficiaries of outsourced services<\/span><\/h2>\n<p><span style=\"color: #081c32;\"> <\/span><\/p>\n<p>The policy outlined below applies to the processing of personal data carried out by ISPGROUP, holding the companies ISP France, ISP Morocco, Outside BO France, Outside BO Morocco (hereinafter referred to as the data controller).<\/p>\n<p>&nbsp;<\/p>\n<h3><span style=\"font-size: xx-large; color: #081c32;\"><strong>1 \u2013 General provisions<\/strong><\/span><\/h3>\n<p>&nbsp;<\/p>\n<p>The following provisions concern all personal data processing carried out by the data controller, unless otherwise stated in specific provisions.<\/p>\n<p>&nbsp;<\/p>\n<ul>\n<li style=\"padding-left: 30px;\"><strong>Legal framework \u2013 compliance with the GDPR and French law<\/strong><\/li>\n<\/ul>\n<p>The data controller declares that it processes personal data in accordance with Regulation (EU) 2016\/679 of the European Parliament and Council of April 27, 2016, concerning the protection of individuals with regard to the processing of personal data and the free movement of such data (hereinafter referred to as the GDPR) and French Law No. 78-17 of January 6, 1978, relating to data processing, files, and freedoms (as amended).<\/p>\n<p>&nbsp;<\/p>\n<ul>\n<li style=\"padding-left: 30px;\"><strong>Data Controller and Other Participants<\/strong><strong><\/strong><\/li>\n<\/ul>\n<p>The data controller is identified above. Their contact details are: Outside BO France [contact details: 04 78 31 65 30, contact@isp-group.org, www.ISP-group.org].  <\/p>\n<p>&nbsp;<\/p>\n<p>The representative of the data controller and DPO is Nathalie Lempereur. Her contact details are: 04 78 31 65 30, n.lempereur@isp-group.org, www.ISP-group.org. <\/p>\n<p>&nbsp;<\/p>\n<ul>\n<li style=\"padding-left: 30px;\"><strong>Definition of contacts, clients, prospects, beneficiaries<\/strong><\/li>\n<\/ul>\n<p style=\"padding-left: 60px;\">\u2022 &#8220;CONTACT&#8221; refers to a member of a CLIENT company with a current, future, or past business relationship with the ISP group.<\/p>\n<p style=\"padding-left: 60px;\">\u2022 &#8220;CLIENT&#8221; refers to a company with a current, future, or past business relationship with the ISP group.<\/p>\n<p style=\"padding-left: 60px;\">\u2022 &#8220;BENEFICIARY&#8221; refers to a person benefiting from the implementation of a service for which the CLIENT has authorized the ISP group.<\/p>\n<p style=\"padding-left: 60px;\">\u2022 &#8220;PROSPECT&#8221; refers to a company without a current, future, or past business relationship with the ISP group.<\/p>\n<p>&nbsp;<\/p>\n<ul>\n<li style=\"padding-left: 30px;\"><strong> Recipients of personal data<\/strong><\/li>\n<\/ul>\n<p>The recipients of the data are exclusively the permanent employees of Outside BO (France &amp; Morocco).<\/p>\n<p>&nbsp;<\/p>\n<ul>\n<li style=\"padding-left: 30px;\"><strong>Data transfer<\/strong><\/li>\n<\/ul>\n<p>The data controller carries out a transfer of personal data within the company Outside BO to a third country, namely Morocco.<\/p>\n<p>The binding corporate rules that apply to ISP Group and its subsidiaries are those of the Binding Corporate Rules (BCR), which refer to the intra-group data protection policy concerning the transfer of personal data outside the European Union.<\/p>\n<p>The parent company ISP Group, through its subsidiaries, acts as the &#8220;data controller&#8221; under the BCR framework, which governs the transfers made within a group acting as the data controller.<\/p>\n<p>&nbsp;<\/p>\n<ul>\n<li style=\"padding-left: 30px;\"><strong>The recommended process points linking ISO and GDPR<\/strong><\/li>\n<\/ul>\n<p>ISP Group, being ISO 9001:2015 certified, ensures that the processes carried out within the company are subject to additional measures regarding employees:<\/p>\n<p style=\"padding-left: 30px;\">\u2022 Appointment of a DPO (Data Protection Officer) as an employee of the company, serving as the primary point of contact for employees.<\/p>\n<p style=\"padding-left: 30px;\">\u2022 Awareness of all staff regarding the GDPR regulations.<\/p>\n<p style=\"padding-left: 30px;\">\u2022 Drafting a confidentiality agreement for employees handling sensitive data, attached to their personnel file.<\/p>\n<p>&nbsp;<\/p>\n<ul>\n<li style=\"padding-left: 30px;\"><strong>Retention period for personal data<\/strong><\/li>\n<\/ul>\n<p>The data is retained for the duration of the outsourcing contract and then for 2 years after the last invoice, this period reflecting the established practice for occasional or recurring clients. <\/p>\n<p>&nbsp;<\/p>\n<ul>\n<li style=\"padding-left: 30px;\"><strong>Rights of the person whose data is collected<\/strong><\/li>\n<\/ul>\n<p>The person whose personal data is collected has the right to:<\/p>\n<p style=\"padding-left: 60px;\">\u2013 Request the DPO access to personal data, rectification or deletion of such data, or restriction of processing related to the concerned person.<\/p>\n<p style=\"padding-left: 60px;\">\u2013 To object to the processing.<\/p>\n<p style=\"padding-left: 60px;\">\u2013 To the portability of their data.<\/p>\n<p style=\"padding-left: 60px;\">\u2013 To file a complaint with a supervisory authority.<\/p>\n<p style=\"padding-left: 60px;\">\u2013 To withdraw consent at any time, without affecting the lawfulness of the processing based on the consent before its withdrawal. This right applies exclusively when the processing is based on Article 6(1)(a) or Article 9(2)(a) of the GDPR, meaning when the processing is based on the data subject&#8217;s consent for one or more specific purposes.<\/p>\n<p>&nbsp;<\/p>\n<ul>\n<li style=\"padding-left: 30px;\"><strong>Automated decision-making \u2013 profiling<\/strong><\/li>\n<\/ul>\n<p>No profiling will be carried out, and more generally, no automated decisions will be made based on the data collected concerning contacts, clients, or beneficiaries.<\/p>\n<p>Automated decisions will be made regarding PROSPECTS based on the collected data. These decisions concern a qualification principle, specifically which cities and industries they belong to, in order to target our marketing campaigns. <\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<h3>2 \u2013 Specific Provisions<\/h3>\n<p>&nbsp;<\/p>\n<p>The following provisions are specific to each type of personal data processing.<\/p>\n<p>&nbsp;<\/p>\n<p style=\"padding-left: 30px;\"><strong>&#8211; Management of the relationship with our contacts and prospects<\/strong><\/p>\n<p>Personal data processed<\/p>\n<p>We process the following personal data:<\/p>\n<p>o Contacts, clients, prospects: personal information such as city, email address, and phone numbers<\/p>\n<p>Purposes \u2013 The processing of personal data for CONTACTS, CLIENTS, and PROSPECTS is aimed at managing the relationship with our contacts and prospects. Specifically, this processing seeks to communicate information to the concerned person about updates regarding our organization, products, and services. <\/p>\n<p>&nbsp;<\/p>\n<p>Legal Basis \u2013 This processing of personal data is based on the consent of the data subject (Article 6, paragraph 1, point a) of the GDPR). The request for data is contractual in nature. The data subject is not obligated to provide this data. If the data subject does not provide the data or withdraws their consent for data processing, they will not, for example, be able to receive information about updates regarding our organization, products, and services.   <\/p>\n<p>&nbsp;<\/p>\n<ul>\n<li style=\"padding-left: 30px;\"><strong>Client Acceptance Procedure<\/strong><\/li>\n<\/ul>\n<p><span style=\"text-decoration: underline;\">Personal Data Processed \u2013 We process the following data:<\/span><\/p>\n<p>Title, first name, last name, phone number, email address, postal address, profession, organization (company, enterprise, or other), role, requested product or service, distribution channel, transaction conditions, destination territory of the products, identity of the beneficial owner, any specific risks (as per Article L. 561-10 2\u00b0 of the Monetary and Financial Code).<\/p>\n<p>Purposes \u2013 This data processing is intended to fulfill our customer due diligence obligations in accordance with French law, particularly Articles L. 561-4-1 and R. 561-5 of the Monetary and Financial Code.<\/p>\n<p>&nbsp;<\/p>\n<p>Legal basis \u2013 This processing is necessary to comply with legal obligations to which the data controller is subject. It is based on Article 6(1)(c) of the GDPR. The data request is a prerequisite for establishing a business relationship, in accordance with applicable legislative and regulatory provisions. The individual is required to provide this data if they wish to establish such a relationship. If the individual does not provide the data, we will not be able to pursue a business relationship with them.    <\/p>\n<p>&nbsp;<\/p>\n<p style=\"padding-left: 30px;\"><strong>&#8211; Management of our client relationships<\/strong><\/p>\n<p>Personal data processed \u2013 We process the following personal data: first name, last name, phone number, email address, postal address, profession, product or service purchased, purchase price, any discounts, delivery location, distribution channel, payment terms, payment-related information.<\/p>\n<p>Purposes \u2013 The processing of personal data is intended for managing the relationship with our clients. In particular, this processing aims to execute the pre-contractual measures taken at the request of the concerned CLIENT. <\/p>\n<p>&nbsp;<\/p>\n<p><strong><\/strong><\/p>\n<p style=\"padding-left: 30px;\"><strong>&#8211; Management of the relationship with the beneficiaries of our clients<\/strong><\/p>\n<p><span style=\"text-decoration: underline;\">Professional services<\/span><\/p>\n<p>Personal data processed \u2013 We process the following personal data of the beneficiaries of professional services from our clients: name, address, phone number, email.<\/p>\n<p><span style=\"text-decoration: underline;\">Services to individuals<\/span><\/p>\n<p>Personal data processed \u2013 We process the following personal data of beneficiaries of services to individuals from our clients: name, address, phone number, date of birth, and security code.<\/p>\n<p>&nbsp;<\/p>\n<p>Legal basis \u2013 This processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures taken at their request. It is based on Article 6(1)(b) of the GDPR. The request for data is contractual in nature. The data subject is required to provide this data if they wish to benefit from our products or services. If the data subject does not provide the data, they will not be able to benefit from our services.    <\/p>\n<p>&nbsp;<\/p>\n<ul>\n<li style=\"padding-left: 30px;\"><strong>Marketing and advertising messages<\/strong><strong><\/strong><\/li>\n<\/ul>\n<p>Personal data processed \u2013 We process the following data: first name, last name, email address, information about opened messages and links clicked (including the date and time of the consultation).<\/p>\n<p>&nbsp;<\/p>\n<p>Purposes \u2013 The processing is intended to improve our communication and deliver relevant content at the appropriate times.<\/p>\n<p>&nbsp;<\/p>\n<p>Automated decision-making \u2013 profiling \u2013 Automated decisions will be made based on the data collected. The underlying logic of these automated decisions is as follows: <\/p>\n<p style=\"padding-left: 30px;\">&#8211; Any person receiving an email can click on an unsubscribe link that is explicitly included in all of our communications.<\/p>\n<p style=\"padding-left: 30px;\">&#8211; Any person who does not open the first email may receive another email presenting the company.<\/p>\n<p style=\"padding-left: 30px;\">&#8211; If no unsubscription, send a second information email with a link to the website one week later.<\/p>\n<p style=\"padding-left: 30px;\">&#8211; If no unsubscription, send a third information email with a link to the website three weeks later.<\/p>\n<p>&nbsp;<\/p>\n<p>Our CRM software, Zoho CRM, is GDPR certified and records and marks all refusals of sending or follow-ups. This unsubscription information is retained. This certification is a key strength of this software: <a href=\"https:\/\/www.zoho.com\/fr\/crm\/help\/gdpr\/\">https:\/\/www.zoho.com\/fr\/crm\/help\/gdpr\/ <\/a> <\/p>\n<p>&nbsp;<\/p>\n<p>Legal basis \u2013 The processing is based on the consent of the data subject (Article 6, paragraph 1, point a) of the GDPR) and is necessary for the legitimate interests we pursue, which consist of improving our communication and avoiding sending inappropriate communications (Article 6, paragraph 1, point f) of the GDPR). The data request is contractual in nature. The data subject is not required to provide this information and can object to its processing at any time. If the data subject does not provide the data or withdraws their consent to the processing, they will not receive tailored communications.   <\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section]\n","protected":false},"excerpt":{"rendered":"<p>Privacy Policy Personal Data Processing Policy applicable to contacts, clients, prospects, and beneficiaries of outsourced services The policy outlined below applies to the processing of personal data carried out by ISPGROUP, holding the companies ISP France, ISP Morocco, Outside BO France, Outside BO Morocco (hereinafter referred to as the data controller). &nbsp; 1 \u2013 General [&hellip;]<\/p>\n","protected":false},"author":5,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"class_list":["post-12263","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/ispgroup.elena-fernandez.net\/en\/wp-json\/wp\/v2\/pages\/12263","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ispgroup.elena-fernandez.net\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/ispgroup.elena-fernandez.net\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/ispgroup.elena-fernandez.net\/en\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/ispgroup.elena-fernandez.net\/en\/wp-json\/wp\/v2\/comments?post=12263"}],"version-history":[{"count":1,"href":"https:\/\/ispgroup.elena-fernandez.net\/en\/wp-json\/wp\/v2\/pages\/12263\/revisions"}],"predecessor-version":[{"id":12264,"href":"https:\/\/ispgroup.elena-fernandez.net\/en\/wp-json\/wp\/v2\/pages\/12263\/revisions\/12264"}],"wp:attachment":[{"href":"https:\/\/ispgroup.elena-fernandez.net\/en\/wp-json\/wp\/v2\/media?parent=12263"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}