Last updated on October 6, 2021
1. General Information
2. Data Collection
EPISTO collects Your personal data (hereinafter referred to together as the "Data"): (i) Data regarding Your browsing of the Website, (ii) Data submitted when You participate in Campaigns, (iii) Data to send You a newsletter regarding EPISTO's activities, and (iv) Data to fulfill Your order for products.
2.1. Browsing Data
When You browse the Website, Data about Your computer hardware and software may be collected by EPISTO through the use of tracking devices such as cookies. This Data may include: Your IP address, Your browser, domain name, time and date of connection and the address of the referring website. EPISTO processes the Data in order to: enable the Website to function properly, including to: ensure that content is displayed correctly, improve the functionality of the Website, ensure that use of the Website is secure and, to protect You from fraudulent use of the Website, including by searching for errors and compiling statistics on the habits of visitors to the Website. Browsing Data is kept only for the time necessary to achieve the purpose for which it was collected and for any period defined in accordance with local regulations and instructions.
2.2. Newsletter Subscription
When You subscribe to the Newsletter, EPISTO collects Your email address in order to send You commercial and promotional emails, and to send You questionnaires in order to survey Your opinion about the Website and about possible new services that could be offered to You. If You have consented to receive the Newsletter, EPISTO will keep Your Data until You unsubscribe, until You request us to delete Your Data, or after a period of two years from the last newsletter sent to You by EPISTO.
2.3. Participation in Campaigns
If You decide to participate in Campaigns organized by EPISTO, please note that Your answers to the Campaign questions could be considered as Data and could include, if You fill in this information, personal data relating to Your age, Your professional situation, Your zip code and Your interests. When You participate in the Campaigns, We ask You for Your express consent to the processing of Your Data as follows: the transfer of Your answers in an anonymized way, in statistics and/or aggregated with the answers of the other participants in order to compare and analyze the results with commercial partners related to the Campaign; if You have given Your express and specific consent: the transfer of Your email and last name, first name, for the sending of the invitation to participate to a survey. Warning: Although Your Data is published anonymously, We invite You to be vigilant before participating in the Campaigns and consenting to the various types of data processing. Certain Data, in particular relating to Your age, location and professional situation, when combined, could allow third parties to recognize You, and thus, to know Your responses to the Campaigns. In no case EPISTO can be held liable for any damage resulting from such an event. If You have consented to respond to Campaigns, EPISTO will keep Your responses anonymized until You ask Us to delete them, or after a period of two years from the end of the Campaign.
3. Third-Party Sites/Apps
5. Transfer of Data
5.1. Internal Use
EPISTO may organize Campaigns for its trusted partners for commercial purposes. In such a case, You will be informed in the Campaign, and Your Data will be transferred via secure means to these third parties, for the purposes specified in the Campaign and for which You have given Your consent.
5.3. Trusted Partners
EPISTO may share Your Data with its trusted partners in order to provide hosting services (AWS/Heroku), to analyze Data related to Your use of the Conversation (AppSignal).
5.4. Legal Disclosures
EPISTO may disclose Data, without prior notice, if required to do so by law and/or in the event that this transfer is strictly necessary to: (a) comply with the law or with a legal proceeding brought against EPISTO, (b) protect and defend the rights and/or property of EPISTO, (c) act in an emergency to protect the personal safety of EPISTO users and/or the public, and (d) as necessary to provide the Services You have requested.
6. Security and storage of Data
When the retention period expires, the Data is anonymized and is retained for statistical or evidentiary purposes. When these purposes have expired, the Data is destroyed.
7. Your Rights
In accordance with applicable law, You have the right to access, rectify, portability and/or erasure of Your Data as well as to restrict its use, disable cookies and/or withdraw Your consent for the processing of Your Data at any time. To do so, You may at any time make this request at the following email address: firstname.lastname@example.org or by postal mail at the following address: EPISTO, Personal Data, 5 Avenue du Général De Gaulle, 94160 Saint-Mandé, France. Please note that the exercise of Your rights may have the impact of limiting certain services provided by the Website, and that to ensure compliance with applicable law, EPISTO may be obliged to retain some of Your Data for evidentiary purposes. EPISTO will inform You in such a case. You have the right to contact the French Data Protection Authority (CNIL) at any time regarding Your requests under this section (www.cnil.fr).
9. Applicable Law