Privacy Policy 

Whenever you use our website, we may request some personal information about you. The term “personal data” designates all data that allows an individual to be identified directly or indirectly, which corresponds in particular to your surname, first names, postal and e-mail addresses, telephone numbers, country of origin, time zone, your bank card numbers, your profiles on social networks, the name of your company, a photo of you, your job title and areas of expertise, the type of people you wish to meet, the themes which you are interested in, your IP address, navigation data, data from recordings of calls with our teams (for example: the content and dates of the calls), as well as any other information you provide to us about yourself. 

The purpose of this charter (hereinafter referred to as the “Charter “) is to inform you of the means by which we collect and process your personal data, with the strictest respect for your rights. 

Responsibility for the collection and processing of your personal data lies with the company Autonomy, registered under number 813 144 649 R.C.S Paris, whose head office is located at 10 rue de Penthièvre, 75008, Paris, (referred to within the framework of this Charter as “Us” or “We”). 

Your personal data is collected and processed for one or more of the following purposes: 

(i) To manage your access to and use of the services available. 

(ii) To carry out customer management operations relating to contracts, invoices, follow-ups with customers, etc. 

(iii) To compile a list of registered members, users, customers and prospective customers. 

(iv) To issue newsletters, invitations and promotional advertisements. Should you not wish to receive these, you can unsubscribe. 

(v) To compile commercial and web traffic statistics for our services. 

(vi) To manage reviews on products, services or content. 

(vii) To adhere to our legal and regulatory obligations. 

Our company’s staff, monitoring or control services (auditors in particular) and our subcontractors (hosting service provider, newsletter publishing tool, telephone call monitoring and recording service provider, audience measurement tool) will have access to your personal data. Government agencies or representatives of the law, ministerial officers or organizations responsible for the collection of debts may also be recipients of your personal data, for the sole purposes of meeting our legal obligations. We may transfer your information to service providers, advisers, potential transaction partners or other third parties within the scope of any review, negotiation or completion of a business acquisition should our company be sold to or merge with another company, or should we sell, liquidate or transfer all or part of our assets. 

Your personal data shall not be retained any longer than is strictly necessary for the management of our business with you. However, data proving the existence of a right or a contract must be kept in order to adhere to legal obligations and shall be held for the term stipulated by the applicable law. Regarding potential prospecting operations for customers, their data may be held for a period of four (4) years after the termination of the business relationship in question. Personal data relating to a prospective customer, who is not already a customer, may be held for a period of three (3) years from the moment it is collected or from the last contact with the prospective customer. At the end of this period of four (4) years, we may contact you again in order to find out if you wish to continue to receive commercial solicitation. 

Your personal data is kept for a period of 3 (three) years from the date of your last use of the site. 

(iii) Regarding the management of opt-out lists compiled during prospecting activities: 

Information enabling recognition of your right to opt-out is retained for a minimum of three (3) years following the exercising of your right to opt out. 

Information stored in users’ terminals, or any other means used to identify users and enable them to be tracked or to measure the frequency of their visits, shall be retained for no longer than thirteen (13) months. 

Invoices are kept for a period of 10 (ten) years to comply with our accounting obligations, in application of Article L. 123-22 of the French Commercial Code. 

Information enabling the management of your requests to exercise your rights under the GDPR will be kept for 3 (three) years from the date of your request. 

We take all necessary precautions and appropriate organizational and technical measures to maintain the security, integrity and confidentiality of your personal data, and especially to prevent it from being altered or damaged and to prevent any third party from accessing it. 

We process your data on the basis of the following legal grounds: 

You have the right to obtain and, where appropriate, rectify or delete any data concerning you by getting in touch with the point of contact indicated in Article 15. You can request the restriction of processing of personal data concerning you in certain cases as defined in Article 18 of the GDPR. Finally, we would like to remind those whose data is collected on the basis of our legitimate interests, as mentioned in the Article “Legal basis for processing your data”, that they may at any time oppose the processing of data concerning them. We may, however, be required to continue processing their data if there are legitimate reasons for this processing which may prevail over your rights and freedoms or if the processing is necessary to establish, exercise or defend our legal rights. You can unsubscribe from our promotional emails using the link provided in our emails. Even if you choose to no longer receive promotional messages from us, you will continue to receive our administrative messages. 

You have data portability rights regarding the personal data that you provide us, understood as data that you have actively and consciously declared in order to access and use our services, as well as data generated from your activity using the services. We remind you that these rights do not relate to data collected and processed on any other legal basis than the consent or implementation of the contract binding us. These rights can be exercised free of charge, at any time, in order to recover and keep your personal data. 

You are also hereby informed that you have the right to lodge a complaint with a competent supervisory authority (e.g. the French National Commission for Information Technology and Liberties in France – CNIL) in the Member State in which your place of residence or your workplace is located, or the place where your rights have been violated, if you consider that the processing of your personal data within the context of this Charter constitutes a violation of the applicable legal texts. Such a complaint may be brought before an administrative or jurisdictional court without prejudice to any other claim. In such a case, you also have the right to an effective judicial and administrative redress if you consider that the processing of your personal data within the context of this Charter constitutes a violation of the applicable legal texts. 

12. Right to define guidelines for the processing of your data after your death 

You have the right to define guidelines for the retention, erasure and communication of your personal data after your death. These directives can be general i.e. relating to all personal data concerning you. In this case, they must be registered with a trusted digital third party certified by the CNIL (French Data Protection Agency). Directives may also be specific to data processed by our company. In this case, you should send these directives to us at the points of contact indicated in Article 17. You can designate in your directives a person responsible for seeing to it that your directives are carried out. This person will then be authorized, after you pass away, to review the aforementioned directives and request that we carry them out. If you do not specify a particular person, your heirs will be authorized to review the aforementioned directives and request that we carry them out. You can change or revoke your guidelines at any time. 

13. Data of minors 

We do not knowingly collect, retain or process personal information from children under the age of 13, and no part of our service is intended for children. If you learn that a child has provided us with personal information in violation of this privacy policy, you can notify us at contact@autonomy.paris 

We reserve the right to amend this privacy policy Charter at any moment, at our sole discretion, either in its entirety or in part. Such amendments shall come into effect once the new Charter is published. Your use of the site following the entry into effect of these amendments, shall constitute acknowledgement and acceptance of the new Charter. Failing that, and if you are not in agreement with the new Charter, you should refrain from accessing the site. 

If you have any questions regarding our data processing activities, or if you wish to exercise any of your rights, you can contact us at the following points of contact: – Email Address : contact@autonomy.paris