This confidentiality policy defines and informs you of the way in which the organisers of the Business Day event collect and process the personal data that you send them to register for the event.
Please note that this confidentiality policy may be amended or supplemented at any time by the organisers, in particular in order to comply with any changes in legislation, regulations, case law or technology. In such a case, the date of the update will be clearly identified at the top of this policy. These changes are applied to guests as soon as they are put online. Guests should therefore consult this privacy policy regularly.
I – DATA CONTROLLERS
Business Day is organised by several organisations who act as joint data controllers for the processing of guests’ personal data.
The organisers are :
- Bpifrance (SIREN: 320 252 489) ;
- France Digitale (SIREN: 791 772 445) whose contact details are: 12 rue Vivienne 75002 Paris – privacy@francedigitale.org;
- Numeum (384 719 001) whose address is: 22-28 rue Joubert, 75009 Paris – contact@numeum.fr ;
- Station F (794 493 841) whose address is: 16 rue de la Ville l’Evêque 75008 Paris – privacy@stationf.co
With the support of the Directorate General for Enterprise, in particular the Mission French Tech.
II – PERSONAL DATA
An organiser (or a partner of one of the organisers) may suggest that you register for Business Day by clicking on a link that they share with you. When you register, you will be asked to enter certain personal details on our service provider Eventbrite’s platform. The data required to validate your registration is indicated by an asterisk.
In accordance with the General Data Protection Regulation adopted by the European Parliament on 14 April 2016, and the French Data Protection Act of 6 January 1978 as amended, the organisers inform you of the following points:
III – PURPOSES OF PROCESSING
The organisers may process your personal data:
On the basis of the performance of pre-contractual measures taken at your request or of a contract to which you are party: to manage your registration for the AI Business Day event and to welcome you at the event;
- On the basis of their legitimate interest:
- to manage the organisation of the Business Day event;
- track guest registrations and check that registrants have been invited by an AI Business Day event organiser;
- to compile statistics on the number of registrants;
- manage or respond to any disputes or legal requests;
- to ensure the security of the event.
- On the basis of your consent:
- pass on your personal data to the event’s partners for marketing purposes;
- transmit your personal data to event partners, organisers and/or registrants to enable them to organise meetings during the event.
IV – RECIPIENTS
France Digitale manages registrations for all organisers. Therefore, all the personal data of people registered for the event is sent to France Digitale. Your personal data is then sent by France Digitale to the co-organiser who invited you. Unless you agree, none of your personal data is passed on to another organiser or partner.
Your personal data is also transmitted to the organisers’ third-party service providers, in particular those in charge of the ticketing management platform (Eventbrite), registration tracking, data storage and data analysis.
For security purposes, your personal data will also be transmitted to the relevant government departments.
V – RETENTION PERIOD
Your personal data will be kept by the organisers for the duration of the event. It is deleted thirty (30) days after the end of the event. Where you have agreed to be contacted by partners, organisers and registrants, your personal data may be kept by these persons for a longer period depending on the information provided to you.
VI – RIGHTS
You have various rights concerning your personal data, which you may exercise by writing to the organiser who invited you to the event, whose contact details are available above.
Your rights are as follows:
- A right of access: you have the right to access the personal data we hold about you and to obtain a copy of it.
- A right of rectification: if the data you have given us is incorrect or incomplete, you have the right to demand that your personal data be rectified and/or completed.
- A right to erasure of all or part of your personal data: in certain cases, you have the right to have your personal data erased or deleted. However, we may retain some of your personal data for legal or legitimate reasons.
- A right to object: you may object to the processing of your personal data where the reason for processing is legitimate interest.
- A right to limit the processing of your personal data: depending on the circumstances, you may ask us to stop using your personal data for some or all of the purposes.
- A right to portability: you can ask us for a copy of the personal data we have collected directly or indirectly, only where the processing is based on your consent or the performance of a contract and is carried out using automated processes.
- A right not to be profiled: you may refuse to be the subject of a decision based exclusively on automated processing.
- A right to object to commercial prospecting: you may, at any time, unsubscribe or object to receiving commercial prospecting messages from us or from our commercial partners. Simply click on the link in the footer of the electronic messages you receive.
- A right to send us instructions: concerning how your personal data will be handled after your death. Directives may be general or specific.
The organisers undertake to respond to your request to exercise this right within a reasonable period of time, which may not exceed 1 month from receipt of your request.
VII – AUTHORISED SERVICE PROVIDERS AND TRANSFER TO A COUNTRY OUTSIDE THE EUROPEAN UNION
The organisers may use service providers located outside the European Union. If these service providers process personal data, the organisers have ensured in advance that these service providers implement adequate guarantees and comply with strict conditions in terms of confidentiality, use and data protection. In particular, care has been taken to ensure that there is a legal basis for any transfer of data to a third country.
VIII – COMPLAINTS TO THE COMPETENT AUTHORITY
If you consider that an organiser is not complying with its obligations with regard to your personal data, you may submit a complaint or a request to the competent authority. In France, the competent authority is the CNIL, to which you can send a request electronically by clicking on the following link: https://www.cnil.fr/fr/plaintes/internet.