PRIVACY POLICY

At Demand Side Instruments, personal data protection is a priority.
When using the site https://dsinstruments.fr/ (hereinafter the “Site”), we collect your personal data.
The purpose of this policy is to inform you about how we process this data pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the “GDPR”).

1. Who is the data controller ?

The data controller is the company Demand Side Instruments, a simplified joint-stock company registered with the Companies Register of Caen under number 794 619 791, and whose headquarters are located at 102 bis rue de l’Arquette, 14 000 Caen (hereinafter “We” or “Us”).

2. What data do we collect ?

Personal data is data which is used to identify an individual, either directly or by combining it with other data.
We collect identity data (specifically your full name and email address).
Mandatory data is indicated when you provide your data. It is indicated by an asterisk and is required to supply our services.

3. What are the legal bases and purposes of processing, and for how long do we keep your personal data ?

Purposes Legal bases How long it is kept
To send newsletters For customers: our legitimate interest to engage with customers and inform them about our latest news
For prospects: your consent		 Data is kept for 3 years following your last contact with Us or until you withdraw your consent.
To create a list of customers and prospects Our legitimate interest to develop and promote our business For customers: data is kept throughout the duration of the contractual relationship.
For prospects: data is kept for a period of 3 years following your last contact, for marketing purposes.
To respond to your requests for information Our legitimate interest to respond to your requests Data is kept for the time required to process your request for information, and deleted once the request for information has been handled.
To manage requests to exercise rights Our legitimate interest to respond to your requests and to keep a record thereof If we ask you for proof of identity: we will keep it only for the time required to verify your identity. Once this verification is complete, the proof is deleted.

If you exercise your right to object to receiving marketing: we keep this information for 3 years.

4. Who are the recipients of your data ?

The following will have access to your personal data :

(i) Our company’s staff ;
(ii) Our subcontractors: hosting provider, newsletter provider, audience analytics provider ;
(iii) Where appropriate: public and private authorities to meet our legal obligations.

5. Is your data likely to be transferred outside the European Union ?

Your data is kept and stored for the duration of processing on servers operated by the company Sendinblue, located in France.

Due to the tools we use (see article on recipients regarding our subcontractors), your data is likely to be transferred outside the European Union. This transfer of your data is secured using the following means :

  • either the data is transferred to a country subject to an adequacy decision by the European Commission, pursuant to article 45 of the GDPR: in this case, this country offers a level of protection deemed sufficient and adequate in view of the GDPR;
  • or the data is transferred to a country whose level of data protection has not been recognised as adequate in view of the GDPR: in this case, these transfers are based on appropriate safeguards indicated in article 46 of the GDPR, adapted to each service provider, including but not limited to the conclusion of standard contract clauses approved by the European Commission, the application of binding corporate rules or in view of an approved certification mechanism.
  • or the data is transferred based on one of the appropriate safeguards described in Chapter V of the GDPR.

6. What are your rights regarding your data ?

You have the following rights over your personal data :

    • Right to information : this is precisely the reason we have drafted this policy. This right is outlined in articles 13 and 14 of the GDPR.
    • Right of access : you have the right to access all your personal data at any time, in view of article 15 of the GDPR.
    • Droit de rectification : vous avez le droit de rectifier à tout moment vos données personnelles inexactes, incomplètes ou obsolètes conformément à l’article 16 du RGPD
    • Right to restriction : you have the right to rectify your inaccurate, incomplete or obsolete personal data at any time, pursuant to article 16 of the GDPR.
    • Right to erasure : you have the right to require that your personal data is deleted, and to prohibit any future collection for the reasons indicated in article 17 of the GDPR.
    • Right to lodge a complaint with a supervisory body (in France, CNIL) – if you believe that the processing of your personal data constitutes an infringement of applicable texts. (Article 77 of the GDPR)
    • Right to define guidelines about the storage, deletion and disclosure of your personal data after your death, pursuant to article 40-1 of the French Data Protection Act.

  • Right to withdraw your consent at any time : for consent-based purposes, article 7 of the GDPR states that you can withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
  • Right to portability : based on certain conditions indicated in article 20 of the GDPR, you have the right to receive personal data that you have given to us in a machine-readable format and to ask for it to be transferred to the recipient of your choice.
  • Right to object : pursuant to article 21 of the GDPR, you have the right to object to the processing of your personal data. Please note that we can continue to process it, despite your objection, for legitimate reasons, or for the establishment, exercise or defence of legal claims.

 

You can exercise these rights by contacting us using the details below. At this time, we may ask you to provide additional information or documents to prove your identity.

7. Which cookies do we use ?

For more information on cookies management, please read our .

8. Personal data protection contact

Contact email : contact@dsinstruments.fr

Contact address : 102 bis rue de l’Arquette, 14 000 Caen

9. Modifications

We may modify this policy at any time, particularly to comply with any regulatory, case law, editorial or technical developments. These modifications shall apply from the entry into force of the modified version. As a result, you should regularly review the latest version of this policy. However, we will inform you of any major modification to this privacy policy.

Valid from: 20 October 2021