Article 1: Preamble
- How their personal data is collected. Personal data is defined as: any type of information that makes it possible to identify a user.
This may include first and last names, e-mail and postal addresses, age, IP address, location, etc.
- On the rights they have regarding this data;
- On the person responsible for processing the personal data that has been both collected and processed;
- On the recipients of this data;
Article 2: Principles relating to the collection and processing of personal data
In accordance with Article 5 of the European Regulation 2016/679, personal data shall be:
- Processed lawfully, fairly and transparently in the eyes of the data subject;
- Collected for purposes that have been defined beforehand (cf. Article 3.1 hereof), explicit and legitimate, and not further processed in any way other than those purposes;
- Relevant, adequate, and limited to what is necessary for the purposes for which they are processed;
- Fair, and if necessary, kept up to date. Personal data that is to be processed and is inaccurate will be deleted or rectified as soon as possible;
- Retained for a period of time that is sufficient to identify the data subject, but not longer than is necessary for the purpose for which it is to be processed;
- Processed in a secure manner, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
Processing is lawful if at least one of the following conditions is met
- The data subject has consented to the processing of his/her personal data for one or more specified purposes;
- The processing is essential for the performance of a contract to which the data subject is party or for the performance of pre-contractual measures taken at his request;
- The person responsible for processing the data must comply with a legal obligation;
- The processing is compulsory in order to safeguard the vital interests of the data subject or of another natural person;
- The processing will serve to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;
- The processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data prevail, in particular where the data subject is a child.
Article 3: Personal data collected and processed in the context of navigation on the site
Article 3.1: Collected data
The personal data collected in the context of our activity are the following:
- Last name
- First name
- E-mail address
- Postal address
- Telephone number
- Name of the company you work with
- Role in the company
This data is collected and processed for the following purposes
- Management of the customer area of the website www.aday.fr
- Sending e-mailing and newsletters relating to Aday’s activity
- Contact by the Aday teams
All of this data is kept indefinitely, until the user requests that it be updated or deleted.
Article 3.2: Method of collecting navigation data
When you visit our site, the following other data are automatically collected:
- Terminal used
- Type of operating system
- Browser used
- Language in which the site is displayed
- URL of the page you came from
- Date and time of connection
- Duration of the visit to the site
The data is kept by the data controller under reasonable security conditions for a period of 11 months.
Aday may retain certain personal data beyond 11 months in order to fulfil its legal or regulatory obligations.
Article 3.3: Data hosting
Aday’s website is hosted by:
SAS with a capital of 10 174 560€
RCS Lille Métropole 424 761 419 00045
Code APE 2620Z
VAT number: FR 22 424 761 419
Head office: 2 rue Kellermann – 59100 Roubaix – France
Article 4: Data controller
Personal data is collected by Aday, a public limited company (SA) with a capital of €1,872,000, registered in Paris under number B 331980235.
The person responsible for processing personal data can be contacted via the following contact details:
Article 5: The user’s rights regarding data collection and processing
Any user concerned by the processing of his/her personal data may avail him/herself of the following rights, pursuant to the European Regulation 2016/679 and the French Data Protection Act (Law 78-17 of 6 January 1978):
- Right of access, modification and deletion of data (set out respectively in Articles 15, 16 and 17 of the General Data Protection Regulation);
- Right to data portability (article 20 of the GDPR);
- Right to restriction (Article 18 GDPR) and objection to data processing (Article 21 GDPR);
- Right not to be subject to a decision based exclusively on an automated process;
- The right to determine the fate of one’s data after death;
- Right to have recourse to the competent supervisory authority (Article 77 of the GDPR).
In order to exercise these rights, the user may send a letter or an e-mail (to the address mentioned in article 4) to Aday, mentioning his contact details.
The user is invited to take note of this policy each time he/she uses our services, without it being necessary to formally inform him/her of this.