COLLECTIF M knows that you care about how your personal data is handled and recognizes the importance of protecting your privacy.

This Privacy and Data Protection Policy (hereinafter the “Policy”) explains how COLLECTIF M collects and processes your personal data. It contains information on the type of data we collect, how we process it, for what purposes, so as to make its use most suitable for your needs.

For any type of request – query – remark, or if you want to exercise any of the rights related to the processing of your data, contact us: contact@ressourcecm.com

For the purposes of this Policy, the following terms are defined as follows:

• “Service(s)” : all online services, whether or not they are paid for.
• “We” and “Us” : refers to any company owned or operated, directly or indirectly, by any company in which COLLECTIF M has an interest and may collect or process your personal data and cookies, and their respective service providers located in France or abroad.
• “You” and “Your” : refers to any user of the Services, and who accesses any of the paid or free Services.

This Policy was updated on June 29, 2020

Basic principles – our commitment to privacy

COLLECTIF M undertakes to process personal data in accordance with the regulations applicable to the protection of personal data and privacy, in particular in accordance with Regulation (EU) 2016/679 adopted on 27 April 2016 and relating to the protection of natural persons with regard to the processing of personal data and the free movement of such data, (hereinafter the “Regulation”). We are committed to the following principles:

• You are under no obligation to provide us with any personal data that we request from you. However, some of this information is required to access certain Services. Therefore, if you choose not to provide us with this data, you may not be able to access some of these Services; we collect and process your data only for the purposes that are described in this Policy or for specific purposes that we have informed you of and/or to which you have consented;
• we adopt the principle of minimizing the collection of personal data: that is to say, collecting only the personal data necessary for the processing and uses envisaged, without collecting data in an unnecessary way;
• if any personal data held by us is no longer relevant to the processing of personal data by us, and there is no legal requirement for us to retain it, we will make every effort to delete, destroy or anonymise it.

What personal data do we collect?

We may collect the following categories of personal data directly:

• personal details, such as your surname, first name, age, e-mail address, postal address and telephone number(s)
• demographic information, such as your gender
• information about your skin type (dry, combination, oily)
• browsing history, such as the pages visited, the date of the visit, the location during the visit, or the IP address

For what purpose do we collect your personal data?

We collect your personal data in order to create and offer you products and services that are relevant to you, to provide you with the best online experience and a quality service and navigation. We may also need your personal information to comply with legal requirements or as part of our contractual relationship with you. When we collect and use your personal data for the purposes listed below or for any other purpose, we will inform you before or at the time of collection. Where necessary, we will seek your consent to process your personal data. If you have given your consent to process your personal data, you have the right to withdraw that consent at any time. Under no circumstances will the results of the use of our Services (e.g. calculation of stress levels) be disclosed to any third party. This information remains completely confidential and anonymous.

Your rights

When we process your personal data, you are entitled to a number of rights that you can exercise at any time. Below is an overview of these rights and what they mean for you.

The right to access your personal data and the right of rectification

It is important to us that the personal data we hold about you is accurate, up-to-date, complete, relevant and not misleading. To ensure that we meet this commitment, you have the right to access, correct or update your personal data at any time.

The right to portability of your data

You have the right to receive your personal data in a structured, commonly used and machine- readable format if we have processed your personal data on the following basis:

• you have given us your consent to process your personal data for a purpose or purposes that we have previously communicated to you
• we have processed your personal data in order to facilitate a business transaction, such as providing you with the products and/or services you order

The right to request the deletion of your personal data

You have the right to request the deletion of your personal data when:

• your personal data are no longer necessary for the purposes for which we collected them
• you withdraw the consent you previously gave us to process your personal data, provided there is no other legal basis for us to continue processing your personal data
• personal data are not legally processed
• your personal data must be deleted in order to comply with current legislation

If you wish to have your personal data erased, please let us know and we will take reasonable steps to comply with your request in accordance with legal requirements.

If the personal data we collect is no longer required for any purpose and there is no legal obligation for us to retain it, we will make every effort to delete, destroy or anonymise it.

The right to limit the processing of your data

You have the right to request the restriction of the processing of your personal data when:

• You believe that the personal data we have about you is inaccurate
• For personal data that is not legally processed, you prefer that we restrict its processing rather than delete it
• We no longer need your personal data for the purposes for which we collected it, but you need the data to establish, exercise or defend legal claims
• You have objected to the processing of your personal data and are waiting to hear whether your interests in relation to this objection override the legitimate reasons pursued by COLLECTIF M
• If you wish to restrict our processing of your personal data, please let us know and we will take reasonable steps to comply with your request in accordance with legal requirements.

The right to object to the processing of your personal data

You have the right to object to the processing of your personal data at any time. The right to complain to a supervisory authority. You have the right to lodge a complaint directly with a supervisory authority, such as the CNIL, about the way we process your personal data.

How do we protect your personal data?

We understand the importance of security for your personal information. We do our best to protect your personal data from misuse, interference, damage, unauthorized access, alteration or disclosure. We have implemented numerous security measures to help protect your personal data. These include the use of access controls, firewalls, secure servers and encryption of personal data.

Sharing your personal data

When we share your personal data with others, we ensure that we do so only with organisations that have strong security measures in place for your data and its storage and that comply with privacy laws on equivalent terms to those we follow. Your personal data will not be shared, sold, rented or disclosed for purposes other than those described in the Policy. We may, however, disclose your data for purposes other than those described in the Policy in cases where disclosure is required by law and government authorities.

International transfers of your data

Personal data may be processed outside the European Economic Area (EEA). If this is the case, COLLECTIF M will make every effort to ensure that this international transfer of data has an adequate level of security and guarantees. The safeguards we use to protect international data transfers include:

• model contractual clauses validated by the European Commission. These standard clauses provide a sufficient guarantee that the relevant levels of security required by the regulations relating to the protection of personal data, and in particular the Regulation, will be respected (the aforementioned regulations and the Regulation being hereinafter referred to together as the “Regulations”)
• through certification mechanisms that attest that third parties located outside the EEA process personal data in a manner consistent with the Regulation. These certifications must be approved by either the European Commission, the competent supervisory authority under the Regulation, or the national accreditation body designated under the Regulation.

Cookies and other technologies

Through our use of cookies and other technologies, such as web beacons, device fingerprints and web beacons, we may also collect personal data about you when you visit our websites or third-party websites, or our mobile or third-party applications. This may include:

• information about your device’s browser and the operating system you are using
• the IP address of the device you are using
• the web pages you visit
• links you click while interacting with our services

Didn’t find what you were looking for? Contact us ! contact@ressourcecm.com