GENERAL INFORMATION

This Privacy Policy is intended to inform you of the conditions under which your personal data is processed in connection with:

1) Browsing the website www.videlio.com;

2) The management of business activities;

3) Recruitment management.

Please note that the processing of personal data carried out by the Videlio Group or any of its entities is conducted in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (hereinafter “GDPR”), concerning the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and Law No. 78-17 of January 6, 1978, as amended, concerning information technology, files, and civil liberties.

Definitions

Videlio Group:

  • The company Videlio—whose registered office is located at 141 Avenue des Grésillons, 92230 Gennevilliers—represented by Xavier Renaud;
  • Videlio Events—whose registered office is located at 141 Avenue des Grésillons, 92230 Gennevilliers—represented by Guillaume Durieux;
  • Videlio HMS—whose registered office is located at 25/27 Rue Louis Breguet, 44600 Saint-Nazaire—represented by Christophe Grignon.

We: The Videlio Group or one of its entities, depending on the context.

You: Users of the website www.videlio.com.

Website: The website accessible via the URL www.videlio.com.

Personal data: Any information that can be used to identify you, either directly or indirectly. For example: a name, an identification number, location data, an online identifier, etc.

Data Controller: The private or public entity that, alone or jointly with others, determines the purposes and means of processing.

Recipient: The natural or legal person to whom personal data is disclosed.

Processor: Any service provider that processes personal data on behalf of the data controller, solely on the instructions and under the authority of said data controller.

Contact Information for the Data Protection Officer

The Videlio Group has appointed a Data Protection Officer (DPO) registered with the CNIL, who can be contacted:

· By email: donnees-personnelles@videlio.com;

· By mail: Data Protection Officer – Videlio, 141 Avenue des Grésillons, 92230 Gennevilliers.

You may contact the DPO regarding any questions related to the processing of your personal data and the exercise of your rights.

Your Rights

You have the right to access your personal data, object to the processing of such data, have it corrected, or have it deleted. You also have the right to restrict the processing of your data.

If you have consented to the processing of your personal data, you may withdraw your consent at any time.

Finally, you have the right to file a complaint with the CNIL by visiting its website (https://www.cnil.fr/fr/plaintes) or by mail at the following address: CNIL – 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07.

WEBSITE NAVIGATION

Identity and Contact Information of the Data Controller

When you browse the Website, personal data is processed jointly by all entities within the Videlio Group.

Purposes of Processing

1) Handling contact requests

Your personal data is processed to respond to requests you submit to us via the contact forms or online chat feature available on the Website.

The processing of personal data carried out for this purpose is based on the performance of pre-contractual measures.

Fields marked with an asterisk are required.

2) Event management

Your personal data is processed to register you for events we organize or to send you the white papers we publish.

The processing of personal data carried out for this purpose is based on our legitimate interest, namely [XXX].

Fields marked with an asterisk are required.

3) Generating Website Audience Statistics

Website traffic statistics are generated from your personal data, for the sole purpose of analyzing user navigation patterns to improve the site or detect anomalies.

The processing of personal data carried out to achieve this purpose is based on your consent. For this purpose, the collection of your personal data is therefore optional.

We obtain your consent when we ask you to authorize the use of cookies during your first visit to the Site.

Retention Period for Personal Data

Purposes of Processing Retention Period
Management of contact requests 3 years from the last contact
Event management 3 years from the last contact
Generation of audience statistics 25 months

Recipients of personal data

Personal data collected while browsing the Website is accessible to:

Recipient
Internally Sales Department
Marketing & Communications Department
Information Systems Department
External Providers of the following solutions: customer relationship management (CRM) platform, audience measurement solution, online chat software, videoconferencing software, office suite
Hosting Provider

Transfer of Personal Data to a Country Outside the EU

In connection with the processing of personal data carried out in connection with browsing the Website, we use processors whose headquarters are located outside the European Union. Your personal data may therefore be transferred outside the European Union, subject to specific safeguards.

Recipient Country Type of safeguards Link to documentation
Salesforce United States Standard Contractual Clauses and Binding Corporate Rules https://www.salesforce.com/fr/company/privacy/
Google United States Standard Contractual Clauses https://policies.google.com/privacy/frameworks?hl=en-US
Microsoft United States Standard Contractual Clauses https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA
Zoom United States Standard Contractual Clauses https://explore.zoom.us/docs/doc/EEA_Transfer_of_Data.pdf
Tidio United States Standard Contractual Clauses https://www.tidio.com/wp-content/uploads/Standard-contractual-clauses.pdf

BUSINESS OPERATIONS MANAGEMENT

Identity and Contact Information of Data Controllers

In the context of managing business activities, the processing of personal data is carried out by the Videlio Group entity with which you enter into a contract or which initiates the sales prospecting activity.

Purposes of Processing

1) Marketing activities

Your personal data is processed for the purpose of conducting marketing activities.

The processing of personal data carried out to achieve this purpose is based on our legitimate interest, namely the development of our business activities.

We may occasionally collect your personal data through our partners. In this case, we will inform you of the source of your personal data as soon as we contact you for the first time.

You have the right to object to the processing of your personal data for marketing purposes at any time. To do so, simply click on the link provided in the email sent to you or inform the representative who contacts you by phone.

2) Contract Management

Your personal data is processed for the purposes of contract management and, more specifically—though this list is not exhaustive—to:

· Manage orders;

· Maintain accounting records;

· Manage after-sales service;

· Managing disputes.

The processing of personal data is based on:

· For order management and after-sales service: the performance of the contract;

· For bookkeeping: compliance with a legal obligation;

· For dispute resolution: on our legitimate interest, namely the establishment, exercise, or defense of our legal rights.

For these purposes, the collection of your personal data is mandatory, unless otherwise stated.

 

Retention Period for Personal Data

Purposes of processing Retention period
Marketing Active database: three years from the last contact
Order management; After-sales service management Active database: for the duration of the contract and applicable warranties
Dispute resolution Interim archiving: applicable statute of limitations
Accounting records Interim archiving: ten years from the end of the fiscal year

Recipients of personal data

Personal data collected in connection with the management of business activities is accessible to:

Recipient
Internally Sales Department
Marketing & Communications Department
Legal Department
Information Systems Department
Technical Department
Finance Department
External Providers of the following solutions: customer relationship management (CRM) platform, business management software, office suite
Hosting provider
Suppliers
Law firms

Transfer of personal data to a country outside the EU

As part of the processing of personal data carried out in connection with the management of business activities, we use processors whose headquarters are located outside the European Union. Your personal data may therefore be transferred outside the European Union, subject to specific safeguards.

Recipient Country Type of safeguards Link to documentation
Salesforce United States Standard Contractual Clauses and Binding Corporate Rules https://www.salesforce.com/fr/company/privacy/
Microsoft United States Standard Contractual Clauses https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA

BUSINESS OPERATIONS MANAGEMENT

Identity and Contact Information of Data Controllers

In the context of managing business activities, the processing of personal data is carried out by the Videlio Group entity with which you enter into a contract or which initiates the sales prospecting activity.

Purposes of Processing

1) Marketing activities

Your personal data is processed for the purpose of conducting marketing activities.

The processing of personal data carried out to achieve this purpose is based on our legitimate interest, namely the development of our business activities.

We may sometimes collect your personal data through our partners. In this case, we will inform you of the source of your personal data as soon as we contact you for the first time.

You have the right to object to the processing of your personal data for marketing purposes at any time. To do so, simply click on the link provided in the email sent to you or inform the representative who contacts you by phone.

2) Contract Management

Your personal data is processed for the purposes of contract management and, more specifically—though this list is not exhaustive—to:

· Manage orders;

· Maintain accounting records;

· Manage after-sales service;

· Managing disputes.

The processing of personal data is based on:

· For order management and after-sales service: the performance of the contract;

· For bookkeeping: compliance with a legal obligation;

· For dispute resolution: on our legitimate interest, namely the establishment, exercise, or defense of our legal rights.

For these purposes, the collection of your personal data is mandatory, unless otherwise stated.

 

Retention Period for Personal Data

Purposes of processing Retention period
Marketing Active database: three years from the last contact
Order management; After-sales service management Active database: for the duration of the contract and applicable warranties
Dispute resolution Interim archiving: applicable statute of limitations
Accounting records Interim archiving: ten years from the end of the fiscal year

Recipients of personal data

Personal data collected in connection with the management of business activities is accessible to:

Recipient
Internally Sales Department
Marketing & Communications Department
Legal Department
Information Systems Department
Technical Department
Finance Department
External Vendors of the following solutions: customer relationship management (CRM) platform, business management software, office suite
Hosting provider
Suppliers
Law firms

Transfer of personal data to a country outside the EU

As part of the processing of personal data carried out in connection with the management of business activities, we use processors whose headquarters are located outside the European Union. Your personal data may therefore be transferred outside the European Union, subject to specific safeguards.

Recipient Country Type of safeguards Link to documentation
Salesforce United States Standard Contractual Clauses and Binding Corporate Rules https://www.salesforce.com/fr/company/privacy/
Microsoft United States Standard Contractual Clauses https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA

RECRUITMENT MANAGEMENT

Identity and Contact Information of Data Controllers

As part of the recruitment process, personal data is processed by the Videlio Group entity that posted the job opening.

Purposes of Processing

Your personal data is processed for the purposes of reviewing applications, managing interviews, maintaining a resume database, and compiling administrative files for selected candidates.

The processing of personal data is based on:

· For processing applications, managing interviews, and maintaining administrative records: the performance of pre-contractual and contractual obligations;

· For the creation of a resume database: on our legitimate interest, namely having relevant profiles readily available so that we can respond more quickly when recruitment is necessary.

For these purposes, the collection of your personal data is mandatory, unless otherwise stated.

Retention Period for Personal Data

Purposes of processing Retention period
Processing of applications and management of interviews Active database: for the duration of the recruitment process; Interim archiving: applicable statute of limitations
Creation of a resume database Active database: two years from the last contact with the unsuccessful candidate
Updating the administrative files of selected candidates Active database: for the duration of the employment relationship; Interim archiving: applicable retention periods

Recipients of Personal Data

Personal data collected as part of the recruitment process is accessible to:

Recipient
Internal Human Resources Department
Managers within the hiring department
Externally Office suite vendor
Hosting provider

Transfer of personal data to a country outside the EU

As part of the processing of personal data carried out in connection with recruitment management, we use data processors whose headquarters are located outside the European Union. Your personal data may therefore be transferred outside the European Union, subject to specific safeguards.

Recipient Country Type of safeguards Link to documentation
Microsoft United States Standard Contractual Clauses https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA