Privacy Policy
1. PURPOSE OF THIS PRIVACY POLICY
This privacy policy (the “Privacy Policy”) describes how EVENTI SAS, a French company with its registered office at 41 rue du Faubourg Saint-Denis, 75110 Paris, registered with the Pontoise Trade and Companies Register under number B 943 064 733 (the “Agency”, “we”, “us” or “our”), processes your personal data in connection with its activities and the services it provides (the “Services”), including through the website http://www.eventifrance.com/ (the “Site”).
This Privacy Policy explains in particular:
- which categories of personal data we may collect
- for what purposes we process them
- on which legal bases this processing relies
- your rights in relation to your personal data
In most situations described in this Privacy Policy, we act as data controller. In some cases, especially when we provide Services to clients, we may act as data processor on their behalf. In such cases, our clients determine the purposes and means of the processing.
This Privacy Policy complements our Terms of Use and our Cookies Policy. It aims to comply with the requirements of Regulation (EU) 2016/679 on the protection of personal data (“GDPR”) and with the French “Informatique et Libertés” Act as amended. When we refer to “GDPR”, we refer to all applicable data protection legislation.
2. SCOPE
This Privacy Policy applies to personal data processing carried out by the Agency:
- when you use our Site
- when you interact with us (requests for information, provision of Services, participation in an event, etc.)
- when we process data as part of providing Services to our clients
It does not apply to:
- processing carried out by third parties when you use their websites, products or services (for example when you follow links on our Site to external sites)
- processing relating to the management of our own staff, which is covered by a separate workplace privacy notice
3. TYPES OF PERSONAL DATA WE COLLECT
“Personal data” means any information relating to an identified or identifiable natural person.
Depending on the situation, we may process the following categories of personal data:
- Identity data
First name, last name. - Contact data
Email address, telephone number, social media handle, postal address. - Applicant data
Date of birth, gender, country, nationality, CV, professional experience, education, and any information provided as part of a job application or recruitment process. - Image data
Photographs, video recordings and possibly voice recordings. - Financial data
Bank account details. - Transaction data
Details of payments, invoices, information relating to Services purchased from us. - Profile data
Interests and preferences (including marketing preferences), participation in games, promotions or contests, survey responses and feedback, content of messages sent via our contact forms or chat features. - Behavioural data
Information about how you browse our Site, collected in particular through cookies, pixels and similar technologies, session details, pages viewed, Services consulted. For more information, please refer to our Cookies Policy. - Technical data
IP address, browser type, operating system, technical settings and identifiers, approximate location (for example to display the appropriate language or content), and any other unique device identifier. - Marketing and communications data
Your preferences regarding marketing communications and the channels we may use to contact you. - Publicly available data
Information from public sources or made public by you or third parties (articles, public social profiles, public speeches, public positions on certain topics, etc.).
4. HOW WE COLLECT PERSONAL DATA
We may collect personal data in several ways:
- Data you provide directly
For example when you:- fill in a form on our Site
- contact us (by email, phone or social media)
- register for an event or subscribe to our marketing communications
- send us a job application
- Data collected through cookies and similar technologies
When you browse the Site, certain behavioural and technical data are collected automatically via cookies and similar technologies. For more information, please refer to our Cookies Policy. - Data received from third parties
We may receive personal data about you from:- technical service providers (hosting, analytics, marketing tools)
- data providers or business directories
- partners involved in the provision of our Services
- Data from public sources
We may also collect data from publicly available sources (articles, social networks, open databases, etc.), particularly in the context of communication, monitoring or talent selection activities.
5. CATEGORIES OF DATA SUBJECTS
We may process personal data relating to the following categories of individuals:
- Site visitors
Individuals browsing the Site or interacting with its functionalities. - Individuals who contact us
Anyone sending us a request, complaint or feedback via the Site, by email, phone or form. - Clients and client staff
Representatives, employees or contacts of our clients in connection with the provision of Services. - Talents and contributors
Individuals who provide services or content for our projects (for example artists, speakers, influencers or other contributors appearing in productions or events). - Partners and suppliers
Contacts within companies that provide us with products or services or that partner with us on certain projects. - Visitors to our offices, studios or production sites
Individuals visiting our premises or locations where we organise shoots or events. - Participants in our events
Individuals attending an event we organise or co-organise. - Job applicants
Individuals applying for a role with the Agency. - Members of the public
Individuals whose data may be processed as part of Services delivered to our clients (for example in the context of campaigns, studies or reporting).
6. HOW WE USE PERSONAL DATA (PURPOSES AND LEGAL BASES)
We only process your personal data where we have a valid legal basis to do so under GDPR. The main purposes and legal bases are as follows.
6.1 Use related to the Site and communications
- Responding to your requests
Data: identity, contact details, content of the request.
Legal basis:- performance of a contract or pre-contractual measures when your request relates to a Service
- or legitimate interest in responding to your enquiries.
- Providing you with information about our Services via direct marketing
Data: identity, contact details, marketing preferences.
Legal basis, depending on applicable rules:- your consent
- or our legitimate interest in promoting our activities, subject to your right to object.
- Customising your browsing experience on the Site
Data: behavioural and technical data, aggregated data, cookies.
Legal basis:- strictly necessary cookies: our legitimate interest in ensuring the Site functions properly
- other cookies: your consent.
- Interacting with social media
Data: behavioural and technical data, and in some cases profile data depending on your settings.
Legal basis:- your consent
- or our legitimate interest in promoting our Services and managing our online presence.
Social media platforms may act as data controllers for their own purposes. Please refer to their privacy policies.
- Operating, evaluating and improving the Site and our Services
Data: behavioural and technical data, aggregated statistics, cookie data.
Legal basis:- our legitimate interest in analysing and improving our Services and communications
- for non-essential cookies: your consent.
When we act as data processor on behalf of a client, the legal basis is determined by the client in its capacity as data controller.
6.2 Provision of our Services
- Content creation and talent management
Data: identity, contact details, applicant data, image data and publicly available data (biography, preferences, online presence, etc.).
Legal basis:- our legitimate interest or that of our clients in selecting and managing talents for campaigns
- for any special category data collected directly from the individual: explicit consent.
- Event organisation and management
Data: identity, contact details, logistical information, any special category data (such as allergies or dietary requirements), images.
Legal basis:- performance of a contract or pre-contractual measures
- consent where required by law, for example for image capture and use.
- Media and social media monitoring for our clients
Data: publicly available information (articles, posts, opinions, comments).
Legal basis:- our legitimate interest and that of our clients in monitoring the perception of their campaigns and offerings.
- Management of our own social media channels
Data: identity, contact details, profile data, publicly available data.
Legal basis:- our legitimate interest in communicating and interacting with the public and promoting our Services.
- Analytics and research, including from aggregated or anonymised data
Data: behavioural and technical data, profile data, aggregated data.
When data is anonymised, it no longer constitutes personal data.
Legal basis for any remaining personal data:- our legitimate interest in improving our Services or those of our clients
- for data collected through non-essential cookies: your consent.
- Campaign reporting, surveys, focus groups, polls, promotions and contests
Data: identity, contact details, profile data, survey responses, feedback, and possibly image data or special category data depending on the context.
Legal basis:- performance of a contract (for example the terms and conditions of a promotion)
- our legitimate interest and that of our clients in evaluating campaigns and Services
- your consent, for example for the use of testimonials, quotes or photos.
- Marketing and business development
Data: identity, contact details, marketing and communications data.
Legal basis:- our legitimate interest in promoting our Services
- or your consent where required by law.
6.3 Legal obligations, internal management and recruitment
- Compliance with legal and regulatory obligations
Data: identity, contact details, financial and transaction data and any data required by law.
Legal basis: compliance with a legal obligation. - Administrative, financial and legal management
Data: identity, contact details, financial data, transaction data, publicly available data.
Purposes: accounting, tax, dispute management, safety and security, business restructuring or sale, etc.
Legal basis:- our legitimate interest in managing our business and protecting our rights and those of third parties
- and, where applicable, compliance with a legal obligation.
- Receipt of services from suppliers and partners
Data: identity and contact details of relevant contacts within these organisations.
Legal basis:- performance of a contract
- or our legitimate interest in effectively managing our relationships with suppliers.
- Recruitment
Data: identity, contact details, CV and application data, and where permitted by law certain special category data.
Purposes: assessing applications, managing interviews, complying with legal obligations, monitoring our equal opportunity commitments.
Legal basis:- performance of pre-contractual measures
- our legitimate interest in recruiting and managing talent
- compliance with legal obligations where applicable
- for special category data: explicit consent.
- Visits to our premises and guest Wi-Fi access
Data: identity and contact details, image (CCTV) where relevant, technical and behavioural data relating to Wi-Fi use, and where required certain health information (for example when health and safety rules require it).
Legal basis:- our legitimate interest in ensuring the security of people and property and the proper functioning of our infrastructure
- compliance with health and safety obligations where applicable
- in part, your consent for monitoring the proper use of the guest Wi-Fi service.
When we act as data processor for a client, the client determines the appropriate legal basis.
7. SHARING YOUR PERSONAL DATA
We only share your personal data when legally permitted and when necessary.
Whenever we share personal data with third parties, we put in place contractual safeguards and security measures to protect the data and to comply with our data protection and confidentiality obligations.
Depending on the situation, your personal data may be shared with:
- our clients, where necessary for the provision of Services
- service providers involved in the delivery of our Services (delivery, logistics, event partners, hotels, transport providers, production suppliers, caterers, etc.)
- our IT providers and hosting services, backup, analytics and security tools
- our payment providers and banks
- our marketing service providers (emailing, newsletter distribution, campaign tools)
- recruitment agencies or third parties performing background checks
- specialist providers assisting with contests, prize draws and promotions
- our professional advisers (lawyers, accountants, auditors, etc.)
- public authorities, courts or regulators where required by law
- any other authorised third party in the context of a legal request, court proceedings, investigation or to establish, exercise or defend legal claims.
8. TRANSFERS OF PERSONAL DATA OUTSIDE THE EUROPEAN ECONOMIC AREA
If your personal data is transferred to a country outside the European Economic Area, we ensure that such transfer complies with applicable data protection law, in particular by:
- transferring the data to countries recognised by the European Commission as providing an adequate level of protection
- or implementing appropriate safeguards with the recipient, such as the European Commission’s standard contractual clauses or binding corporate rules.
9. CONSENT
Where we rely on your consent as the legal basis for processing your personal data, such consent may be obtained:
- when you provide your data (for example through a form or cookie settings)
- or by contacting us using the details set out in this Privacy Policy.
You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal but may limit access to certain Services or features.
If you no longer wish to receive marketing communications from us, you can use the unsubscribe link included in each message or contact us directly.
10. SECURITY AND CONFIDENTIALITY
We implement technical and organisational measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
Our employees and processors who have access to personal data are bound by confidentiality obligations.
11. YOUR RIGHTS
Subject to the conditions set out in applicable law, you have the following rights:
- right of access to your data and to obtain a copy
- right to rectification of inaccurate or incomplete data
- right to erasure (in certain cases)
- right to restriction of processing
- right to object, in particular to direct marketing
- right to data portability in respect of certain data
- right to withdraw your consent where processing is based on consent
- right to define instructions regarding the use of your data after your death (where applicable under local law)
You may exercise your rights by contacting us in writing using the contact details set out below. We may request additional information to verify your identity.
You also have the right to lodge a complaint with the competent supervisory authority. In France, this is the Commission Nationale de l’Informatique et des Libertés (CNIL).
12. DATA RETENTION
We retain your personal data for as long as necessary for the purposes described in this Privacy Policy, then delete or anonymise it, unless a longer retention period is required by law or requested by the data controller where we act as processor.
By way of example:
- data relating to a one-off operation (event, campaign) is retained for the duration necessary to manage that operation and any follow-up
- candidate data may be kept for a limited period after the end of the recruitment process
- data necessary to manage your marketing opt-out is kept on a suppression list to ensure you no longer receive marketing communications.
13. PERSONAL DATA OF MINORS
Our Site is not specifically intended for minors and we do not knowingly collect personal data from them through the Site.
However, due to the nature of our activities (events, content, etc.), we may occasionally process data relating to minors. In such cases, we apply the safeguards required by applicable law and, where necessary, seek consent from holders of parental authority.
14. THIRD-PARTY LINKS AND SERVICES
The Site may contain links to websites or services operated by third parties. When you leave our Site or use a third-party service, this Privacy Policy no longer applies to those external services.
Your interactions with such sites or services are governed by their own privacy policies and terms of use. We do not control and are not responsible for their practices.
The Site may also integrate social media features. Your use of these features is subject to the terms and privacy policies of the relevant platforms.
15. HOW TO CONTACT US
If you have any questions about this Privacy Policy or wish to exercise your rights, you can contact us at:
- email: contact@eventifrance.com
16. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices or changes in applicable laws or regulations.
The current version is the one published on the Site. In the event of a material change, we may notify you by email where we have your contact details. We encourage you to review this Privacy Policy regularly to stay informed about how we process your personal data.