Why do we have a Privacy Policy?
PYSAE SAS, which operates the website pysae.com, places great importance on protecting the confidentiality of your personal data — this represents, for us, a guarantee of seriousness and trust.
Our Privacy Policy reflects our commitment to complying with the rules applicable to the protection of personal data, and in particular those of the General Data Protection Regulation ("GDPR").
In particular, our Privacy Policy aims to inform you how and why we process your personal data in the context of the services we provide to you.
Who is this Privacy Policy for?
If you are under the legal age of digital consent, you are not authorised to use our services without the prior and explicit consent of a parent or legal guardian, who must contact us by email at dpo@pysae.com.
If you believe we hold personal data about your children without your consent, please contact us at the address above.
Why do we process your personal data, and on what legal basis?
We process your personal data mainly for the following reasons:
- To let you browse our website, use our services, and respond to your requests (e.g. information requests, complaints), on the basis of our terms of use and our legitimate interest in providing you with the best possible service.
- To manage our customer service, on the basis of contract performance and our legitimate interest in responding to your requests and complaints.
- To keep you informed of our latest offers and events by email, on the basis of our legitimate interest in retaining our customers and prospecting new ones.
- To keep you informed of our latest offers and events by phone, on the basis of our legitimate interest in retaining our customers and prospecting new ones.
- To manage billing and any unpaid invoices, on the basis of our legitimate interest in obtaining payment for our services and our terms and conditions.
- To let you follow and comment on our publications on social media, on the basis of our legitimate interest in maintaining a dedicated page on social media.
- To send you our newsletter, informing you about news related to our services, on the basis of our legitimate interest in retaining our customers.
- To record conversations we have with you, in order to improve our customer service, on the basis of your prior consent and our legitimate interest in improving service quality and training our staff.
- To send satisfaction surveys, on the basis of our legitimate interest in improving our services.
- To let you take part in our competitions, on the basis of our legitimate interest in organising them and the performance of the associated competition rules.
What personal data do we process, and for how long?
We have summarised below the categories of personal data we process and their respective retention periods:
- Professional identification data (e.g. first name, surname, job title, company) and contact details (e.g. professional email address and phone number): kept for the entire duration of the service, plus the applicable statutory limitation periods, generally 5 years.
- Where there is confusion between your business name and your personal name (e.g. sole trader, small business), financial and banking data (e.g. bank account number, verification code): kept for as long as necessary to manage the transaction, billing and payments, plus the applicable statutory limitation periods, generally 5 to 10 years.
- Phone number, in the context of our telephone prospecting campaigns: kept for a maximum of 3 years from our last contact with you.
- Email address, in the context of our email prospecting campaigns: kept for a maximum of 3 years from our last contact with you; and, for our newsletter, until the end of your subscription.
- Connection data (e.g. logs, IP address): kept for 1 year.
- Voice recordings from phone conversations: kept for a maximum of 6 months, except for calls evidencing the conclusion of a contract, which are kept for the applicable statutory limitation period, generally 5 years.
Once the applicable retention periods expire, deletion of your personal data is irreversible and we will no longer be able to provide it to you. At most, we may retain anonymised data for statistical purposes only.
Please note that in the event of a dispute, we are required to retain all personal data concerning you for the entire duration of the proceedings, even after the retention periods described above have expired.
How did we obtain your personal data?
Your data is collected directly from you, whether you are a customer of our services or simply a visitor to our website pysae.com, and we undertake to process your data only for the reasons described above.
Your personal data may also be processed indirectly in the context of trade shows or social media (e.g. LinkedIn). However, if you voluntarily publish content on the pages we manage on social media, you acknowledge full responsibility for any personal information you may disclose, regardless of its nature or origin.
What rights do you have over your personal data?
Applicable data protection regulations grant you specific rights, which you may exercise at any time and free of charge, to control how we use your data:
- Right of access and to obtain a copy of your personal data, provided this request does not conflict with trade secrecy, confidentiality, or the secrecy of correspondence.
- Right to rectification of personal data that is inaccurate, outdated or incomplete.
- Right to object to the processing of your personal data carried out for commercial prospecting purposes, and to processing based on our legitimate interest, unless legitimate and compelling grounds justify such processing and override your interests, rights and freedoms.
- Right to request the erasure ("right to be forgotten") of your personal data that is not essential to the proper functioning of our services.
- Right to restriction of your personal data, allowing you to freeze the use of your data in the event of a dispute over the legitimacy of a processing activity.
- Right to data portability, allowing you to retrieve some of your personal data in order to store it or transmit it easily from one information system to another.
- Right to give instructions on what happens to your data after your death, either directly or through a trusted third party or heir.
Who can access your personal data?
Your personal data is processed by our teams and our technical service providers solely for the purpose of operating our service. We carefully vet all our technical service providers before engaging them, to ensure they strictly comply with the rules applicable to personal data protection.
We guarantee that we never transfer or sell your data to third parties or commercial partners.
How do we protect your personal data?
We implement all technical and organisational measures required to guarantee the security of your personal data on a daily basis, and in particular to protect against any risk of destruction, loss, alteration or unauthorised disclosure.
Do we use cookies when you browse our website?
We use cookies on our website. Please refer to our Cookie Policy for more information.
Who can you contact for more information about the use of your personal data?
To best guarantee the protection and integrity of your data, we have officially appointed an independent Data Protection Officer ("DPO") registered with our supervisory authority. You may contact our DPO at any time, free of charge, at dpo@pysae.com to obtain further information or details on how we process your data.
How can you contact the CNIL?
You may contact the French data protection authority, the "Commission Nationale de l'Informatique et des Libertés" ("CNIL"), at any time: Service des plaintes de la CNIL, 3 place de Fontenoy – TSA 80751, 75334 Paris Cedex 07, France, or by phone at +33 1 53 73 22 22.
Can this Privacy Policy be changed?
We may amend our Privacy Policy at any time to adapt it to new legal requirements as well as to new processing activities we may implement in the future.
Certified compliant by Dipeeo®