Commitment of CMAI Groupe company on confidentiality and protection of personal data

 
Aware of the sensitivity of the data we process in the context of our service offers, we attach the greatest importance to confidentiality and the protection of our clients' data that we are led to process on a daily basis.
The new regulation coming into force on May 25, 2018 strengthens, vis-à-vis you, our obligations and leads us to further strengthen the attention paid to the processing of your personal data.
All company personnel have been specifically trained to respect the legal obligations in force and I commit to the implementation of a privacy protection policy meeting the highest requirements in this matter.
The commitments that CMAI Groupe company makes to protect your privacy and your personal data are summarized in the confidentiality policy attached.
It aims to explain to you, in full transparency, the internal principles that we apply on a daily basis and on which all group personnel have committed.
To enable you to respond to all requests concerning this policy and allow you to exercise your rights in strict compliance with the regulations in force, you can contact our data protection delegate at the following address: vos-donnees-personnelles@cmai-groupe.com
He is your contact for all aspects relating to privacy protection and personal data.

The Chairman and Chief Executive Officer

Personal data protection policy of CMAI Groupe company 

CMAI Groupe company limits the collection of your data to the strict necessary
CMAI Groupe company is responsible for all personal data processing implemented within the company.
As such, it ensures that only data strictly necessary for the realization of services rendered are collected during the signing of contracts and the management of customer or prospect relations.
The data collected by CMAI Groupe personnel and partners essentially have the following purposes:
|- Customer account management, quotes and orders
|- Management of deliveries, order tracking, invoicing and after-sales service
|- Provision of a customer service accessible by telephone or instant messaging. Exchanges between customer service and the customer may be recorded for service improvement purposes.
|- Sending of targeted commercial offers by email, on social networks or any other medium.
|- Collection of customer reviews on marketed products
|- Measurement of site attendance (mobile and desktop) and mobile applications
|- Implementation of contests and advertising games
|- Sharing of information with commercial partners  

CMAI Groupe company processes your data in compliance with the law.

All personal data processing implemented by CMAI Groupe company personnel is carried out in strict compliance with the legal obligations in force.
Any data collection responds to a precise purpose that is clearly explained during collection (form, consent, specific letter...), as well as the legal or contractual framework attached to it where applicable.
For certain processing, your explicit consent is necessary. A dedicated mention for this purpose will be present on the medium (paper or digital). You can withdraw your consent at any time without this impacting your relations with CMAI Groupe company.
CMAI Groupe company only keeps your data for the time necessary for the processing for which they were collected.
When your personal data is no longer necessary, only information subject to a legal archiving obligation or that for which you have given us your consent to keep is retained. The others are deleted.
The electronic contact details used in the context of our marketing operations are only kept for a maximum of 3 years after the last contact.

CMAI Groupe company secures your data

The personal data that we collect can be entered and processed in computer systems placed under the responsibility of CMAI Groupe company. The technical means implemented respect the best security practices in force.
Only authorized personnel can have access to your data in the context of commercial relationship management. They are subject to confidentiality obligations imposed by our internal charter in this matter.
The security of paper files that you may be required to give us is ensured. Personnel have instructions for document protection and respect the internal policy in force.

CMAI Groupe company only transmits your data to authorized recipients

The main recipients of your data are the internal services authorized to process your commercial relations. However, partners, in particular logistics and IT service providers, may be recipients of part of the data for the realization of expected services.
Certain data may be provided, on request, to third parties authorized by law in compliance with the legal obligations in force.

CMAI Groupe company respects your rights

You have a right of access, rectification or deletion, as well as a right to the portability of your data or limitation of processing.
You can also, for legitimate reasons, oppose the processing of your data.
To facilitate the exercise of your rights, you can contact the data protection delegate at the following address: vos-donnees-personnelles@cmai-groupe.com

CMAI Groupe company undertakes to respond to any request to exercise your rights within the legal deadlines in force (2 months until May 25, 2018, 1 month thereafter).
You also have a right of complaint to the National Commission for Information Technology and Civil Liberties (www.cnil.fr).
CMAI Groupe company has undertaken a governance approach regarding data protection.
All CMAI Groupe company personnel have been sensitized to good practices for handling personal data. The processing of this data is carried out with the greatest respect for your privacy.
The data protection delegate accompanies and advises personnel in their daily approaches in order to implement all legal obligations in force on the subject.
Legal framework applied in terms of personal data protection
|- Law No. 2004-801 of August 6, 2004 relating to the protection of individuals with regard to the processing of personal data (in force until May 25, 2018).
|- European Regulation No. 2016/679 of the European Parliament and Council of April 27, 2016 (in force from May 25, 2018).