PRIVACY NOTICE REGARDING THE PROCESSING OF PERSONAL DATA (GDPR)
– CUSTOMERS, PARTNERS, PROSPECTS, INNOVATORS and SUPPLIERS –

Introduction

This Privacy Notice applies to the processing of personal data (hereinafter referred to as " personal data ") carried out by the company ARWIN, located at 7 avenue de l'Opéra, 75001 Paris (hereinafter referred to by its trade name " (RE)SET")in its capacity as data controller regarding its customers, partners, prospects, innovators, et suppliers.

This Privacy Notice is intended to explain the conditions under which (RE)SET ("we") collects and processes your personal data.   

It provides information about the categories of personal data we hold about you, how and why we collect it, how we use it, and how we protect it. This Privacy Notice also informs you of the rights you have and how to exercise them.

Who is this notice for?

We process personal data for the following categories of individuals:

• Les Customers: If you or your company have already signed a contract with (RE)SET for the provision of services offered by (RE)SET, you are a Customer of (RE)SET.
• Les Partners If you or your company enter into a partnership agreement with (RE)SET, you are a Partner, it being specified that this agreement may be concluded free of charge or for a fee.
• Prospects: If you have not yet signed a contract with us and if (i) you contact us by any means (direct or indirect), for example by visiting our website, contacting us via LinkedIn, or participating in one of our events/webinars, or if (ii) we contact you, notably through a professional network, you are a Prospect of (RE)SET.
• Innovators: If you or your company own or are developing an innovative solution or specific technology, you are an Innovator.
• Suppliers : If you or your company provide a service or product to (RE)SET, you are a Supplier of (RE)SET.

Further information regarding the nature of the data we collect can be found below in the section "The data we collect about you".

For the sake of completeness, in certain situations, a Customer may entrust us with a project where (RE)SET acts as a data processor under the GDPR and will process personal data only based on documented instructions and on behalf of the Customer. Such processing of personal data is not covered by this Privacy Notice. It is governed by a specific data processing agreement concluded between the relevant Customer and (RE)SET.

About (RE)SET – Who are we?

(RE)SET is a consulting firm committed to the economic and environmental transition.

The data controller for your personal data is:

You can address any questions regarding this Policy or the processing of your personal data to the following email address: privacy@reset.earth

To learn more about the services we offer, please visit our website. www.reset.earth and follow @(RE)SET on LinkedIn.

The data we collect about you

We collect the following categories of personal data:

• Identity Data: first name, last name, signature, profession/title, department, organization.
• Contact Data: postal address, email address, and telephone number.
• Administrative Data: legal name, legal form, capital, company registration number, identity of legal representative, SIREN number.
• Billing / Transactional Data: orders, invoices, bank details, payment flow details.
• Technical Data: IP address, login data, traffic data, browser type and version, time zone settings and location, browser plugin types and versions, operating system and platform, and other information about how you accessed our website.
• Specific Data: business documents, correspondence, contracts, confidentiality agreements, questionnaires, expert interviews, bid evaluations, dietary preference requirements (only in case of participation in meetings / events), bilateral agreements.
• Marketing and Communication Data: your marketing and communication preferences.

How do we collect personal data about you?

We collect your personal data in two ways:

• Directly from you:
  • For Customers and Partners: You may provide us with personal data by filling out forms or contacting us by mail, phone, email, in person during meetings, at events, as part of our contractual agreement, or in the context of business prospecting, by entering this data on our website or on our program websites, by subscribing to our newsletter, by participating in our public events, webinars, or surveys, etc.
  • For Prospects: You may provide us with your personal data at events, by participating in our public events, webinars, or surveys, by filling out forms, or by subscribing to our newsletter.
  • For Innovators : You may provide us with your personal data at events, during initial contact, by filling out forms on our website or on a website dedicated to a specific program or contract.
  • For Suppliers: You may provide us with your personal data during our supplier selection process and contracting.

• Indirectly:
  • Your personal data may be provided to us by your employer;
  • Where applicable and in specific scenarios, we may collect data about you from third parties (suppliers, partners, clients) or from publicly accessible sources such as professional networks.

For what reasons do we use your personal data

(RE)SET processes personal data about you for various purposes, which vary depending on your capacity (Customer, Partner, Prospect, Innovator, Supplier) and are described in the tables below:

If you are a Customer or Partner:

If you are a Prospect:

If you are an Innovator:

If you are a Supplier:

How we share your personal data, and with whom:

We share your personal data within the various departments of (RE)SET and companies of the (RE)SET group.

In the course of our activities, we use service providers or suppliers to whom we communicate your personal data:

• Service Providers and Suppliers (IT, marketing, customer relations) that we engage to perform services on our behalf, for example companies providing hosting services, SaaS solutions for billing and payment processing, Customer/Partner relationship management, or marketing. Some of these providers or suppliers perform these processing activities on our behalf and according to our instructions and are qualified as "processors" under the GDPR. We enter into the necessary contracts with our processors and require that these processors comply with applicable legislation and our instructions.

• Professional Advisors and Agents, including lawyers, accountants, auditors.

• Judicial or Administrative Authorities with legitimate requests. 

• We may also share your personal data with third parties to whom we may choose to sell, transfer, or merge parts of our business. Alternatively, we may seek to acquire other businesses or merge with them. If a change in capital occurs, the new owners may use your personal data in the same way as set out in this privacy statement.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

We may also transfer your personal data outside the European Economic Area (EEA) when we communicate your personal data to providers in the performance of our missions. For all data transfers outside the European Economic Area or outside countries considered adequate by the European Union, we take the necessary measures to guarantee their confidentiality and integrity through an appropriate legal framework (in particular the European Commission's standard contractual clauses). You can obtain a copy of these safeguards by email at privacy@reset.earth.

How long will we use your personal data for?

Data necessary for the performance of contracts concluded with Customers, Partners, and Suppliers is retained for the duration of the contractual relationship. It will then be archived to allow (RE)SET to comply with its legal obligations, including contractual, accounting, and tax obligations (i.e., 10 years from the end of the fiscal year – French Commercial Code L123-22), or to establish evidence in case of litigation, within the limits of the applicable legal statutes of limitations, namely 5 years.

Personal data relating to Customers used for business prospecting purposes is retained during the business relationship, and then for a period of three years from the end of the business relationship.

Personal data relating to a non-client Prospect is retained for a period of three years from its collection or from the last contact from the prospect.

Personal data relating to an Innovator is retained for the duration of the contractual relationship and then for a period of three years from the end of the contractual relationship.

How do we ensure the security of your personal data?

We are committed to protecting your personal data. We strive to implement adequate security measures (i) by establishing encrypted backups and physical security procedures so that the data we hold about you is protected, and (ii) by establishing appropriate levels of personal data protection, thereby preventing the communication – internal or external – of personal data to unauthorized parties and for inappropriate use.

What are your rights?

In accordance with the provisions of the GDPR, you have the following rights:

• Right to obtain access to your personal data as well as information about how your personal data is processed;
• Right to request the rectification of your inaccurate personal data as well as the right to have your incomplete personal data completed;
• Right to object to the processing of your personal data for reasons relating to your particular situation for processing based on the legitimate interest of (RE)SET;
• Right to request the erasure of your personal data when one of the grounds provided by the GDPR applies, for example when your personal data is no longer necessary for the purposes for which it was collected;
• Right to request the restriction of the processing of your personal data in certain circumstances, such as when:
  • The accuracy of the personal data is contested;
  • The processing is unlawful but you object to the erasure of your personal data;
  • We no longer need your personal data but it is still necessary;
  • For the establishment, exercise, or defense of legal claims;
• Right to request the portability of your personal data in a structured, machine-readable format to a third party or to yourself;
• Right to withdraw your consent to the processing of your personal data (if this processing is based on your consent). This withdrawal does not affect the lawfulness of processing based on consent carried out before its withdrawal; and
• Right to object at any time to receiving business prospecting.;

You also have the right to lodge a complaint with your local data protection supervisory authority, the Commission Nationale de l'Informatique et des Libertés (CNIL), 3 Place de Fontenoy, 75007 Paris, France..

For any concerns you may have, or to exercise your rights, we invite you first to contact us at the email address privacy@reset.earth.