INFORMATION NOTICE REGARDING PERSONAL DATA PROCESSING (RGPD)
- CUSTOMERS, PARTNERS, PROSPECTS, INNOVATORS and SUPPLIERS -

Introduction

This Information Notice applies to the processing of personal data (hereinafter referred to as " personal data ") by ARWIN, located at 7 avenue de l'Opéra, 75001 Paris, (hereinafter referred to by its trade name " (RE)SET"), as data controller for its customers, partners, prospects, innovators and suppliers.

The purpose of this Information Notice is to explain the conditions under which (RE)SET ("we" or "us") collect and process your personal data.   

It provides information about the categories of personal data we hold about you, how and why we collect it, how we use it and how we protect it. This Information Notice also informs you of your rights, and how to exercise them.

Who is this leaflet for?

We process the personal data of the following categories of persons:

• Customers: if you or your company have already signed a contract with (RE)SET, the purpose of which is to provide you with the services offered by (RE)SET, you are a Customer of (RE)SET.
• Partners : If you or your company enter into a partnership agreement with (RE)SET, you are a Partner, whether free of charge or against payment.
• Prospects: If you have not yet signed a contract with us and if (i) you contact us by any means (direct or indirect), for example by visiting our website, soliciting us from the Linkedin network, or attending one of our events / webinars, or if (ii) we contact you, in particular through a professional network, you are a (RE)SET Prospect.
• Innovators: If you or your company own or are developing an innovative solution or specific technology, you are an Innovator.
• Suppliers : if you or your company provide a service or product to (RE)SET, you are a (RE)SET Supplier.

Further information on the nature of the data we collect can be found below in the section "The data we collect about you".

For all intents and purposes, in certain situations, the Customer may entrust us with an assignment for which (RE)SET acts as a subcontractor within the meaning of the RGPD and will process personal data only on documented instructions and on behalf of the Customer. Such processing of personal data is then not covered by this Information Notice. They are the subject of a specific subcontracting agreement concluded between the Customer concerned and (RE)SET.

About (RE)SET - Who we are

(RE)SET is a consulting firm committed to economic and environmental transition.

The person responsible for processing your personal data is :

If you have any questions about this Policy or the processing of your personal data, please send them to the following e-mail address: privacy@reset.earth

To find out more about the services we offer, please visit our website www.reset.earth and follow @(RE)SET on LinkedIn.

The data we collect about you

We collect the following categories of personal data:

• Identity data: first name, last name, signature, profession/title, department, organization.
• Contact data: postal address, e-mail address and telephone number.
• Administrative data: legal name, legal form, capital, RCS number, identity of legal representative, SIREN number.
• Billing/transactional data: orders, invoices, bank details, payment flow details.
• Technical data: IP address, connection data, traffic data, browser type and version, time zone settings and location, browser plug-in types and versions, operating system and platform, and other information about how you accessed our website.
• Specific data: commercial documents, correspondence, contracts, confidentiality agreements, questionnaires, expert interviews, tender evaluations, preferences in terms of food requirements (for participation in meetings/events only), bilateral agreements.
• Marketing and communication data: your marketing and communication preferences.

How do we collect your personal data?

We collect your personal data in two ways:

• Directly to you:
  • For Customers and Partners: You can provide us with personal data by filling in forms or by contacting us by post, telephone, e-mail, in person at meetings, at events, as part of our contractual agreement, or as part of commercial prospecting, by entering this data on our website or on the websites of our programs, by subscribing to our newsletter, by taking part in our public events, webinars or surveys, etc.
  • For Prospects: You can communicate your personal data to us at events, by participating in our public events, webinars or surveys, by filling in forms, or by subscribing to our newsletter.
  • For Innovators: You can give us your personal data at events, when contacting us, or by filling in forms on our website or on a website dedicated to a specific program or contract.
  • For Suppliers: You may provide us with your personal data during the supplier selection and contracting process.

• Indirectly :
  • Your personal data may be communicated to us by your employer;
  • Where appropriate and in specific cases, we may collect data about you from third parties (suppliers, partners, customers) or from publicly accessible sources such as professional networks.

Why we use your personal data

(RE)SET processes personal data about you for various purposes which vary according to your status (Customer, Partner, Prospect, Innovator, Supplier) and which are described in the tables below:

If you are a Customer or Partner :

If you are a Prospect :

If you are Innovative :

If you are a supplier :

How we share your personal data, and with whom :

We share your personal data within the various departments of (RE)SET and companies in the (RE)SET group.

In the course of our business, we may use service providers or suppliers to whom we may disclose your personal data:

• Service providers and suppliers (IT, marketing, customer relations) that we engage in order to perform services on our behalf, for example companies offering hosting services, SaaS solutions for invoicing and payment processing, Customer/Partner relationship management, or marketing. Some of these service providers or suppliers carry out these processing operations on our behalf and according to our instructions, and are qualified as "processors" within the meaning of the RGPD. We enter into the necessary contracts with our subcontractors and require these subcontractors to comply with current legislation and our instructions.

• Professional advisors and agents, including lawyers, accountants and auditors.

• Authorized judicial or administrative authorities upon request 

• We may also share your personal data with third parties to whom we may choose to sell, transfer or merge all or part of our business. Alternatively, we may seek to acquire or merge with other companies. If a change of ownership occurs, the new owners may use your personal data in the same way as set out in this privacy statement.

We ask all third parties to respect the security of your personal data and to treat it in accordance with the law.

We may also transfer your personal data outside the European Economic Area (EEA) when we communicate your personal data to service providers as part of the performance of our tasks. For all transfers of data outside the European Economic Area or outside countries considered adequate by the European Union, we take the necessary measures to guarantee their confidentiality and integrity through an appropriate legal framework (in particular, the European Commission's standard contractual clauses). You can obtain a copy of these guarantees by emailing privacy@reset.earth.

How long will we use your personal data?

Data required for the performance of contracts with customers, partners and suppliers is kept for the duration of the contractual relationship. It will then be archived to enable (RE)SET to comply with its legal obligations, in particular contractual, accounting and tax obligations (i.e. 10 years from the close of the financial year - L123-22 Commercial Code), or to constitute evidence in the event of litigation, within the limit of the applicable legal prescription periods, i.e. 5 years.

Personal data relating to customers used for commercial canvassing purposes is kept for the duration of the commercial relationship, and then for a period of three years from the end of the commercial relationship.

Personal data relating to non-customer prospects is kept for a period of three years from the date of collection or last contact with the prospect.

Personal data relating to an Innovant is kept for the duration of the contractual relationship, and then for a period of three years from the end of the contractual relationship.

How do we ensure the security of your personal data?

We are committed to protecting your personal data. We strive to implement appropriate security measures (i) by implementing encrypted backups and physical security procedures to ensure that the data we hold about you is protected, and (ii) by establishing appropriate levels of personal data protection, thus preventing the disclosure - internally or externally - of personal data to unauthorized parties and for inappropriate use.

What are your rights?

In accordance with the provisions of the RGPD, you have the following rights:

• The right to obtain access to your personal data and information on how your personal data is processed;
• The right to request the rectification of inaccurate personal data and the completion of incomplete personal data;
• Right to object to the processing of your personal data on grounds relating to your particular situation for processing based on (RE)SET's legitimate interests;
• Right to request the erasure of your personal data when one of the grounds provided for in the RGPD applies, i.e., for example, when your personal data is no longer necessary with regard to the purposes for which it was collected ;
• Right to request the restriction of the processing of your personal data in certain circumstances, when :
  • The accuracy of personal data is disputed;
  • The processing is unlawful but you object to the deletion of your personal data;
  • We no longer need your personal data, but they are still necessary;
  • To establish, exercise or defend a legal right;
• Right to request portability of your personal data in a structured machine-readable format to a third party or to you;
• The right to withdraw your consent to the processing of your personal data (if such processing is based on your consent). Such withdrawal will not affect the lawfulness of the processing based on consent carried out prior to the withdrawal of consent; and
• The right to object, at any time, to receiving commercial prospecting;

You also have the right to lodge a complaint with your local data protection supervisory authority, the Commission Nationale de l'Informatique et des Libertés (CNIL), 3 Place de Fontenoy, 75007 Paris, France.

For any concerns you may have, or in order to exercise your rights, we invite you in the first instance to contact us at the following e-mail address privacy@reset.earth.