Privacy policy
10. PERSONAL DATA
As part of its services, FuriFuri will process personal data of its clients.
10.1. Data Controller
The entity responsible for collecting and processing data on the website is Furi & Co - 18, Avenue de la Source - 06000 Nice.
10.2. Collected Data
10.2.1. Data collected from clients
During the contractual relationship, FuriFuri may collect and process information from its clients, including names, first names, job titles, company names, phone numbers, mailing addresses, email addresses, and contract history.
10.2.2. Purposes of personal data collection
The data collected during the contractual relationship is processed for the following purposes:
- Executing contractual obligations;
- Contacting clients;
- Preventing illegal activities;
- Enforcing the terms and conditions;
- Initiating legal proceedings;
- Verifying the identity of clients;
10.2.3. Legal basis for data processing
The data collection is based on a contractual relationship.
10.2.4. Recipients of the data
The collected data is only accessible to FuriFuri within the necessary limits for the execution of contractual obligations.
These data, whether in individual or aggregated form, are never made freely visible to third parties.
10.2.5. Data retention period
The collected personal data is retained for the duration of the contractual relationship and as long as FuriFuri's liability may be engaged.
After the retention period, FuriFuri undertakes to permanently delete the data of the individuals concerned without retaining a copy.
10.2.6. Security and confidentiality of personal data
Personal data is stored securely using current technical means, in compliance with the General Data Protection Regulation and applicable national legislation.
Access to FuriFuri's premises is also secure.
10.2.7. Data minimization
FuriFuri may also collect and process any data voluntarily provided by its clients.
FuriFuri advises its clients to provide only the personal data strictly necessary for the execution of contractual obligations.
FuriFuri commits to retain and process only the data strictly necessary for its professional activities and will promptly delete any received data that is not useful for its activities.
10.4. Respect for rights
FuriFuri's clients have the following rights regarding their personal data, which they can exercise by writing to FuriFuri's postal address or by filling out the online contact form.
10.4.1. Right to information, access, and communication of data
FuriFuri's clients have the possibility to access their personal data.
Due to the obligation of security and confidentiality in the processing of personal data entrusted to FuriFuri, requests will only be processed if clients provide proof of their identity, such as by submitting a scanned copy of their valid identification document (in case of requests made through the dedicated electronic form) or a signed photocopy of their valid identification document (in case of written requests), both accompanied by the statement "I certify under penalty of perjury that this copy of the identification document conforms to the original. Done at... on..." followed by their signature.
To assist clients in their process, they will find here a model letter elaborated by the CNIL.
10.4.2. Right of rectification, deletion, and right to be forgotten
FuriFuri's clients have the possibility to request the rectification, updating, locking, or erasure of their personal data, which may be inaccurate, incorrect, incomplete, or outdated.
FuriFuri's clients can also establish general and specific directives regarding the fate of personal data after their death. If applicable, heirs of a deceased person can request that the death of their loved one be taken into consideration and/or that necessary updates be made.
To assist clients in their process, they will find here a model letter elaborated by the CNIL.
10.4.3. Right to object to data processing
FuriFuri's clients have the possibility to object to the processing of their personal data.
To assist clients in their process, they will find here a model letter elaborated by the CNIL.
10.4.4. Right to data portability
FuriFuri's clients have the right to receive the personal data they have provided to FuriFuri in a transferable, open, and readable format.
10.4.5. Right to limitation of processing
FuriFuri's clients have the right to request that the processing of their personal data by FuriFuri be limited. Therefore, their data can only be stored and no longer used by FuriFuri.
10.4.6. Response time
FuriFuri is committed to responding to any request for access, rectification, objection, or any other additional information within a reasonable period not exceeding 1 month from the receipt of the request.
10.4.7. Complaint to the competent authority
If FuriFuri's clients believe that FuriFuri is not fulfilling its obligations regarding their personal data, they can file a complaint or request with the competent authority. In France, the competent authority is the CNIL, to which they can submit a request here.
10.5. Transfer of collected data
10.5.1. Transfer to partners
FuriFuri uses authorized service providers to facilitate the collection and processing of its clients' data. These providers may be located outside the European Union.
FuriFuri has ensured in advance that its providers implement adequate safeguards and comply with strict conditions regarding confidentiality, use, and data protection, for example, through the US Privacy Shield.
FuriFuri employs the following subcontractors:
- Facebook: https://fr-fr.facebook.com/policy.php
- LinkedIn: https://fr.linkedin.com/legal/privacy-privacy
- Facebook Ads Manager: https://www.facebook.com/privacy/policy
- Instagram: https://privacycenter.instagram.com/policy
- Google Adwords: https://policies.google.com/privacy?hl=en
- Google Analytics: https://policies.google.com/privacy?hl=en
- YouTube: https://www.youtube.com/t/terms_dataprocessing
- GoDaddy: https://www.godaddy.com/en/privacy/policy
10.5.2. Transfer on requisition or court decision
Clients also consent to FuriFuri disclosing the collected data to any person, upon requisition by a state authority or court decision.