1. Identity of the Data Controller
All processing of personal data is carried out under the responsibility of the company IONISOS, SASU with a capital of €10,525,856, registered with the Lyon Trade and Companies Register under number 393 373 865 whose registered office is located at 13 CHEMIN DU PONTET 69380 CIVRIEUX D’AZERGUES
(Henceforth “IONISOS”).
Any transfer of data to a partner is carried out with your consent and the processing of data by that partner is subject to that partner’s privacy policy.
2. Types of Data Collected
The mandatory or optional nature of the data is specified at the time of collection. If this information is incomplete, outdated, or inaccurate, the creation of an account on the Site may be impossible.
IONISOS may collect and process all or part of the following data:
| CATEGORY OF PERSONAL DATA PROCESSING | DESCRIPTION OF THE CATEGORY |
|---|---|
| Data processed in connection with the use of the Client’s Personal Account on the Site | These are the personal data collected from Clients during the creation and management of a Client account on the Site and/or the placing of an order. They may include in particular:
Any other information that the Client wishes to communicate to us |
| Contact Form | These are the personal data provided to contact us via the Site. They include title, first name, last name, phone number, email, subject, and content of the message. |
| Recruitment Form | These are the personal data provided to apply via the Site. They include first name, last name, phone number, email, desired site, level of education, type of contract desired, desired service, CV, cover letter. |
| Connection and Browsing Data | This connection and browsing data includes the data mentioned in the Cookie Management Charter. |
3. Purpose and Legal Basis of Processing
Your personal data is collected for the following purposes:
| LEGAL BASIS | PURPOSE |
|---|---|
| Use of your data based on your consent | Based on your consent, IONISOS uses your data to:
|
| Use of your data based on our legitimate interest | Based on our legitimate interest, particularly to ensure a better quality of our services, IONISOS uses your data to:
|
| Use of your data to comply with our legal obligations | IONISOS may process your data for evidential purposes and to comply with its legal obligations. |
4. Retention Period of Personal Information
The retention period of personal data varies depending on the purpose of its collection:
- The data related to your use of the Site and the management of your contract and orders are retained for a period of 5 years after your request to unsubscribe from the Site, notably for evidential purposes, or after a period of inactivity of 3 years, after which the Client’s account may be deleted due to 3 years of inactivity,
- The data related to sending newsletters and information and commercial offers related to our services (email, phone) are retained until your request for unsubscription or deletion of your personal data, or after a maximum period of 3 years after the last contact from the data subject,
- The information necessary for compliance with legal obligations is retained for the legally required retention period.
- The cookies placed on your device will only retain your data for the time necessary to achieve their purpose (thus, session identification cookies are retained only for the duration of a session) and for a maximum of 13 months.
5. Recipients of Personal Data (people with access to the data)
We are committed to treating all your personal data confidentially.
The internal team of IONISOS may have access to your personal data but only in the performance of their duties and within the framework of the purposes provided for in this Policy.
We do not share your data with third parties, except in the limited cases below:
- IONISOS’s subcontractors may use the services of other independent companies or individuals who provide certain services on its behalf:
- Technical service providers,
- Providers of analytical solutions or audience measurement statistics
These providers may have access to the personal information necessary for the performance of their services but are not authorized to use it for other purposes.
- Transfer of businesses or activities. In the course of developing its activities, IONISOS may be led to sell all or part of its assets or to acquire other companies, businesses, subsidiaries, or business units. In such transactions, the personal data processed by the company generally form part of the transferred assets but remain subject to any pre-existing privacy policy, unless otherwise agreed by the persons concerned.
- Authorized administrative and judicial authorities. In order to comply with its legal obligations, IONISOS may transfer your personal data to authorized administrative and judicial authorities.
- With your consent. Unless IONISOS is required to comply with a legal obligation, IONISOS will inform you if its information is to be transmitted to a third party, it being specified that you have the option not to consent to such transmission.
6. Data Transfer Outside the EU
We retain your personal data within the European Union. However, some of our subcontractors may be located outside the European Union. In the event of data transfer in this context, we ensure that the processing is carried out in accordance with this privacy policy and that a sufficient level of protection is guaranteed in compliance with applicable regulations, either through contractual obligations or adequacy decisions.
7. Exclusion of Sensitive Data
IONISOS does not collect any sensitive data about you.
Sensitive data concern the processing of personal data that reveals racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, health data, or data concerning sexual life or sexual orientation.
If such data were provided to IONISOS, please contact us by email at the following address: dpo@ionisos.com so that they may be deleted.
8. Minors
The Site has not been designed to be used by minors (under 18 years of age). Under no circumstances do we authorize the use of our services by minors under 18 years of age. We do not knowingly collect personal data from minors. If a parent realizes that their child has provided us with personal information (or if a guardian becomes aware that the child they are responsible for has provided us with personal information), they must contact us by email at the following address: dpo@ionisos.com.
9. Your Rights Regarding Access to Your Personal Data
In accordance with Article 13 of Regulation (EU) 2016/679 of April 27, 2016, and Article 32 of Law 78-17 of January 6, 1978, you are informed that you have the following rights:
- Right of access
This is your right to obtain confirmation as to whether or not your data is being processed, and if so, to access that data. - Right of rectification
This is your right to obtain, without delay, the rectification of inaccurate data concerning you, and to complete incomplete data. - Right to deletion/erasure
This is your right to obtain, without delay, the erasure of your data, subject to our legal obligations of retention and our legitimate interest in retaining this data. - Right to limit processing
This is your right to obtain a limitation of the processing of your data in the cases provided for by applicable regulations. - Right to data portability
This is your right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format, and to transmit that data to another controller. - Right to withdraw consent
When processing is based on consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing based on consent before its withdrawal. - Right to file a complaint with the supervisory authority
You have the right to file a complaint with the Commission Nationale Informatique et Libertés (CNIL), which is the French supervisory authority for the protection of personal data.
These rights can be exercised by sending your request:
- By mail to the following address: IONISOS – DPO, 13 CHEMIN DU PONTET 69380 CIVRIEUX D’AZERGUES.
- By email to: dpo@ionisos.com
Conforming to Article 17 of Regulation (EU) 2016/679 of April 27, 2016, exercising these rights shall not deprive IONISOS of its right to retain data in order to comply with its legal obligations and for evidentiary purposes.
10. Your Rights Regarding Opposition to Commercial Proposals
10.1 – Commercial Proposals via Email or SMS:
On the forms you fill out, your consent is explicitly requested to receive offers from us and, where applicable, from our partners.
However, your express and prior consent is not required when you are already a customer of IONISOS and the purpose of our solicitation is to offer you products or services similar to those we are already providing to you.
In all cases, you always have the option to object to receiving these solicitations by taking the following actions:
- For email, by clicking on the unsubscribe link provided in each email, by accessing your online account, or by contacting us via email at the following address: dpo@ionisos.com
- For SMS, by sending a STOP SMS to the number indicated in the message or by contacting us via email at the following address: dpo@ionisos.com
10.2 – Commercial Proposals via Telephone:
If you do not wish to receive commercial proposals by telephone, you can object by:
- Contacting us via email at the following address: dpo@ionisos.com
- Registering on the telephone sales opposition list “Bloctel” at the following address: https://conso.bloctel.fr in accordance with Articles L223-1 and L223-2 of the Consumer Code.
11. Your Rights Regarding the Acceptance and Management of Cookies
We invite you to consult the Cookie Management Charter available here. This charter complements the present Privacy Policy.
12. Links to Other Websites or Third-Party Services
In the event that the Site links to third-party websites or services, we assume no responsibility for these websites and third-party services. We therefore invite you to consult their terms and their privacy policy.
13. Security of Personal Data
IONISOS has implemented physical and electronic security measures as well as backup procedures related to the collection, storage, and communication of your personal data, including:
- Securing access to our premises and IT platforms
- Raising awareness among our employees about confidentiality requirements when accessing your personal data
- Securing access, sharing, and transferring data
- High standards of data protection when selecting our subcontractors and, where applicable, our partners.
14. Modification of the Policy
This Policy may be modified, supplemented, or updated to comply with any legal, regulatory, jurisprudential, or technical developments. However, your personal data will always be processed in accordance with the Policy in effect at the time of collection, unless otherwise agreed by you or if a mandatory legal provision provides otherwise.