PRIVACY POLICY - 2023

Since May 25, 2018, the RGDP rules (General Regulations on Data Protection) have strengthened the rights of citizens of the European Community and gives them control of the use of their personal data.

For us, your data remains confidential:

• We never see your data
• Your data is valuable: the exchanges are encrypted (https)
• Informed yes but not spammed: never more than 4 newsletters a year

Our complete commitments are available on our website you will explain:

• Why we need to safely collect and store some of your personal data ;
• In which cases it is necessary to share your data with authorized third parties and that the security of your data will be respected ;
• What are your rights in confidentiality ;
• How to manage your preferences and contact in case of claim.

If you want to better understand the challenges of this new regulation and how it can impact you, do not hesitate to consult the CNIL website.

We are at your disposal for any question and you still thank for your loyalty.

• 1 - Introduction
• 2 - Principles of Protection of Personal Data
• 3 - Specificities related to the printing of data
• 4 - What personal data collects us ?
• 5 - Data recipients
• 6 - What are your rights on your personal data ?
• 7 - Security of the personal data of the subject of data
• 8 - Sharing Personal Data Data Data
• 9 - Cookie Information
• 10 - Set your personal data
• 11 - Contact us

1 - Introduction

1.1 Personal data: Definition

As part of the use of our online store www.rapidoprinting.fr, we may have to ask you to provide us with personal data for the realization of your purchases, the generation of quotation or the creation of a "Customer account" to enjoy the benefits that we can offer as promotional codes or reductions on our rates, registration to our newsletter or our commercial couriers.

The expression "personal data" refers to all data that identifies an individual by automatic collection of multiple data. These include your name (s), first name (s), email address, telephone number (s), data on your orders, IP address, as well as any other information we could ask you and choose to communicate to us.

1.2 Objective of our Privacy Policy

Our Privacy Policy aims to bring to your knowledge the nature of the data collected and their use and the means at your disposal to modify them.

Rapidoprinting is committed to protecting the privacy of its customers. We are precise and transparent about the information we collect, as well as for the reuse of these data.

This policy defines the following topics:

• The general principles of personal data protection ;
• The personal data we collect and process ;
• The data collection processing objectives ;
• The difficulties related to the printing of data ;
• Your rights concerning your personal data ;
• How to maintain and protect your personal data ;
• How to comply with the data protection rules.

1.3 Minor data

In principle, our products and services are aimed at major people who can subscribe contractual obligations. The minor user must obtain the consent of his legal officer prior to the communication of personal data concerning him.

For registration on our sites and some of our line services (for the newsletter for example), the minimum of legal age is 16 years.

2 - Principles of Protection of Personal Data

The objective of collecting this data is to ensure the best possible quality of service. We can also use this data to send you information emails and / or prospecting.

The treatment is then based on our legitimate interest in informing you and developing our activity.

2.1 Optimization & Safety of Services

The data collected for the purpose of optimizing services and ensuring security for:

• Manage your access to certain services accessible on the site and their use (orders, quotes, reviews... )
• Perform user management operations for contracts, orders, deliveries, invoices, loyalty programs, follow-up of the relationship between users
• Manage our platform and perform internal technical operations in the troubleshooting, data, testing, testing, analysis, studies and surveys
• Improve and optimize our platform, to ensure that the display of our content is adapted to your device
• Help us preserving a secure environment on our platform
• Develop business statistics and attendance of our services
• Manage unpaid bills and disputes for the use of our products and services
• Respect our legal and regulatory obligations
• Collect your payments or send you the refunds collected for your account in collaboration with our payment provider
• We ensure compliance with applicable legislation, of our general conditions and, where appropriate, particular use and this privacy policy. In case of failures on your part, we may be required to suspend your account on our platform
• Keep you informed about changes to the platform or our services

​2.2 Commercial Promotion & Advertising

Data collected for commercial promotion and prospecting purposes:

• Address newsletters, solicitations and promotional messages (promotions, discount code... )
• Build a prospect and user file
• Organize competition games, lotteries and any promotional operations excluding the online gambling and chance games subject to the approval of the online game regulatory authority; Report advice from people on products, services or contents

In the event that you would not like it, we give you the ability to express your refusal on this subject when collecting your data, in accordance with the applicable legal provisions.

We are also likely to use your data to send you advertising messages that may interest you on social networking platforms or third party sites.

If you want more information about this, we invite you to read the terms and conditions of use of these platforms.

3 - Specificities related to the printing of data

Our activity leads us to process, print for our customers personal data or data can be printed on our equipment.

Many risks of loss or unintended access to personal data must be anticipated to limit the risks in particular when:

• Data transit by specialized computers in printing (RIP,)
• An email, data can be forgotten by the customer after being copied to the office,
• Access to a messaging may have remained active after an Internet connection,
• A USB key can be forgotten on a computer,
• Photocopies or your originals have remained on site.

The procedures take into account these particular risks to put in place the solutions most appropriate for each risk.

In addition, the files sent for print via our file sending form awards up to 1 year after receipt, beyond this period the files are automatically deleted.

4 - What personal data collects us ?

4.1 Types of data collected

The use of personal data is made mandatory so that we can send you our communications, products and services in order to manage your orders online, their deliveries, as well as the applicable guarantees.

The data collected automatically and anonymously via a set of computer means are temporarily recorded in clean files and automatically deleted after a certain period (see the topic "Cookie Management".)

The collection of these data has purely technical goals, such as connection configuration, system security, network management and website optimization.

The data we referred to are:

• a) the IP address of the applicant processor ;
• (b) the date and time of access ;
• (c) the volume of data communicated ;
• (d) the identification data of the browser and operating system software ;
• e) geographic data ;
• f) source or origin from which you have accessed our website
• g) Pages visited on the website and visualization time on the pages.

The collection of these data is necessary to monitor and prevent unauthorized use or activities that may be illegal (for example to maintain and ensure safety in the attack of computer systems.)

Your personal data will only be processed in the case of legality. The basis of legality will depend on the reasons why personal data has been collected and the need for use.

We present the basics of the possible legality for your personal data processing:

• Performing the contract: The treatment is necessary for the execution of a contract in which the person concerned is a party or for the pre-contrasting procedures required by the person concerned ;
• Legal obligation: Treatment is necessary to comply with a legal obligation to which the controller is subjected ;
• Defense of the vital interests of the person concerned: the treatment is necessary to protect the vital interests of the person concerned or from another individual ;
• Exercising functions of public interest or authority: treatment is necessary to fulfill functions of public interest or to exercise the official authority of the controller who is invested ;
• Legitimate business interests: treatment is necessary for the legitimate interests of the controllers or third parties, unless these interests are replaced by the interests of the person concerned or fundamental rights and freedoms requiring the protection of personal data, particularly when the person concerned is a child.
• Consent of the person concerned: the person concerned gave his consent to the processing of his personal data for one or more specific purposes ;

Only young people aged 16 or older are allowed to give their consent. In the case of minor children, the consent of parents or tutors of children is required.

No personal data will be kept longer than necessary to achieve the objective for which the data has been collected. To determine the appropriate conservation period, the criteria taken into account are: the quantity, nature and sensitivity of personal data and the objectives of the treatment.

Periods in which personal data is needed due to legal obligations or responding to complaints have been taken into account.

Personal data will be deleted safely after the defined conservation period. It will be taken into consideration, over time, actions to minimize the personal data being processed, and evaluated the possibility of their anonymisation so that they can not be associated with the person concerned or identifying it, in which case it is possible to use this information without being notified again.

4.2 Data transmitted directly

The data needed to create an account on rapidoprinting:

• Name and first name, e-mail and postal address (billing & delivery), password, phone number
• Files sent for the realization of products
• The original and quotes history made on our platform as well as the details of the accounting operations made
• All email messages, as well as the content of any phone calls

4.3 Data transmitted automatically

In each of your visits, we are likely to collect, in accordance with applicable legislation and with your agreement, information about the devices on which you use our services or networks from which you access our services, such as including your IP addresses, login data, Types and versions of Internet browsers used, types and versions of the plugins of your browser, systems and operating platforms, data concerning your navigation path on our platform, including your route on the different URL pages of our platform, the content you access or that you Consult.

4.4 Shelf life of your data

Your personal data will not be kept beyond the strictly necessary duration for the management of our business relationship, in this case twenty-six (26) months; However, the data to prove proof of a right or contract, to be kept under the respect of a legal obligation, will be expected by the law in force.

Regarding possible prospecting operations and in accordance with the legislation in force, your data may be kept for a period of three (3) years from the end of the trade relationship.

At the end of this period of three (3) years, we will be able to contact you only to know if you wish to continue to receive commercial solicitations.

Personal data on a prospect, non-client, may be kept for a period of three (3) years from the collection or the last contact from the prospect.

With regard to the management of commercial prospecting lists, the information to take into account your right of opposition are kept at least three (3) years from the exercise of the right of opposition.

With respect to hearing measurement statistics, the information stored in the user terminal or any other item used to identify users and allowing their traceability or attendance will not be kept beyond twenty-six (26) months.

4.5 Bank data

Financial transactions relating to the payment of purchases and fees are entrusted to a payment service provider who ensures the smooth and security, the company Stripe, (the "payment provider"). The provider collects and retains, the time of your registration on the platform and at the very least, until you realize your last transaction, on our behalf and for our account, your personal data relating to your credit card numbers.

We do not have access to these data. By using this payment platform, you give us your express consent for this conservation.

Visual Cryptogram or CVV2 data, registered on your credit card, are not stored.

On proof of your identity and whether the conditions for the exercise of these rights are fulfilled, you may exercise your right of access, right of rectification, right of erasure, right to the limitation of treatments, the right of opposition, right to lodge a claim with the CNIL and your right to Define the fate of your data after your death by contacting Ingenico (https://ingenico.fr/) or by contacting us directly (see Article 13 below.)

In any case, your data may be retained for twenty-six (26) months of the debit date for probation purposes in the event of possible dispute of the transaction in accordance with Article L.133-24 of the Monetary and Financial Code. This period may be extended to fifteen (15) months to take into account the possibility of using deferred flow payment cards.

With regard to other financial data (eg payments, repayments, etc.), they are kept for the duration required by applicable tax and accounting laws.

If your account has been suspended or blocked, we keep your data for a duration of up to ten (10) years from its suspension to avoid circumvention from you from the rules from our General conditions of sale.

4.6 Print Files

The files sent for printing are kept up to 1AN after receiving, beyond this period the files are automatically deleted.

5. Data recipients

5.1 Internal Recipients

Our different services can access some of your data asking for your online orders and problem-solving problems (online payment problem, order cancellation for a product not available ...), with the exception of bank data and passwords.

5.2 External Recipients

Some organizations are entitled by law to access your personal data: the bodies responsible for the control of our activity (the auditor in particular); Public bodies such as court auxiliaries, departmental officers.

We also work closely with third-party businesses that may have access to your personal data, including the subcontractors to which we use in particular with regard to technical services, payment services, transportation and delivery services, verification of identity, or the suppliers of analytical solutions and recovery companies and credit organizations.

We also work with Google's tools for the traffic analysis part (attendance statistics, page consulted, time spent on pages ...) and improvement of our website (referencing, page optimization, content quality posted on line ...). We have already anonymized the data transmitted to Google concerning your IP address (how ?To comply with the RGDP recommendation (more info here....)

We only share your data with the above mentioned third parties in the following cases:

• When we appeal to a service provider as part of the execution of any contract concluded between you and we or to provide or improve our services
• When we use research engines and analytical solutions providers to improve and optimize our platform (in this case Google Analytics)
• When we have the legal obligation to do so or to execute any contract with our users, such as the General Conditions of Sale and this Privacy Policy

6 - What are your rights on your personal data ?

According to the law, the person concerned has the right to request:

• Information on whether we hold personal data on people concerned and, if so, what data and why we hold them ;
• Access to personal data, receive a copy of the personal data we hold about you and verify that we treat them in a legitimate manner ;
• The rectification of the personal data we hold about you to complete, at any time the missing or inaccurate data we have on you ;
• The deletion of its personal data at any time when a storage period is reached or the data processing is no longer lawful. You will also have the right to ask ourselves to delete or erase your personal data in cases where you have exercised your right to oppose the treatment (see below;) ;
• The opposition to the processing of personal data in cases where we depend on a legitimate (or third party) interest and that there is a valid reason to oppose it. You also have the right to oppose you in cases where we process personal data for direct marketing purposes ;
• Opposition to automatic decision-making, including profiling ;
• The limitation of data processing by requiring the suspension of the processing of personal data ;
• The portability of personal data in a structured and electronic form for you or another entity ;
• To remove consent. In the limited circumstances in which you gave your consent to the collection, processing and transfer of your personal data for a particular reason, the person concerned has the right to withdraw his consent for that particular treatment at any time.

If you wish to exercise any of these rights, please use our contacts below.

You will not have to pay fees to access your personal information (or to exercise other rights). However, we can charge you reasonable fees if your access request is clearly excessive or unfounded. Alternatively, we can refuse to respond to demand in such circumstances.

We may need to ask you for specific information to help us confirm your identity and guarantee your right of access to information (or to exercise any other rights). This is another appropriate security measure to ensure that personal information is not disclosed to anyone who does not have the right to receive them.

You can oppose any type of treatments defined in this document for legitimate reasons, either at the time of collecting your data or by contacting us later (opposition right.)

You can request that the processing of your personal data is limited, only in the case provided by law (right to the limitation of treatment:)

• During the verification period that we implement, when you contempt the accuracy of your personal data, when the processing of these data is unlawful, and you want to limit this treatment rather than delete your data
• When we no longer need your personal data, but you want their conservation to exercise your rights
• During the verification period of legitimate reasons, when you opposed the processing of your personal data

You can ask that we give you all the personal data we have on your subject (right of access). You can then take advantage of it to check their accuracy and make them rectify (right to rectification) or erasing them (right to erasure) if necessary.

You can retrieve your personal data that you have provided to us in an open and machine-readable format to store them for your personal use or communicate them to another processing manager (right to portability.)

You have the right to define guidelines for the conservation, erasure and communication of your personal data after your death.

These guidelines may be general, that is, then they carry on all personal data that concerns you. In this case, they must be registered with a third-party digital confidence certified by the CNIL.

The guidelines can also be specific to the data we are dealing with. It should then be sent to us to the following coordinates:

• Email address: contact via the contact form.

By sending us such guidelines, you expressly give your consent for these guidelines to be retained, transmitted and executed in accordance with the terms and conditions provided for herein. You can designate in your guidelines a person responsible for their execution.

This one will have quality, when you are died, to take note of the said guidelines and ask us for their implementation.

In the absence of designation your heirs will have quality to read your guidelines on your death and ask for their implementation. You can modify or revoke your instructions at any time, writing to the coordinates above.

You have the right to lodge a complaint with the competent supervisory authority or to obtain compensation for the competent courts if you consider that we have not respected your rights.

Before answering your request, we are likely to verify your identity and ask you to provide us with more information. We will endeavor to follow up on your request within a reasonable time and, in any event, within the deadlines set by law. If you wish to exercise this right, contact us as described in Article 13 below.

7 - Security of the personal data of the subject of data

Rapidoprinting respects the best practices for the safety and protection of personal information and data and has adopted a program requiring policies and rules to ensure the confidentiality, integrity and availability of information that process and fall within its responsibility.

This program is known to all Rapidoprinting employees and partners. The general information security policy Rapidoprinting establishes a wide range of technical and organizational measures, structured in various fields of security, including:

• 1) logical security measures, such as the use of firewalls and intrusion detection systems, the existence of an access to information and logging policy ;
• 2) physical security measures, including strict control of access to physical facilities rapidoprinting by employees, partners and visitors, as well as very limited and permanently monitored access to rapid-printing technological infrastructures ;
• 3) Other measures such as the mask, encryption and anonymization of personal data, as well as a set of measures to respect the principle of privacy as soon as its design and default. Whenever Rapidoprinting uses third party companies or third parties, they will be responsible for complying with applicable legislation, the personal data they need to communicate and ensure that:
  • (i) the sharing of personal data complies with the legal regulations in force ;
  • (ii) the transmission is done safely
  • (iii) Subcontractors or third parties are contractually required to respect the obligations of confidentiality and secrecy and to ensure the safety of personal data. These data can not be used for other purposes, for its own benefit or that of a third party or to be correlated with other available data.

8 - Sharing Personal Data Data Data

The personal data of the person concerned can be shared with other Rapidoprinting Group companies as part of its commercial activity.

The personal data of the person concerned may also be shared with the following third parties for the purposes described in this Privacy Policy:

• (a) government authorities, police forces and regulators ;
• (b) service providers (e-mail, website, carriers, financial institutions / insurance, safety and surveillance;) ;
• c) analysis tools for website visits.

9 - Cookie Information

9.1 Why Cookies ?

To ensure the best possible experience, Rapidoprinting.fr works on the basis of using cookies like the majority of websites. Cookies are temporarily stored data aggregates by your Internet browser (Internet Explorer, Google Chrome, Mozilla Firefox, etc.) within the memory of your device (computer, tablet, smartphone, etc..)

You can via the options of your browser clear or block the installation of cookies. However we inform you that we can not ensure the proper functioning of our site if you blocked the use of cookies.

This type of files can not damage your equipment. Cookies allow, among other things, to store and extract information about using the website, which allows us to improve its quality and offer you a better use of use.

By browsing our website, the visitor accepts that we can put cookies on your device and access it when you visit the site in the future.

9.2 What are the cookies we use on our site ?

The site uses these types of cookies:

• Technical cookies : these cookies allow you to browse the site and use features such as basket.
• Web Analytics Cookies : the site uses Google Analytics cookies to quantify the number of visitors. These cookies are used to analyze and measure how users sailing on the Internet. This information allows this website to continuously improve its services and the experience of using it and buying products and services by users. For more information, you can visit the Google Analytics Privacy page: https://support.google.com/analytics/answer/6004245
• Customization cookies : When a surfer sails and / or buy online, the site will remember your preferences (for example, username, language or location). This makes the user experience in terms of simpler, simpler and more personal navigation.

9.3 Managing cookies ?

If you want to delete the cookies already on your computer, see the help and support section of your Internet browser to find out how to locate the file or directory that stores cookies.

You can find more information about cookies, how to prevent them and how to delete them on the CNIL website (https://www.cnil.fr/fr/site-web-cookies-et-autres-traceurs). Please note that if we delete our cookies or disable future cookies, you may not be able to access certain areas or features of our site.

For more information about cookies used on our site, see the topic "Cookie Management"

10 - Set your personal data

You have at any time the ability to modify your personal data recorded in our database that works our website.

Go through your personal space

You can also set the message receiving options from our sales department.

There are two options:

• 1 - Register for the newsletter : concerns regular shipments of our promotional messages (maximum 4 per year)
• 2 - Receive the special offers of our partners : concerns regular shipments of our promotional messages (maximum 4 per year)

Go through your personal information

11 - Contact us

The person concerned may contact Rapidoprinting for all matters relating to the processing of his data and the exercise of the rights conferred by the applicable legislation via the contact form of the site.

Rapidoprinting undertakes not to disclose or resell these data to third parties. We are committed to respecting the provisions of the " Data Protection Act No. 78-17 of 6 january 1978 ."

Moreover, according to art. 34 of the law "Informatique et Libertés" of 1^st august 2000, you have a right to access, modify, rectify and delete data from the personal information collected via the site www.rapidoprinting.fr.

To exercise this right, you can send us an email via our contact form.

The whole team of Rapidoprinting thanks you for the trust you give it...

30/05/2018