Data protections

This policy aims to set out the obligations and resolutions of DIGGLERZ FACTORY with a view to processing your personal data securely and in compliance with applicable regulatory provisions, in particular Regulation (EU) 2016/679 known as the General Data Protection Regulation. or “GDPR”.

1. Responsibility of DIGGLERZ FACTORY

The company DIGGLERZ FACTORY is the data controller within the meaning of the GDPR, for the collection and processing of personal data carried out on the site accessible at the URL address: https://exano.fr/ hereinafter “the site »

“The site” ensures that the User collects and processes personal information while respecting privacy in accordance with Law No. 78-17 of January 6, 1978 relating to data processing, files and freedoms as well as as the new European legislation on the protection of personal data.

Your requests for information or exercise of rights can be sent to our data protection officer at the following address: dpo (arrobase) nodya-group (dot) com

2. Processing of your personal data

DIGGLERZ FACTORY collects and processes your data in particular in the following cases:

• When you contact us directly, for example via our website, for information about our products and services in which you have an interest or for any other questions.
• When you become a customer and use our products;
• When you respond to our marketing campaigns, for example: by filling out a response card or filling out the contact form on our website;
• When you apply for one of our job offers.

3. Legal basis for processing your data

We only process your data if a legal provision authorizes us to do so. We process your data in particular on the basis of the provisions of Art. 6 and Art. 9 of the GDPR, as well as on the basis of consent obtained in accordance with Art. 7 of the GDPR. The processing of your data is based, among other things, on the following legal provisions (non-exhaustive list):

Data that must be provided in a contractual or pre-contractual context allows us to establish a legally valid contract with you. Their non-supply runs the risk of it being impossible to enter into a valid contract with you.

4. Security measures

We use numerous security measures to protect and maintain the security, integrity and availability of your data. We nevertheless draw your attention to the fact that there are security risks inherent in the transmission of data via the Internet, in particular the risk of intrusion.

We, our subcontractors and business partners work to maintain the physical, electronic and procedural backup of your data in accordance with applicable requirements. We use, among other things, the following measures: Data encryption, securing connections, restricting access, setting up firewalls and anti-viruses.

All your information is stored on secure servers (or secure paper copies), either ours or those of our subcontractors or business partners, accessible and used subject to compliance with our security policies and standards (or equivalent standards of ours). subcontractors or business partners).

5. Conservation of your data

We keep your data for as long as necessary for the purposes for which you communicated it to us. Access to your information is limited to employees who have appropriate authorizations and who have a defined need to access this information for the purposes indicated above.

Your data may be kept for a period exceeding that referred to above, in particular to enable the fulfillment of a legal obligation or the representation of our rights in court.

6. Data transfers

We strictly refrain from disclosing, assigning, transferring, or communicating all or part of your information to third parties, with the exception of:

• Subsidiaries of the NODYA group: Aydon, and Digglerz Factory.
• Service providers, commercial partners strictly necessary for the provision of products and services on our behalf:
  - Microsoft for messaging
  - OVH for hosting our websites
• Third parties to whom we are required to provide information for legal or regulatory purposes: police and judicial authorities in particular.

DIGGLERZ FACTORY does not transfer data outside the European Union. If any of these third parties are located outside the European Economic Area, we will ensure that they agree to apply the same level of protection as that required in France. In the event that a transfer outside the EU should be carried out, we will ensure that appropriate legal guarantees are implemented depending on the particular situation of the place of receipt of the data.

7. Your rights under the GDPR

As a data subject, you have the following rights:

• The right of access to your data
• The right to rectify your data
• The right to erasure of your data
• The right to limit the processing of your data
• Le droit à la portabilité de vos données
• The right to portability of your data
• The right to withdraw your consent for processing taking it as a legal basis
• The right to organize the fate of one's data after death

These rights can be exercised by sending a request to our data protection officer, or by email to the following address:

dpo (arrobase) nodya-group (dot) com

Or by post by sending a letter to the following address:

DIGGLERZ FACTORY, 5 RUE DE CASTIGLIONE 75001 PARIS

We always aim to respond to all requests within 30 days. This period may, however, be extended if necessary, for reasons linked to the specific law of the party concerned or the complexity of your request.

Before granting your request and in the event of reasonable doubt as to your identity, we may request the production of proof of identity allowing us to resolve this doubt.

In the event that it is not possible for us to grant your request, we will inform you of its rejection and the reasons for this rejection.

8. Supervisory authority

If you believe that we have not adequately responded to your complaints or concerns, you have the right to file a complaint with the CNIL:

www.cnil.fr

Or by mail:

CNIL, 3 Place de Fontenoy, TSA 80715, 75334 PARIS CEDEX 07