Principle 1: To convey the purpose behind data collection
Each website provides a clear and transparent definition of the purpose behind personal data collection. 2-30 Media is committed to collect, process or store personal data for specified, legitimate and relevant purposes:
- To provide access and distribute free samples
- To customize the content of our websites
- To send newsletters and notifications by email
- To allow sharing on social networks
- To share information with business partners
- To plan contests and advertising games
- To profile contacts to improve the user experience
Profiling is an automated process, driven by algorithms, of analyzing personal data. The purpose is to evaluate and predict users preferences, interests and behavior: this technique prevents us, for example,from sending emails to users we presume will not be interested anymore.
Principle 2: To solely collect essential information
We solely collect essential data. We strive to never collect more data than necessary, especially sensitive data. With consent from our users, we collect and process all or part of the following data:
- First name
- Last name
- Phone number
- Birth date
- Technical data related to connection (IP, browser, cookies)
- Technical data related to sent emails
- and more generally, data provided by the user when filling out forms
We do not collect these data systematically and they are immediately deleted in case they become unnecessary.
Principle 3: To limit data retention on time
Once the purpose of data collection is achieved, there is no longer need to keep them, so we delete data. As expected by the legislation, data is kept a maximum of 3 years, to be accounted from its collection or from the last contact activity. In practice, we decided to reduce this timeframe from 3 years to 18 months, in line with the principle of limiting the data retention. To keep this information, we just store a cryptogram of the email address (hash md5) and we delete all remaining personal data. Keeping an email cryptogram is necessary to avoid the subscription of a deleted user.
Principle 4: To respect and make as simple as possible the right to access personal data
Our users have the following basic rights regarding their data: the right to access, rectify data and take position against data use. This right is effective at the time of collection or at any time thereafter through an « unsubscribe » mechanism.
In addition, to exercise their right of access, rectification and deletion of data, our users can contact us by email at the following address: [email protected]. For confidentiality and protection of personal data reasons, a signed copy of the identity card must be joined to the request. 2-30 Media will answer the request within a maximum of 1 month.
In application to the regulation 2016/679 of April 27th 2016, from May 25th 2018 our users will also be able to exercise their right to limit data treatment, to delete data, to allow data portability and not to be profiled.
Regarding the right to oppose the use of data, unsubscription is possible through different mechanisms, and we are committed to make it as simple as possible: each email we send is provided with an unsubscribe link, our websites offer an unsubscribe page, and it is always possible to contact 2-30 Media and ask for data deletion.
Principe 5: To keep the data safe
We take all the necessary measures to ensure the security and confidentiality of collected data, in order to avoid misuse, unauthorized access, disclosure. Beyond specific measures, it is a philosophy that is spread across all employees to ensure that every decision is made taking into account security issues. All employees of 2-30 Media are made aware of the protection of personal data through various trainings.
Your data may be transmitted to some of our partners and supplier. In accordance with national and european laws and regulations regarding internet privacy, 2-30 Media has ensured that all our suppliers and partners respect the security and confidentiality of this data. Our partners and providers are:
- Business partners and in particular marketing and advertising agencies
- Email services providers
- Data storage providers
- Profiling services providers
Information about Google Analytics
Our websites use Google Analytics, a web analytics service provided by Google Inc. (« Google »). Google Analytics uses so-called « cookies », viz. text files that are stored on the computer of our users and that allow an analysis of the use of the website. The information generated by the cookie regarding the use of the website (including your IP address) is transmitted and stored on servers by Google in the United States. Google will use this information to evaluate the use of the website, to gather reports on website activity for website operators, and to provide other services related to website activity and internet usage. Google may also transfer information to third parties when required by law or as far as third parties process this data on behalf of Google. Google will in any case not connect the IP address of our users with other data from Google. Our users can prevent the set-up of cookies by setting their browser software accordingly; however, we point out that in this case not all functions of our websites may be fully usable. By using our websites, our users agree to the processing of data about them by Google in the manner described above and for the purpose stated above.
Information about cookies
On our websites we use so-called « session cookies » to make the use of our websites easier. These are small text files which are stored on your hard disk only for the duration of user’s visit on our website and are deleted when the browser is closed, depending on the setting of the user’s browser program. These cookies do not retrieve information stored on user’s hard drive and do not affect its computer or files. Most browsers are set to automatically accept cookies. However, you can disable the storage of cookies or set your browser to alert you to the sending of cookies.
A DPO (delegate for data protection) was appointed under the GDPR (regulation 2016/679 of 27 April 2016). For any question related to personal data, you can write to: [email protected]
Updated on April 16th, 2020.