Aptilink attaches particular importance to the protection of privacy and of personal data, and to compliance with the legal provisions governing them. The European regulation on the protection of personal data holds that personal data must be processed lawfully, fairly and transparently. The purpose of this privacy policy (hereinafter the “Policy”) is therefore to give you simple, clear information about the processing of personal data concerning you, in the course of your browsing and of the operations carried out on our website.

Data controller

In connection with your activity on the site https://www.aptilink.com, we collect and use personal data relating to you as a natural person (hereinafter the “data subject”). For all processing where Aptilink determines the means and purposes of that processing, APTILINK SAS, located at 55 Avenue Marceau, 75116 Paris, acts as data controller within the meaning of the regulations on personal data, and in particular of EU Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

What data is collected, and how?

By using our website you pass on a certain amount of information about yourself, some of which is capable of identifying you (“personal data”). This is the case when you browse our site or when you complete online forms. Every form on the site limits the collection of personal data to what is strictly necessary and states the purpose or purposes for which the data is gathered, along with its recipients. Data essential to handling your request is marked “mandatory”. If you do not complete these fields, APTILINK will not be able to answer your request. The nature and quality of the personal data collected about you vary according to the relationship you enter into with APTILINK, the main ones being: – Identification data: this covers any information that would allow us to identify you, such as your surname, first name and telephone number. We may also collect your email address. – Connection data: cookies (such as Google Analytics), connection logs.

Why do we collect your personal data, and how?

This policy covers the processing carried out in connection with: • the management of APTILINK’s websites; • the management of social media accounts; • requests sent through the online forms on this site; • the recruitment of APTILINK staff; • the management of APTILINK’s clients, suppliers and partners. This processing rests on the following legal bases: To meet our legal obligations In certain cases we need to collect information about you in order to meet our own legal obligations. This concerns the processing relating to the handling of requests to exercise data subject rights. For our legitimate interest No processing rests on this legal basis.

Consent

The processing of your personal data may rest on the consent you give us — for example so that we can contact you following a request for information about APTILINK’s expertise.

We do not share your personal data

We do not share your personal data with other companies for marketing purposes. Each section devoted to a given processing activity sets out the internal recipients who may access and process the data concerned. The data may occasionally be passed to technical service providers chosen for their expertise and reliability, who act on our behalf and on our instructions (IT subcontractors, the host of our servers, and so on). We authorise these providers to use your personal data only in so far as it is necessary to provide services on our behalf or to meet legal requirements, and we take care to ensure that your personal data is protected at all times. We do not sell your data.

Transfers to third countries

APTILINK endeavours to keep personal data within the European Union. It is nonetheless possible that data we gather when you use our platform, or in the course of our services, may be transferred to other countries — for instance if some of our providers are located outside the European Union. Where such a transfer takes place, we guarantee that it is made: – either to a country offering an adequate level of protection, that is, a level equivalent to what the European regulations require; – or under standard contractual clauses.

Data retention

We keep your personal data only for as long as is necessary to fulfil the purpose for which we hold it, in order to meet your needs or to comply with our legal obligations. Retention periods vary according to several factors, such as: – the needs of APTILINK’s business; – contractual requirements; – legal obligations; – the recommendations of the supervisory authorities.

The security of your data

APTILINK undertakes to protect the personal data we collect, or that we process, against loss, destruction, alteration, and unauthorised access or disclosure. We therefore put in place all appropriate technical and organisational measures, according to the nature of the data and the risks its processing entails. These measures are intended to preserve the security and confidentiality of your personal data. They may include practices such as limiting access to personal data to authorised people, by virtue of their role. In addition, our practices and policies and/or our physical and logical security measures (secure access, authentication processes, backups, software and so on) are checked regularly and updated where necessary.

Your rights

In respect of the personal data we collect and process, you may exercise the following rights: – A right of access: you have the right to ask for access to the personal data we hold about you, and you may request a copy of it; – A right of rectification: you may ask for any inaccurate data concerning you to be corrected; – A right of erasure: you may ask for your personal data to be deleted in certain circumstances; – A right to portability: under certain conditions you may receive all the personal data concerning you that you have provided to us, in a structured format. You also have the right to require that we transmit it, where possible, to another controller; – A right to restriction of processing: you have the right to place restrictions on our processing if: you contest the accuracy of your data, until we have verified it; the processing is unlawful but you do not wish us to delete your data; we no longer need your personal data for the purposes of the processing but you need it in order to bring, exercise or defend legal claims; you object to the processing on grounds relating to your particular situation, pending verification of whether our legitimate and compelling grounds for continuing the processing override those interests. Where personal data is subject to restrictions of this kind, we will process your data only with your consent, or in order to bring, exercise or defend legal claims; – A right to object to processing carried out on the basis of legitimate interests; – A right to withdraw your consent at any time. You may exercise your rights with our Data Protection Officer at the following address: dpo@aptilink.com When you send us a request to exercise a right, you are asked to specify as clearly as possible the scope of the request, the type of right being exercised, the personal data processing concerned and any other useful detail, so as to make your request easier to examine. You will also be asked to prove your identity beforehand.

Contact us

You can write to us at the following postal address: APTILINK, 55 avenue Marceau, 75116 PARIS, France

Information about the management of cookies

Cookies are small text files placed on your computer when you visit APTILINK’s website. They are used to allow sites to work, and to work more efficiently. Cookies are placed and stored on your device or on any internet-enabled equipment. APTILINK’s site uses the following cookie: Google Analytics. We gather and keep only information relating to traffic on the site, through an analytics solution, and anonymously: the number of unique visitors, the number of pages viewed, the country the connection came from, the service that provided access (directly, through a search engine or through a social network), and the type of device used (computer, mobile or tablet). Cookie settings are managed directly through your web browser and, depending on the type of browser, allow you either to refuse cookies systematically while browsing or to authorise them case by case. To find out more about how to configure this, see the dedicated page on the CNIL website (https://www.cnil.fr/fr/cookies-les-outils-pour-les-maitriser).