GDPR – Personal data protection policy
This English version is provided for convenience. The French version is the only legally binding text; in case of discrepancy, the French version prevails.
In the course of its business, the NOWBRAINS Group attaches great importance to the protection of personal data and respect for privacy. This personal data protection policy explains how data is collected and used. All personal data processing carried out by the NOWBRAINS Group is performed in strict compliance with the legal obligations in force (General Data Protection Regulation (GDPR) and the amendment of 1 June 2019 to the French Data Protection Act (loi Informatique et Libertés) of 6 January 1978).
In the course of its business, the NOWBRAINS Group operates several websites, including:
Data controller
The controller of the personal data collected through the group's websites is: NOWDSI, 102 Avenue des Champs Elysées, 75008 Paris, France.
Purposes
The personal data collected through the websites is used for the following purposes:
- Handling contact and information requests
- Responding to user enquiries
- Managing the business relationship and opportunities
- Improving the services and the operation of the site
- Securing information systems
Legal bases
Processing is based on:
- The performance of pre-contractual measures (responding to requests via forms or email)
- Legitimate interest (managing the customer/prospect relationship, site security)
- Consent where required (non-essential cookies, marketing outreach where applicable)
Browsing data
When the site is visited, certain data is collected automatically:
- IP address
- Technical identifiers (URL, logs, date and time of connection)
- Information about the browser and operating system
This data is used to:
- Ensure the site operates correctly
- Produce anonymous visitor statistics
- Guarantee the security of the information system
Data provided voluntarily
Users may submit personal data via:
- Contact forms
- Information requests
- Email communications
This data may include:
- Last name, first name
- Account data: login details, password (encrypted)
- Email address
- Postcode and city
- Phone number
- Company and job title
- Content of messages
This data may be shared between the companies of the NOWBRAINS Group, for the purpose of consistent commercial management.
Online services – IOKOO and payment data
As part of certain online services offered by the NOWBRAINS Group, users may make payments.
The data collected (email, first name, account data, content of exchanges) is used to manage user accounts, provide the requested services and follow up on requests.
Payment data may be processed for paid services through a secure provider (Stripe), with no banking data stored by the NOWBRAINS Group.
This processing is based on the performance of the contract and, where required, on consent. Data may be transmitted to technical providers and may be transferred outside the European Union under safeguards compliant with the GDPR.
Data recipients
The data is accessible to:
- Authorised internal departments (marketing, sales)
- Technical providers involved in operating the sites
Data may be shared between the companies of the NOWBRAINS Group, for the purpose of consistent commercial management.
Retention periods
Data is retained:
- For the time needed to process the request
- Then for up to 3 years from the last contact, for commercial purposes
- Technical data is retained for limited periods consistent with its purpose
Data security
The data controller implements appropriate technical and organisational measures to protect personal data against:
- Unauthorised access
- Accidental loss or destruction
- Any non-compliant use
Cookies
The site uses cookies to ensure it operates correctly and to improve the user experience.
Types of cookies used
- Functional: functional cookies enable certain features such as sharing website content on social media platforms, collecting feedback and other third-party features.
- Analytics: analytics cookies are used to understand how visitors interact with the website. These cookies help provide information on the number of visitors, bounce rate, traffic source, etc.
- Performance: performance cookies are used to understand and analyse the website's key performance indicators, which helps deliver a better user experience to visitors.
- Advertising: advertising cookies are used to provide visitors with personalised ads based on previously visited pages and to analyse the effectiveness of the advertising campaign.
Managing cookies
Users can:
- Accept or refuse cookies via the dedicated banner
- Configure their browser to manage or delete cookies
Refusing certain cookies may affect the user experience.
Your rights
Under the GDPR, individuals have the following rights:
- Access
- Rectification
- Erasure
- Restriction
- Objection
- Portability
- Withdrawal of consent
Requests should be sent to: dpo@nowbrains.com. In some cases, proof of identity may be requested.
Individuals also have the right to lodge a complaint with a supervisory authority.