CGU

Customer data requested when registering and subscribing to the site’s services is mandatory; otherwise, registration and subscription cannot be completed. This data is processed by NSW, the data controller, and is used to manage commercial relations (quotations, invoicing, complaints, customer account management, satisfaction surveys, product/service reviews, etc.). Subject to obtaining the prior and express consent of the Customer, or the exercise of the right to object in the case of professional Customers, this data may also be used by NSW for commercial prospecting purposes. The legal basis for the processing of customer data is the performance of the contract and, in the case of commercial prospecting, the customer’s prior consent or NSW’s legitimate interest in the case of business customers. The categories of data processed are: data relating to the Customer’s identity as a customer, data relating to the Customer’s professional life in the case of a professional customer, data relating to means of payment and the transaction, data necessary for commercial offers and the supply of services, information enabling the refusal to be canvassed to be taken into account, data relating to the monitoring of the commercial relationship. The following may be recipients of the Customer’s personal data: NSW’s authorized personnel, departments in charge of control (statutory auditor, departments in charge of internal control procedures, etc.) and the authorized personnel of service providers that NSW may call upon for the performance of the contract, and with whom contractual clauses compliant with the RGPD have been signed. Your data may be transferred outside the European Union via our subcontractors in particular. We take particular care to ensure that the latter process your data in strict compliance with current regulations on the protection of personal data. In the case of our subcontractors located in a country that is not subject to an adequacy decision by the European Commission, recognizing a level of protection equivalent to that provided by the European Union, transfers are governed by the European Commission’s standard contractual clauses. NSW retains customer data for the duration of the contractual relationship. Customer data may also be kept by NSW for the management of commercial activities, including those relating to commercial prospecting, for a period of 3 years from the last contact the Customer had with NSW. After the contract has been fulfilled, the Customer’s data is kept in intermediate storage to meet accounting and tax obligations, and for evidential purposes in the event of litigation, in accordance with the applicable limitation period. In accordance with current regulations, customers may access their data or request that it be deleted. Customers also have the right to object to the processing of their personal data, the right to rectify it, the right to limit its processing, the right to have their data ported, and the right to define directives concerning the fate of their personal data after their death. With regard to the use of Customer data by NSW for commercial prospecting purposes, the Customer has the right to withdraw his consent at any time. When NSW contacts the 4 Customer, NSW undertakes to always offer the Customer a simple means of opposing the receipt of new solicitations. For more information about the collection and processing of personal data by NSW, the Customer may consult the Privacy Policy available here : Privacy Policy NSW may also act as a subcontractor for personal data processed by the Customer in the course of using the site’s services. Such processing carried out by NSW as a subcontractor is governed by the Data Protection Subcontracting Agreement, which constitutes an appendix to these General Terms and Conditions. Acceptance of these General Terms and Conditions therefore also constitutes acceptance of the said Subcontracting Agreement, which constitutes signature of the latter. To exercise his rights or for any questions concerning the processing of his data, the Customer may contact NSW’s Data Protection Officer (DPO): – by post: Société NSW, A l’attention du DPO, 11 B rue Christophe Colomb 75008 Paris All requests must specify the reason for the request, the company concerned (NSW) and the Customer’s file reference (for example, customer number). If, after contacting NSW, the Customer believes that his or her Data Protection rights have not been respected, the Customer may lodge a complaint online, directly on the CNIL website at CNIL or by post at : CNIL – 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07