Privacy policy

Privacy Policy

Version 1 - 26.08.24

IMPACT PLUS is committed to respecting your privacy and protecting your personal data. The conditions for the collection, processing, and storage of your personal data from the website www.weareimpactplus.com (hereinafter referred to as "the Site"), as well as the conditions for exercising your rights, are detailed in this Privacy Policy.

We have aimed to present the information concerning data processing on the Site in a concise, transparent, and understandable format, allowing you to clearly understand how your data is managed. If you have any questions regarding this policy, we invite you to send an email to privacy@weareimpactplus.com.

1. What is the Purpose of This Privacy Policy?

IMPACT PLUS is responsible for the data processing conducted through the Site. The purpose of this Privacy Policy is to describe the data processing operations performed by IMPACT PLUS through the Site and to inform Users of their rights and how to exercise them.

Each data processing operation conducted has a legitimate, specific, and explicit purpose. We commit to collecting and using only personal data that is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed.

The terms used in this Privacy Policy have the meanings assigned to them by the General Data Protection Regulation 2016/679 (GDPR).

2. What Personal Data is Processed by the Site?

Through our Site, we process data from our clients, prospects, and candidates applying for job offers. In the context of personal data processing for the purposes outlined below, IMPACT PLUS collects and processes the following categories of data:

Identification data of the individuals concerned, such as your first and last name, and your email address.
Data related to your geographic location (country of residence).
Data related to your company (corporate name) and its activities.
Connection data.

The data is shared within IMPACT PLUS or with service providers, with individuals who need to know this information, including:

The IMPACT PLUS "sales" department.
The IMPACT PLUS "communication" and "website management" departments.
The IMPACT PLUS "human resources" department for candidate data.

3. For What Purposes Does IMPACT PLUS Process this Data?

The data processing operations conducted through the Site, particularly through the contact form, serve the following purposes and legal bases:

(table)

You can unsubscribe from commercial and marketing communications at any time by clicking on the unsubscribe link available in the transmission email or by submitting a request for the deletion of your data under the conditions defined in Article 5 below.

Purposes	Legal Basis	Retention Periods
Management of prospect databases (analysis, prospect understanding, and segmentation)	Legitimate interest	3 years from the submission of the form or the last contact
Management of client databases	Legitimate interest / Contract execution	For the duration of the contractual relationship with the client, extended by 5 years
Transmission of commercial communications	Consent	3 years from the submission of the form or the last contact
Transmission of marketing communications	Consent	3 years from the submission of the form or the last contact
Management of newsletter subscriptions	Consent	3 years from the submission of the form or the last contact
Management of job applications (including spontaneous applications) and creation of a CV database	Legitimate interest	2 years from the transmission of the candidate's data (unless a specific request for deletion is made)
Website management and production of audience and usage statistics	Legitimate interest	See the Cookies Policy

4. Are Data Processed, Shared, and/or Transferred Outside the European Economic Area?

We subcontract certain processing activities to the following companies:

Webflow, the Site's hosting provider, whose servers are located in the United States.

Amazon Web Services EMEA SARL, the host of our application servers, with servers located in the European Union.

HubSpot, the provider of our customer relationship management tool, whose servers are located in Ireland and Germany.

Microsoft Ireland Operations LTD, provider of Clarity, a free-user behaviour analytics tool that helps to understand how users are interacting with our website through session replays and heatmaps, with servers located in Ireland.

Depending on the purposes for which your data was collected, and only, when necessary, some of your data may be shared with partners, including distributors of our products and services located in specific geographic areas. We only provide them with the information they need to perform their services and require them not to use your personal data for other purposes.

The data we collect from you may be transferred to, accessed from, and stored in a country outside the European Economic Area (EEA). It may also be shared with service providers located outside the EEA. Such transfers are made only to providers that meet appropriate legal safeguards. These safeguards may include adequacy decisions and standard contractual clauses from the European Commission, which require the provider or partner to comply with all necessary measures to ensure data security and confidentiality.

5. What Are Your Rights Regarding Your Data?

You have the following rights regarding your personal data:

Right of Access: You can obtain information about the processing of your personal data and a copy of that data.

Right to Rectify Your Data: If you believe that your personal data is inaccurate, incomplete, or outdated, you can request that it be modified accordingly.

Right to Erasure of Your Data: You can request the deletion of your personal data within the limits allowed by law.

Right to Restrict Processing: You can request the limitation of the processing of your personal data in cases provided by legislation and regulation.

Right to Define Guidelines for Your Data After Your Death: You have the option to set specific guidelines regarding the retention, deletion, and communication of your personal data after your death.

Right to Data Portability: When applicable, you have the right to have the personal data you provided to us returned to you or, where technically possible, transferred to a third party.

Right to Object: You can object at any time, for reasons related to your particular situation, to the processing of your personal data where the legal basis is legitimate interest.

Right to Withdraw Your Consent: If you have given your consent to the processing of your personal data, you have the right to withdraw your consent at any time. We will then cease processing your personal data without affecting previous operations for which you had given consent.

Right to a Remedy: If necessary, and if a potential dispute is not resolved amicably, you have the right to contact the competent data protection authority to file a complaint (in France, the CNIL - 3 place de Fontenoy 75007 Paris, France).

6. Is My Data Secure?

We place a high priority on the security of personal data. IMPACT PLUS has implemented technical and organizational measures appropriate to the sensitivity of personal data to ensure the integrity and confidentiality of data and to protect it against any malicious intrusion, loss, alteration, or disclosure to unauthorized third parties. However, the security and confidentiality of personal data also depend on each individual's best practices, and all concerned individuals are encouraged to remain vigilant about this issue.

7. How to Exercise Your Rights Regarding Your Data?

For any clarifications on this privacy policy and to exercise the rights listed above, we invite you to send us a request via email to privacy@weareimpactplus.com. We will make every effort to respond as quickly as possible, and in any case, within the legal timeframe of one month. To help us process your request as quickly as possible, please specify your request clearly.

8. Cookies

Cookies are subject to a separate Cookies Policy.

9. Modifications to This Document

We encourage you to regularly review this policy on our website. It may be updated based on legal and regulatory developments, CNIL guidelines, and the evolution of the Site.