Politique de confidentialité
INNOV8 GROUP (“INNOV8 GROUP”, “our”, “we”, and “our”) and our partners respect your privacy.
Therefore, we have drafted this Privacy Policy (hereinafter referred to as “this Policy”) to describe how we collect, use, disclose, protect, store, and transfer the personal data of users of this website.
Please take a moment to read and understand our privacy policy, and feel free to contact us with any questions.
Personal data means any electronic or other information which, alone or in conjunction with other information, such as a name, identification number, location data, an online identifier, or one or more elements specific to its physical, physiological, genetic, psychic, economic, cultural, or social identity, directly or indirectly identifies or allows the identification of a natural person.
This Policy explains how INNOV8 GROUP processes your personal data but does not cover all possible scenarios for data processing. In cases of processing not covered by this Policy, all necessary information will be provided to you during the specific processing activity.
The personal data processing described in this Policy is carried out by INNOV8 GROUP SAS, with a share capital of €20,854,665.90, registered with the Nanterre Trade and Companies Register under number B 810 519 892 and having its registered office at 25 QUAI AULAGNIER 92600 ASNIERES-SUR-SEINE, which acts as the data controller.
INNOV8 GROUP collects and processes your personal data in accordance with the provisions of the General Data Protection Regulation (EU) No. 679/2016 and Law No. 78-17 of January 6, 1978, relating to data processing, files, and freedoms, as amended by Law No. 2018-493 of June 20, 2018, relating to the protection of personal data.
This Policy describes:
I. How INNOV8 GROUP uses your personal data
INNOV8 GROUP may use your personal data for the following purposes:
- Creating your customer account on this website
- Managing product orders
- Publishing and managing reviews left on products ordered on this website
- Sending you our newsletter after your registration
- Responding to your contact request made through our website
Most of the processing listed above is necessary for the execution of the contract with INNOV8 GROUP when you use our website to order products available for sale on the site.
However, the processing of your personal data for sending our newsletter is based solely on your consent to receive our newsletter, which you can withdraw at any time. If you do not consent to the sending of the newsletter, please note that this will not prevent you from creating your customer account and placing orders on our website.
II. How INNOV8 GROUP shares your personal data
Within INNOV8 GROUP, and with regard to each processing purpose, your personal data is collected, processed, and stored by authorized INNOV8 GROUP personnel, only within their respective areas of competence, including the customer service, marketing, and IT departments.
We do not share personal data with other companies, organizations, and individuals, unless one of the following circumstances applies:
- Sharing with prior consent: After obtaining your consent, INNOV8 GROUP will share the information you have authorized with the specific third parties or categories of third parties indicated at the time of consent collection.
- Sharing with partner companies: Some products and/or services are provided directly by our partners. INNOV8 GROUP may also share your information with them; they may use your information to provide you with the products and/or services you request.
- Sharing with service providers: INNOV8 GROUP may also disclose your information to companies that provide services for us or on our behalf. Examples of these service providers include companies offering IT services such as our host or our email provider, product delivery services, or marketing activities on our behalf. These service providers may use your information solely to provide services on behalf of INNOV8 GROUP.
- Legal obligations and regulatory compliance: INNOV8 GROUP may share your information as required by law and regulation to resolve legal disputes or as mandated by judicial or administrative authorities in accordance with the law.
INNOV8 GROUP ensures the legality of any personal data sharing through data processing agreements with the companies with which your personal data is shared, obligating them to comply with this Policy and to take appropriate security and confidentiality measures when processing personal data.
III. How INNOV8 GROUP protects your personal data
INNOV8 GROUP places great importance on the security of your personal data and has adopted industry-standard practices to protect your personal data and prevent unauthorized access, disclosure, use, modification, damage, or loss of such information. To this end, INNOV8 GROUP adopts the following measures:
- We take reasonable and feasible measures to ensure that the personal data collected is minimal and relevant to the purposes for which it is processed.
- We retain your personal data only for the duration strictly necessary for the purposes of the processing unless the retention of your data is required or permitted by law. For example, we retain data related to the execution of your orders for the duration required by law for record-keeping, namely a maximum of 10 years from the relevant financial year.
- We use a range of technologies, such as encryption technologies, to ensure the confidentiality of transmitted data. We implement reliable protection mechanisms to protect data and data storage servers against attacks.
- We deploy access control mechanisms to ensure that only authorized personnel can access your personal data. Furthermore, we control the number of authorized personnel and implement hierarchical authorization management based on service requirements and personnel levels.
- We rigorously select our business partners and service providers and integrate personal data protection requirements into commercial contracts, audits, and evaluation activities.
INNOV8 GROUP is committed to protecting your personal data. However, no security measure is perfect, and no product, service, website, data transmission, computer system, or network connection is completely secure.
In case of a personal data breach, INNOV8 GROUP will comply with applicable legal and regulatory requirements, including notifying the security incident and its possible consequences, the measures INNOV8 GROUP has taken or will take to prevent, mitigate, and correct these incidents in the future. Notification may take the form of an email, text message, push notification, etc. If it is difficult to notify the affected individuals directly, we will take appropriate and effective measures to issue a public online communication.
In addition, we will also comply with our obligation to notify data breaches to the competent supervisory authorities.
IV. International transfers of your personal data
When products available for sale on the website are delivered by resources located in countries outside the European Union, we will transfer your personal data to these countries. It may also happen that service providers access your data on our behalf to provide us with a specific service and are located in countries outside the European Union.
When such transfers occur, we ensure that these transfers of personal data are framed in accordance with applicable regulations to ensure an adequate level of data protection, either by a European Commission adequacy decision or by legal instruments such as data transfer contracts incorporating the European Commission’s Standard Contractual Clauses.
For any request regarding the recipients and transfers of data we make outside the European Union, please contact us at the addresses indicated in the “How to contact us” section below.
V. How you can manage your rights regarding your personal data
You have the right to access, rectify, erase, restrict, object to the processing of your personal data, as well as the right to define directives regarding the fate of your data after your death and the right to data portability.
You can contact us at any time at the addresses indicated in the “How to contact us” section below to exercise your data protection rights under applicable regulations. You must indicate which right you wish to exercise and provide all necessary details for us to respond to your request.
These rights are exercised under the conditions set out by applicable regulations.
- The right of access means you can ask us at any time whether we process personal data about you and, if so, to indicate which personal data is concerned and the characteristics of the processing carried out.
- The right of rectification means you can request the correction of your personal data when it is inaccurate. You can also request that your personal data, when incomplete, be completed as long as it is relevant to the purpose of the processing in question.
- The right to erasure means you can request to erase your personal data, notably when: (i) their retention is no longer necessary for the purposes for which they were collected; (ii) your personal data is processed based on your consent, you wish to withdraw this consent, and there is no other legal basis justifying the processing; (iii) you have objected to the processing of your personal data and wish them to be erased; (iv) your personal data has been unlawfully processed; (v) your personal data must be erased to comply with a legal obligation stipulated either by European Union law or French law.
- The right to restriction means you can ask us to restrict the processing of your personal data (i) when you contest the accuracy of your personal data for a period allowing us to verify their accuracy; (ii) when following an established non-compliant processing, you prefer the restriction of the processing to the complete erasure of your personal data; (iii) when we no longer need your personal data for processing purposes, but they are still necessary for you to establish, exercise, or defend legal claims; (iv) when you have objected to the processing of your personal data and you wish to restrict the processing while verifying whether the legitimate reason you invoke is justified. The restriction of processing means that the processing of your personal data will then only involve storing your corresponding personal data. We will then no longer carry out any other operation on the personal data concerned.
- The right to object means you can object to the processing of your personal data when this processing is based on the pursuit of the legitimate interest of INNOV8 GROUP. The right to object is exercised subject to providing a legitimate reason related to your particular situation. We will then cease the processing concerned unless there are legitimate and compelling reasons justifying its continuation in compliance with applicable regulations.
- The right to define directives regarding the fate of your data after your death allows you to make known your instructions regarding the retention, erasure, and communication of your personal data after your death.
- The right to data portability means you can request, under the conditions set out by applicable regulations, to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to you, or to ask us to transmit it directly to a third party of your choice when legally and technically possible.
- When we process your personal data based on your consent, you can finally withdraw your consent at any time by contacting us at the addresses indicated in the “How to contact us” section or by clicking on the unsubscribe link in each of our communications.
However, the withdrawal of your consent does not affect the validity of the processing carried out before this withdrawal.
VI. Updates to this Policy
INNOV8 GROUP reserves the right to modify or update this Policy at any time, in whole or in part, due to changes in applicable personal data protection regulations or data processing activities.
Any substantial modification to the Policy will be notified to you by email when you have provided us with a valid email address and will be published on the website. We recommend that you regularly review this Policy to have a full understanding of our commitments regarding the security and protection of your personal data.
VII. How to contact us
If you have any questions, comments, or suggestions, please contact us by visiting the “Contact Us” page or by submitting them to
rgpd@ascendeo.com.
Or by postal mail at:
INNOV8 GROUP
25 QUAI AULAGNIER
92600 ASNIERES-SUR-SEINE
If you are not satisfied with the response provided by INNOV8 GROUP to a request to exercise rights under Article V above or wish to report a violation of applicable data protection regulations, you have the right to lodge a complaint with the CNIL by mail (CNIL – 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07) or on its website (www.cnil.fr), or with the data protection authority of the country in which you reside or usually work.
© Copyright 2023 INNOV8 Group