Last update : November 2018
I. PERSONNAL DATA
As a general rule, you may access HEXATRUST’s website without disclosing any private information about yourself. In any event, you are in no way under any obligation to disclose such information to HEXATRUST.
Nonetheless, by declining to do so, you may not be able to fully benefit from certain information or services that you request. Therefore, in certain cases, HEXATRUST may request that you provide your first name, last name, email address and telephone number, company name and designation (hereinafter referred to as “Personal Information”). By providing such information, you expressly consent to HEXATRUST processing it for the purposes set out in Point 2 below as well as for the purposes stated at the end of each form.
In line with the European General Data Protection Regulation (GDPR) adopted by the European Parliament on April 14th 2016, and the amended French Data Protection Code of January 6th 1978, HEXATRUST hereby informs you of the following:
- 1. Identity of the data controller
The data controller is the HEXATRUST association, headquartered at 250 bis, rue du Faubourg Saint-Honoré, 75008 PARIS – France.
Tel. : + 33 (0)1 70 36 37 66
- 2. Purposes of processing
HEXATRUST may potentially process your Personal Information for the following purposes:
(a) providing the information or services that you have requested (in particular: receiving newsletters, downloading documents, requesting commercial offers); and/or
(c) contacting you about various events relating to HEXATRUST.
HEXATRUST is the sole recipient of your Personal Information. Regardless of whether it was gathered individually or aggregated, your Personal Information will never be disclosed to any third parties other than the data processors acting under HEXATRUST’s instructions (further information about them is provided in Point 7 below). Neither HEXATRUST nor any of its data processors is involved in the sale of the personal data of visitors and Users of its Website.
HEXATRUST will retain your Personal Information only for the duration corresponding to the purpose for which such information was gathered, as indicated in Point 2 above, which will under no circumstances exceed 24 months.
- 5. Data Protection Rights
You hold the following rights with regard to your Personal Information, which you may assert by writing to us at the postal address indicated in Point 1 or by filling out our dedicated online form.
o Right to access and communicate data
This means that you are entitled to access your own Personal Information.
Nonetheless, as part of HEXATRUST’s duty to ensure the security and privacy of the personal data that it processes, you are hereby informed that your request will be processed on the condition that you furnish proof of your identity, by producing a scanned copy of a valid identification document (when requested to do so by our dedicated electronic form) or a signed photocopy of a valid identification document (for requests submitted in writing).
HEXATRUST reserves the right, whenever necessary, to deny improper requests if they are submitted repeatedly, systematically or in excessive quantities.
To assist you in submitting your request, especially if you wish to assert your right of access in writing to the postal address indicated in Point 1, you will find a letter template prepared by the CNIL.
o Right to request rectification
This right means that you are entitled, under the relevant legislation, to require the rectification, update, blocking or erasure of your personal data in the event it is inaccurate, incorrect, incomplete or obsolete.
You may also define general and particular directives on how your personal data is to be processed after your death. Unless otherwise specified, the heirs of a deceased person are entitled to require that data controllers take into account the deceased person’s death and/or carry out the necessary updates.
To assist you in submitting your request, especially if you wish to assert your right to request rectification, for yourself or on behalf of a deceased relative, in writing to the postal address indicated in Point 1, you will find a letter template prepared by the CNIL by clicking on link below (in French).
o Right to object
This right may only be asserted in either of the two following situations;
- When this right is asserted on the basis of legitimate reasons; or
- When the purpose of asserting this right is to prevent gathered data from being used for commercial prospecting purposes.
To assist you in submitting your request, especially if you wish to assert your right to object in writing to the postal address indicated in Point 1, you will find a letter template prepared by the CNIL by clicking on link below (in French).
HEXATRUST undertakes to respond to your request for access, rectification or objection or for any additional information within a reason time frame that shall not exceed 1 month from the date on which the request was received.
- 7. Authorized service providers and forwarding of data to another country within the European Union
HEXATRUST relies on a network of authorized service providers to facilitate the gathering and processing of data that you disclose to us. These service providers may be located outside the European Union and have been authorized to access data gathered by way of the various forms provided on the Website (except for the form allowing you to assert your data protection rights, which is processed only by HEXATRUST).
HEXATRUST has ensured in advance that its service providers have implemented adequate measures to meet stringent conditions with regard to the privacy, use and protection of data. In particular, special care has been taken to ensure that there is a valid legal basis for forwarding data to another country. For this purpose, one of our service providers is subject to our Binding Corporate Rules, which the CNIL approved in 2016 while the other service providers are bound not only by standard contractual clauses, but by the Privacy Shield framework as well.
- 8. Filing complaints to the relevant authority
If in your opinion, HEXATRUST does not meet its duties with regard to your Personal Information, you may file a complaint or submit a request with the relevant authority. In France, this authority is the CNIL, to which you may submit a request electronically by clicking on the following link: https://www.cnil.fr/fr/plaintes/internet.
- 1. General information regarding cookies on HEXATRUST’s website
As the publisher of this website, HEXATRUST may store cookies on your device’s hard disk (computer, tablet, mobile device, etc.) in order to guarantee a smooth and optimized browsing experience on our website.
Cookies are small text files that allow us to recognize your computer, tablet or mobile device with the aim of personalizing the services that we offer.
The information that these cookies gather does not allow us to identify you as an individual, and is used exclusively for our own needs to improve the interactivity and performance of our website, and to deliver content that is more relevant to you and your interests. HEXATRUST never communicates any of this information to third parties unless your prior consent has been obtained, or when the disclosure of such information is required by law, set out in a court order or order from any other legal or administrative authority authorized to access such information.
For a better understanding of what information is identified by cookies, the table below sets out the various types of cookies that may be used on HEXATRUST’s website, their names, purposes and retention duration.
- 2. Configuring your cookie preferences
1. You may at any time choose to accept or reject cookies.
Depending on the type of cookie used, your consent may be required in order for cookies to be stored and read on your device.
a. Cookies that do not require consent
In line with recommendations from the CNIL, your prior consent is not required for certain cookies when they are strictly necessary for the functionality of the website, or for the sole purpose of enabling or facilitating electronic communication. These include cookies for session identification, authentication, and load balancing sessions as well as interface customization cookies. Cookies issued and managed by HEXATRUSTare fully subject to the terms of this policy.
b. Cookies that require your prior consent
This requirement applies to “persistent” third-party cookies, which remain on your device until they are manually erased or expire.
Since such cookies are issued by third parties, they are subject to their own privacy policies, to which links are provided below. This category of cookie includes audience measurement cookies (in particular PIWIK), advertising cookies (which HEXATRUST does not use) as well as social network / sharing cookies (such as Facebook, YouTube, Twitter and LinkedIn).
Audience measurement cookies provide statistics on how visitors interact with the various elements of the website (such as content/visited pages). Such data is used to enhance the performance of HEXATRUST’s website. Four audience measurement tools are used on this website.
Social network / sharing cookies are generated and managed by the publisher of the social network concerned. Subject to your consent, such cookies allow you to easily share content published on HEXATRUST’s website using the button of the relevant social network application. Four types of social network sharing cookies are used on HEXATRUST’s website:
2. You can configure cookies using several tools
Most Internet browsers are set up to automatically accept cookies by default. Your browser allows you to modify these standard parameters so that cookies can be systematically rejected, or only some cookies are accepted or rejected based on the website issuing them.
WARNING: Do note that by preventing cookies from being saved on your device, this may affect your user experience as well as your access to certain services or features of the website. Where applicable, HEXATRUST disclaims all liability for any consequences relating to the deterioration of your browsing experience arising from your decision to reject, delete or block cookies required for the functionality of the website. Such consequences shall not amount to damages entitling you to any claim for compensation.
Your browser also allows you to delete existing cookies from your device, or inform you when new cookies are about to the stored on your device. These settings do not impact your browsing but you will not benefit from the advantages provided by the cookie.
Do note the various ways in which you can configure cookies stored on your device.
a. Configuring your Internet browser
Every Internet browser has its own cookie management settings. To find out how to change your cookie preferences, the links below will show you how to go to the relevant menu of the browser you use:
For further information on cookie management tools, please refer to the CNIL’s website: https://www.cnil.fr/fr/cookies-les-outils-pour-les-maitriser (in French).
e. Configuring the tarteaucitron tool
The deactivation of cookies can also be directly done throught the tarteaucitron tool available on HEXATRUST’s website. Interactive, it allows you to manage your cookies throught the available panel on the bottom left corner of the displayed page and list all the active cookies. To deactivate a cookie, simply click on the cross next to the available service. If all cookies are deactivated, the panel will disappear and reappear at the next page’s reloading.