Legal information
Introduction
This Privacy Policy testifies to Finovox's commitment to its prospects, customers, subscribers or any other person interacting with it. It is available to everyone and updated regularly according to changes in the treatments made by Finovox. This Privacy Policy consists in clearly presenting to you the methodology for collecting your personal data, the reason and purpose for which we use it, and in indicating your data privacy rights as a user of Finovox.
Definitions
General Data Protection Regulation (hereinafter referred to as “RGPD”): European regulation governing the processing of personal data on the territory of the European Union.
Personal data: Personal data is data that identifies you directly (first name, last name, email address...) or indirectly (IP address, IBAN or user identifier...).
Persons concerned: Refers to any person whose personal data may be held by Finovox (hereinafter referred to as the “Company”), namely: Finovox customers, subscribers to our online services or communication, visitors to our website finovox.com.
Data Controller: The data controller is the legal person (company, municipality, etc.) or natural person who determines the purposes and means of a treatment, i.e. the objective and the way of carrying it out (Finovox SAS, 92 Boulevard de la République, 92 Boulevard de la République, 92 Boulevard de la République, 92210 Saint Cloud, France, RCS number 878 381 961).
Your personal data rights
As part of the relationship with Finovox SAS, all users have rights concerning their personal data. These are as follows:
- Give, modify or refuse your consent to the processing of your personal data, whether on our website when they are requested (cookies) or in the context of the use of the Finovox application.
- Request to delete any data we hold about you.
- Ask to rectify any data concerning you if it is inaccurate, or to add new data if necessary. Finovox will do its best to update your personal data with its partners as well.
- Request the opposition to the treatment, i.e. that we no longer use your data in the treatment for which we use it. Finovox may, for legal or legitimate reasons, refuse your request for opposition.
- Request a copy of the data we hold about you.
- Request additional information about personal data, their purposes, their collection, or any other action taken by Finovox SAS on your personal data.
- File a formal complaint concerning the use of your data, with the authority in charge of data protection in your country.
- Determine the fate of your data after your death.
For any request to exercise rights on your part, Finovox will endeavor to do so as soon as possible, and within 30 days after receiving the request.
You may be asked to provide additional information as part of this procedure for exercising rights, such as proof of your identity.
Our privacy team will be happy to answer all your questions and requests at dpo@finovox.com.
Exercising your rights
You can exercise your rights by contacting us:
- by post to the following address: Finovox, 92 Boulevard de la République, 92210 Saint Cloud, France.
- by email to the following address: dpo@finovox.com
If after contacting us, you consider that your rights are not respected, you can file a complaint with the Commission Nationale Informatique et Libertés (CNIL) at the following address: 3 Place de Fontenoy, TSA 80715, TSA 80715, 75334 Paris Cedex 07.
Types of personal data collected
When you subscribe to Finovox or chat with us, we may ask for your name, first name, postal address, telephone number, email address, the company in which you work, your position, your position, your contact preferences, and more generally any other data that can identify a persona.
The categories of personal data that Finovox may process are the following:
- Identification data: name, first name, postal address, email address, telephone number (fixed or mobile), username and password
- Data related to your profession: function, company, hierarchical position, seniority
- Connection data: logs, timestamp, navigation path
- Location data: country
- Internet data: IP address, browser language, browser type
Collection of personal data and purposes
The majority of personal data is transmitted to us by you.
Some personal data is accessible to us via Linkedin to carry out prospecting campaigns according to legitimate interest. Finovox only processes personal data that is strictly necessary to achieve the determined and legitimate purposes set out in this section. In accordance with the regulations in force, Finovox does not process any sensitive data such as racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership of the persons concerned. The same applies to any information on the life or sexual orientation, genetic, biometric or health data of the persons concerned.
6.1 Collection methods
We receive information from you, directly and indirectly.
Directly: most of the information we process is information that you transmit to us using our services and in one of the situations described below:
- When you browse our website, in particular behavioral information on our website for the purposes of optimizing the customer journey. This data is managed by the cookies that you accept on our site https://finovox.com. Cookies are managed by Axeptio.
- When submitting a form on our website, personal data is requested from you, such as data relating to professional life, identification data or location data. These are used as part of the prospecting relationship or in accordance with the RGPD if information is transmitted to you.
- When transferring information, via email, push notification, or in-app message about product updates, industry news, new partnerships, and events. Identification data such as your email address, first name, and last name may be requested. You can always withdraw your consent to receive commercial offers from us by using the unsubscribe link at the bottom of any email received. This data is kept for 3 years from the last exchange.
- When you subscribe to Finovox, you are asked for identification data such as your email address, your first name, your last name, as well as data relating to your professional life such as your team or your profession. Legally, we need this data to perform the tasks described in the user agreement that you signed with us. We will keep this data for 5 years after the end of your subscription in accordance with the law.
- During a commercial partnership with Finovox, you will be asked for identification and professional data such as your contact details, your legal address and your professional email address. We collect this data in accordance with the conditions set out in the contract you signed. We will keep your data for 10 years in order to comply with current accounting laws.
- When you use the Finovox platform, internet data may be collected in order to optimize our platform to understand your use.
- When making contact, by email, by telephone or by another channel, personal identification data such as your email address, your telephone number (mobile or fixed), your name and first name, as well as any other information in your contact (professional life data).
Indirectly: we also receive some of your data from third parties, such as partners allowing us to improve our service or to retrieve contact information (identification and professional data such as email address, telephone number, job title or name and surname) according to the legitimate interest of our prospecting.
6.2 Objectives and bases of legality
Your personal data has several purposes for us depending on the data and the relationship you have with Finovox. We distinguish the following categories:
Commercial prospecting
For commercial prospecting, the retention period is effective until the person concerned exercises the right to object or 3 years from the exercise of the right of opposition in the context of a dispute. The recipient of this data is Finovox's marketing and sales department, as well as the legal and administrative department in the event of litigation. The DPO may also have to consult this data. The data source is: the persons concerned.
These data are necessary for the commercial management of the company and their legal bases are as follows.
Basis of legality: Consent
- Provision of evidence in case of litigation or administrative control
- Audience measurement and analysis of site visitor behavior via Google Analytics, Google Ads, Google Search Console, Axeptio and Hubspot.
- Identification of the origin of visitors using Google Analytics (pixels), as well as by original tools such as Google Ads, Linkedin, Youtube, Hubspot.
- Realization, measurement and optimization of remarketing advertising campaigns
- Adding behavioral data to your factsheet in our Hubspot CRM
Basis of legality: Legitimate interest during BtoB prospecting
- Display of videos on the Finovox website
- Profiling prospects to optimize our communications
- Trade statistics
- Website referencing our commercial offers, our content and our forms
- Retention of your choices in terms of cookie consent — use of Axeptio
- Website for the purpose of optimizing the journey on our site by analyzing behaviors, pages viewed and time
- Canvassing actions by email and telephone
- Optimization of marketing by improving the Finovox database (Ex: Normalization, enrichment, deduplication)
Basis of legality: Pre-contractual obligation
- Drafting, issuing and transferring commercial offers and sales contracts
- Responding to requests for information, documentation or demonstrations
- To invite customers to and organize events
RGPD compliance
For GDPR compliance, the basis of legality is the legal obligation in order to respond to requests for GDPR rights. The retention period is 3 years after the closure of an opposition request (limitation period for a crime), or 1 year after the closure of a request for access, deletion or correction (limitation period for an offense). The recipient of this data is the CNIL, the legal and litigation department of Finovox, as well as the service that will receive the request for RGPD rights. The DPO may also have to consult this data. The data source is: the persons concerned.
This data is necessary for the fulfilment of legal obligations in terms of declarations of violation and the exercise of rights.
Categories of third parties who may receive your personal data
Finovox may disclose your Personal Data to third parties in the following cases: If we obtain a valid agreement from you to do so; As part of a subpoena, legal order, legal proceeding, or other legal obligation; In the application of our terms and conditions or policies; As a remedy or to defend our rights; We may also transfer your Personal Data to a subsidiary, affiliate, or third party in the case of a reorganization, a merger, a sale, a joint venture, sale, transfer, or any other arrangement relating to all or a portion of Finovox's inventory, assets, or business (including, without limitation, in connection with any bankruptcy or similar proceedings), provided that the entity to which we transfer Personal Data is not authorized to process your Personal Data other than in accordance with this Privacy Policy without notice to you and, in accordance with the law applicable, without obtaining your consent.
The persons and entities that may receive your personal data are: Public authorities, government agencies or other institutions to comply with our legal obligations. Technical service providers in order to provide you with our services. Please refer to the list below for a list of the main service providers we work with. The partners and suppliers with whom we collaborate.
List of subcontractors:
To obtain a copy or the place where the guarantees related to data transfers outside the European Union, please contact: Email: dpo@finovox.com Postal address: Finovox, 92 Boulevard de la République, 92210 Saint Cloud, France
Sometimes we may need to transfer personal data outside of the European Union in order to provide you with our services. If this is the case, we always ensure that this transfer is carried out in a country considered by the European Commission to have an adequate level of protection of personal data and, if this is not the case, we apply the protections of SCCs (Standard Contractual Clauses adopted by the Commission) in order to achieve the level of protection required by the standard. You can obtain a detailed copy of the transfer tool or more information by submitting a request to our Data Protection Officer.
Storing your personal data
The personal data that we collect and process in our offices in France (Paris) is stored on the servers of our data storage provider Google Cloud Platform In the Netherlands, EU.
Privacy Policy Updates
We may update this Privacy Policy from time to time as new products are added, our offerings are improved, and as a result of technological and regulatory changes. You can find out when this Privacy Policy was last updated by referring to the “Version” mention on the first page of this document. Any changes will be effective when the revised Privacy Policy is posted.
We will notify you if these changes are substantial and, if required by applicable law, we will then ask for your permission. This change notice will be sent by email or published on the Finovox site.
Data controller and data protection officer
If you live either in a country of the European Economic Area or in Switzerland, or outside a country of the European Economic Area and Switzerland, your Personal Data is collected by Finovox SAS, whose head office is located at 92 Boulevard de la République, 92 Boulevard de la République, 92210 Saint Cloud, France.
Finovox's data protection officer is at the same address and can also be contacted by email at dpo@finovox.com.