Privacy Policy

Modified on Tue, 23 Jan, 2024 at 3:45 PM

Privacy Policy

Your privacy is our priority

XMCO attaches great importance and takes the utmost care in protecting your personal data.

XMCO undertakes to process your personal data only when such use is necessary and authorized by the regulations in force and to take all necessary precautions to ensure respect for the security, confidentiality and integrity of your data.

XMCO is responsible for processing the personal data that you communicate to us.

This policy informs you:

personal data collected by XMCO
the purposes and legal bases of this collection
the use made of this data
the retention period of your data
your rights

In what context does XMCO collect your personal data?

Data processing concerns natural and legal persons using the Portal service.

We collect your personal data when:

You subscribe to one of our products or services;
You visit our website wwww.leportail.xmco.fr and you accept the deposit of cookies or other tracers other than those strictly necessary for the operation of the site (More information on cookies in our legal notices)

What types of personal data is collected by XMCO?

information relating to your identity (surname, first name).
your personal or professional details (e-mail address, telephone numbers).
information relating to connection data (IP addresses and location based on IP addresses).
content you publish on our Portal (comments on action tickets, files uploaded to a perimeter, description of an action ticket)
content you provide through our user support (e.g. via a support ticket or e-mail)

For what purposes does XMCO collect your personal data? What legal basis is applied?

Access to "Le Portail" online service

Collection details

Communicate with you (email notifications)
Send encrypted archives (crypt&send service)
Provide after-sales service (support)

Legal basis

Execution of the contract concluded with you or pre-contractual measures at your request

Data retention period

For the duration of our contractual relationship and 3 years from the end of our commercial relationship or the last contact with you

Loyalty Actions/Commercial Prospecting
Collection details
Sending information and messages relating to our products and/or services by e-mail or by post
Registration and participation in contests, surveys, polls or tests
Management of your subscriptions, unsubscriptions to our newsletter and emailings
Realization of statistical analyzes
Management, organization and monitoring of online events
Improvement of our product and service offering
Legal basis
Legitimate interest / Consent
Data retention period
For the duration of our contractual relationship and 3 years from the end of our commercial relationship or the last contact with you.

Defense and protection of our rights

Collection details

Debt recovery
Fight against fraud
Defense of our Intellectual Property rights
Exercise of legal actions
Complaints and disputes management

Legal basis

Legitimate interest

Data retention period

During the legal period of limitation or procedure

Who can have access to your personal data?

Your personal data is processed by:

the sales and marketing team
the administration and the managers of the departments in charge of the services offered by XMCO.

Where are your personal data processed and hosted?

XMCO stores your data on secure servers located in the European Union (OVH Cloud / Private Cloud). Physical Personal Data (invoices, letters, CVs, etc.) are exclusively stored in France.

What are your rights and how to exercise them?

Under the conditions provided for by law, you have the rights indicated below. You can exercise your rights with XMCO

By email: [email protected]
By post: 18, rue Bayard – 75008 Paris

You also have the right to file a complaint with the CNIL by email (see terms and conditions at https://www.cnil.fr/fr/plaintes/) or by post to the following address:

CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07

Your rights

Right to information – Articles 13 and 14 of the GDPR
Right of access – Article 15 of the GDPR
Right of rectification – Article 16 of the GDPR
Right to erasure – Article 17 of the GDPR
Right to data portability – GDPR Article 20
Right to object to commercial prospecting – Article 21 of the GDPR
Right to restriction of processing – Article 18 of the GDPR