Privacy Policy
Your privacy is our priority
XMCO attaches great importance and takes the utmost care in protecting your personal data.
XMCO undertakes to process your personal data only when such use is necessary and authorized by the regulations in force and to take all necessary precautions to ensure respect for the security, confidentiality and integrity of your data.
XMCO is responsible for processing the personal data that you communicate to us.
This policy informs you:
- personal data collected by XMCO
- the purposes and legal bases of this collection
- the use made of this data
- the retention period of your data
- your rights
In what context does XMCO collect your personal data?
Data processing concerns natural and legal persons using the Portal service.
We collect your personal data when:
- You subscribe to one of our products or services;
- You visit our website wwww.leportail.xmco.fr and you accept the deposit of cookies or other tracers other than those strictly necessary for the operation of the site (More information on cookies in our legal notices)
What types of personal data is collected by XMCO?
- information relating to your identity (surname, first name).
- your personal or professional details (e-mail address, telephone numbers).
- information relating to connection data (IP addresses and location based on IP addresses).
- content you publish on our Portal (comments on action tickets, files uploaded to a perimeter, description of an action ticket)
- content you provide through our user support (e.g. via a support ticket or e-mail)
For what purposes does XMCO collect your personal data? What legal basis is applied?
Access to "Le Portail" online service
Collection details
- Communicate with you (email notifications)
- Send encrypted archives (crypt&send service)
- Provide after-sales service (support)
Legal basis
- Execution of the contract concluded with you or pre-contractual measures at your request
Data retention period
- For the duration of our contractual relationship and 3 years from the end of our commercial relationship or the last contact with you
Loyalty Actions/Commercial Prospecting
Collection details
- Sending information and messages relating to our products and/or services by e-mail or by post
- Registration and participation in contests, surveys, polls or tests
- Management of your subscriptions, unsubscriptions to our newsletter and emailings
- Realization of statistical analyzes
- Management, organization and monitoring of online events
- Improvement of our product and service offering
Legal basis
- Legitimate interest / Consent
Data retention period
- For the duration of our contractual relationship and 3 years from the end of our commercial relationship or the last contact with you.
Defense and protection of our rights
Collection details
- Debt recovery
- Fight against fraud
- Defense of our Intellectual Property rights
- Exercise of legal actions
- Complaints and disputes management
Legal basis
Data retention period
- During the legal period of limitation or procedure
Who can have access to your personal data?
Your personal data is processed by:
- the sales and marketing team
- the administration and the managers of the departments in charge of the services offered by XMCO.
Where are your personal data processed and hosted?
XMCO stores your data on secure servers located in the European Union (OVH Cloud / Private Cloud). Physical Personal Data (invoices, letters, CVs, etc.) are exclusively stored in France.
What are your rights and how to exercise them?
Under the conditions provided for by law, you have the rights indicated below. You can exercise your rights with XMCO
- By email: dpo@xmco.fr
- By post: 18, rue Bayard – 75008 Paris
You also have the right to file a complaint with the CNIL by email (see terms and conditions at https://www.cnil.fr/fr/plaintes/) or by post to the following address:
- CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
Your rights
- Right to information – Articles 13 and 14 of the GDPR
- Right of access – Article 15 of the GDPR
- Right of rectification – Article 16 of the GDPR
- Right to erasure – Article 17 of the GDPR
- Right to data portability – GDPR Article 20
- Right to object to commercial prospecting – Article 21 of the GDPR
- Right to restriction of processing – Article 18 of the GDPR