PRIVACY POLICY

Last updated : September 8, 2021

SCOPE OF APPLICATION

IDENTITY OF THE DATA CONTROLLER

AGENDIZE SAS

Headquarters: 33 rue de la République, 69002 Lyon, France

Administrative office: 12 rue Bégand, 10000 Troyes, France

RCS Lyon 449 162 403

AGENDIZE LLC

245 Kentucky Street, A3, Petaluma CA 94952, USA

AGENDIZE SERVICES INC

3981 Blvd. St-Laurent, Mezz. 2, Montréal, QC H2W 1Y5, Canada

At Agendize ("Agendize"), protecting your privacy is essential to us. We treat your personal information with the utmost respect, in accordance with the General Regulations on the Protection of Personal Data (GDPR) and the amended Data Protection Act, and in accordance with this Privacy Policy. This Privacy Policy details how personal information about you may be collected, used, and / or disclosed as a consequence of your activities on a website using Agendize technology. We strongly recommend that you read the Privacy Policy carefully and print a copy for your personal records.

By submitting any information through a website using Agendize technology (an "Agendize & Services website") or by otherwise accessing our site, you acknowledge having been informed of the terms of this Privacy Policy and you agree to consent to the policies and practices described for the collection, use and / or disclosure of personal information and you expressly consent to the collection, storage, use and / or disclosure of your personal information as described in this Privacy Policy.

DATA COLLECTION

The type of personal information protected varies by jurisdiction but generally includes any information about an identifiable individual, such as name, address, telephone number, age, sex, marital status and nationality. , etc. Personal information cannot, however, include certain types of information relating to business or professional activity. For example, the name, title, business address, or phone number of an employee or business is not included. This type of information is generally not considered to be personal information.

You can visit an Agendize website at any time without submitting personal information. When you visit such a website, or when you visit a third party website providing content using the Agendize services, the data is saved on our servers in an anonymous format. This includes, for example, connection information, statistics on the pages visited, traffic to and from an Agendize & Services website, and data relating to advertising. The identification of the website you came from, the website you visited through our website, and your IP address are also kept. By collecting this information, no personal information is associated with you. We share this information in an anonymous format with third parties, including, for guidance, providers who support the operation of our website and services, and entities involved in delivering advertisements.

We may, however, request information, which may relate to personal information, so that you can actively use the features of an Agendize & Services website. Once you provide Agendize or the owner of the Agendize website (hereinafter "us") with the requested information, you are no longer anonymous. By providing us with your personal information, you consent to the transfer and storage of this information on our servers, in order to serve you.

Once you are registered, we may use all or part of the following personal information:

email address and postal address, including among others your name, address, date of birth and telephone number;
any transactional information based on your activities on the Agendize website;
any other additional information transmitted by third parties who are authorized to communicate such information to us.

The database containing your personal information will be assigned to the owner of an Agendize & Services website.

Other than that, we do not collect, use or disclose your personal information without your consent, except as required or permitted by law. Each processing of personal data is based on one of the foundations provided for by the GDPR, namely, in particular, consent, legal obligation, contractual performance, or legitimate interest. We do not knowingly solicit information from children and we do not knowingly address minors. You can find the storage location for your personal information according to each of our partners here: (sub-processors). We will take reasonable steps to ensure that your personal information is sufficiently accurate, complete and up to date to fulfill its purpose.

USE OF DATA

Our primary purpose in collecting your personal information is to provide you with a secure, flexible, efficient and personalized experience. You agree that we use your personal information to:

measure the use of our services anonymously to monitor the level of performance of our systems and analyze the distribution of usage across our customers;
provide the services and customer support you request;
resolve disputes, collect fees and resolve issues;
prevent potentially prohibited or illegal activities;

We regularly update personal information in order to fulfill the purposes for which that information was collected, as described in this Privacy Policy.

DATA RETENTION

The retention period of your Personal Data depends on the processing carried out.

We undertake not to keep your Personal Data beyond the time necessary for the provision of the service, and therefore for your use of the service, plus the retention period imposed by the applicable rules on legal prescription.

A summary table of all retention periods is being drawn up.

It will be published and accessible from this paragraph once finalized.

DISCLOSURE

We may disclose personal information to meet legal requirements, enforce our policies, respond to complaints about infringement of third party rights, or protect the rights of third parties, their property or safety. When data of European citizens is concerned, it must be processed in accordance with the GDPR. We may also share your personal information with third parties who assist us in our business under contract or who request our collaboration, including but not limited to: suppliers who support the operation of our website and services such as billing and payment systems; fraud officers and debt collection agencies and staff; by order of a court or other government officials, if required by law; and other business entities with which we intend to merge or be acquired, provided that such business entities have signed a nondisclosure agreement.

Without questioning the foregoing, in an effort to respect your privacy, we will not disclose your personal information due to law enforcement, at the request of government officials or other third parties without an order from the court, subpoena or similar legal process, unless we believe, in good faith, that disclosure of such information is necessary to prevent imminent physical danger or financial loss or to report instances of illegal activity.

In the event of international transfers originating from the European Economic Area (EEA):

If the European Commission has rendered an adequacy decision, recognizing that this country has a level of protection of personal data equivalent to that provided for by EEA legislation , your personal data will be transferred on this basis
If the level of protection has not been recognized as equivalent by the European Commission, we rely either on a derogation applicable to the situation or on the implementation of one of the appropriate guarantees to ensure the protection of your personal data (standard contractual clauses approved by the European Commission, binding company rules)

PUBLIC COMPUTER

When visiting an Agendize & Services website from a public or shared computer, certain information about you may be visible to future users.

COOKIES

We use "cookies" which are files that are stored on your computer that can be retrieved to help personalize your experience with the online service. They are used to help us measure the number of visits, average time spent on the site, page views, and other statistics relating to your use of this site. These cookies do not by themselves tell us your email address or who you are. You are free to prevent cookies from being stored on your hard drive by adjusting the corresponding settings in your internet browser. However, disabling these settings can lead to limited performance.

The use of this data is based on your consent. You can accept, modify your preferences, or refuse at any time. You can also prevent cookies from being stored on your hard drive by adjusting the corresponding settings in your internet browser. However, denying or disabling these settings may lead to limited performance. If you consent to the collection of this data, it will be kept for a maximum period of 13 months. At the end of this period, your consent will be requested again.

SECURITY MEASURES

We meet the following obligations:

Integrate the protection of personal data upstream of projects: "Privacy by Design".

We are committed to taking into account the protection of your personal data and your privacy from the design of the services offered to you, thus minimizing the risks of non-compliance with the principles of the GDPR and the French Data Protection Act (“Loi Informatique et Libertés modifiée”).

Thus, appropriate technical and organizational measures proportionate to the processing of Personal Data are taken with regard to the purpose sought in the processing considered.

The application of this principle therefore makes it possible to implement preventive measures to limit the risks with regard to Personal Data.

Ensure, by default, the highest level of protection of personal data: "Privacy by default ".

We implement appropriate technical and organizational measures to ensure that by default, optimal security of processing is organized and implemented.

Agendize undertakes to take all measures to ensure the security and confidentiality of your Personal Data and in particular to prevent it from being damaged, erased or that unauthorized third parties have access to it. Only authorized persons can access the data.

We are constantly improving our security procedures as technology evolves in order to maintain a maximum level of protection. Our staff and that of our subcontractors with access to personal data are contractually bound by an obligation of confidentiality.

Organizational measures include limiting access to personal data to only authorized persons with a legitimate interest in knowing it.

In addition, in the event of a security incident affecting your Personal Data (destruction, loss, alteration or disclosure), we ensure the obligation to notify Personal Data violations, in particular to the CNIL.

Please do not forget to log out of your account and close your internet browser window when you leave an Agendize & Services website; this is especially important if you use a computer in public places (You can also delete your browsing history after each visit to an Agendize and Services website; again, this is essential if you use a computer in public places ). To date, this is the best way to ensure that no one has access to your personal information. We assume no responsibility for the misuse of any information remaining on a computer that is being used by a third party.

We treat data as an asset that must be protected. While we use all reasonable means to ensure that the information you provide to us is not used by third parties for purposes other than those described in this Privacy Policy, we are not responsible for any improper use of your information. personal information that is beyond our reasonable control.

UNSOLICITED INFORMATION

In addition to your username, any comments or observations ("Unsolicited Information") that you post on our website or services will be publicly available. All such unsolicited information will be considered non-confidential and Agendize will be free to reproduce, use, disclose and distribute such unsolicited information to third parties without limitation or attribution. You should be aware that if you voluntarily disclose Unsolicited Information online, that information may be collected and used by third parties. For example, if you post your email address in comment sections or online forums, you may receive unsolicited messages from third parties. Agendize has no control over the use of personally identifiable information that you voluntarily post in public forums or otherwise disclose while interacting with other users. Any personal information you choose to disclose should match the amount of privacy you want to make available to third parties. We encourage our customers and visitors to think carefully about the information they provide in their comments or remarks.

SPAM

If we obtain your email address, mobile phone number, fax number, instant messaging and / or social media or media accounts, we will not rent or sell such information to third parties, and we will do our best to prevent the registration of your e-mail address by indexing robots ("web crawlers") or "spiders" ("web spiders"). If you believe your email address has been registered in this way, please let us know immediately.

OUR CUSTOMERS

Like Agendize, the various owners of websites using Agendize & Services technology have agreed to comply with this Privacy Policy. While we may control our sites and the sites of our customers, we have no control over third party sites; however, we make efforts to require our customers to ensure that any third-party site posts adequate privacy policies and otherwise protects the privacy rights of their visitors. Please check the privacy policies of those third party websites that use our services for information regarding their applicable privacy practices.

GENERAL

We may amend this Privacy Policy at any time by posting the changes hereby. Changes to the Privacy Policy take effect immediately upon publication on the Agendize website.

YOUR RIGHTS WITH REGARD TO THE REGULATIONS IN FORCE

You have the right at any time to exercise the rights provided for by the regulations in force applicable to personal data, subject to fulfilling the conditions and on the basis of the processing of the data concerned:

Right of access : you may have communication of your Personal Data subject to processing based on your consent, the performance of a public service mission, a legal obligation, performance of your contract or the legitimate interest of the data controller.

Right of rectification : you can update your Personal Data or have your Personal Data processed rectified based on your consent, the performance of a public service mission, a legal obligation, the performance of your contract or the legitimate interest of the data controller.

Right to object: you can express your wish that your Personal Data are no longer processed if the processing is based on your consent (you withdraw your consent) or on contractual performance (contract waiver clause) as well as in the case of processing carried out in the legitimate interest of the controller. On the other hand, you cannot oppose a processing carried out within the framework of a legal obligation incumbent on the data controller, or within the framework of the execution of a public service mission which presents compelling and legitimate reasons prevailing on your rights and freedoms.

Right to erasure : you can request the deletion of your Personal Data, subject to the legal retention period, in the event that the processing is based on your consent (you withdraw your consent) or on contractual performance. (contract waiver clause) as well as in the case of processing carried out in the legitimate interest of the controller. On the other hand, you cannot request the erasure of data from processing carried out within the framework of a legal obligation or the performance of a public service mission incumbent on the controller;

Right to limitation : you can request the suspension of the processing of your Personal Data based on your consent, legal obligation, contractual performance or the legitimate interest of the controller if you have a request for rectification, '' erasure or opposition in progress or if you consider the processing unlawful but the data controller opposes the erasure of your Data;

Right to portability : you can ask the controller to recover your Personal Data in order to dispose of it only if the processing is based on your consent or the performance of a contract. You cannot benefit from the right to portability in the event that the processing is carried out within the framework of a legal obligation, the performance of a public service mission or the legitimate interest of the controller.

When collecting your Personal Data, you are given the email address to which to send your request to exercise your rights.

Any request that is not made within a framework that allows no doubt about the identity of the applicant must be accompanied by a copy of a proof of identity.

We undertake to respond to your requests to exercise your rights as soon as possible and at the latest within one month of receipt of your request and to the extent that the exercise of these rights is not harmful. not to the execution of the contract or to the respect of legal and regulatory obligations. If necessary, this period could be extended by two months in the event of complexity and / or a large number of requests.

We comply with our obligations regarding the protection, security and confidentiality of users' personal data and have appointed a Data Protection Officer.

You can contact our Data Protection Officer at the following address: dpo.agendize@dposystem.fr

Legal Department: 12 rue Bégand, 10000 Troyes, France

In addition, you retain the possibility of filing a complaint with the CNIL by sending your requests to the following website: www.cnil.fr/fr.plaintes/internet