Data Protection

Acial confirms that it complies with the current legislation, namely the French Data Protection Act (and historical privacy regulations) along with its implementing decrees, as well as the European General Data Protection Regulation of 27 April 2016.

“Personal data“: any information relating to an identified or identifiable natural person (“data subject”).
A natural person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the genetic, psychological, economic, cultural, or social identity of that person.
Annex 1 lists the Personal Data that the Processor will process in accordance with this agreement and the purposes for which the data are processed.

“Processing“: any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

“Data Controller“: a natural or legal person which, alone or jointly with others, determines the purposes and means of the processing of personal data.

“Processor“: a natural or legal person which processes personal data on behalf of the data controller.

“Sub-processor“: the processor appointed by the processor to perform part of the processing activities on behalf of the data controller.

“Personal data breach”: a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored, or otherwise processed, also known as a “data leak“.

“GDPR“: the General Data Protection Regulation, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

Below you will find a list of the personal data processed and the purposes for which Acial processes them.

Provision of Services

In the context of the provision of services by Acial, the following personal data are processed:

• Your first and last name
• The name of your company or employer
• Your work address
• Your email address
• Your phone number

The above data are processed via the contact form. We will only collect personally identifiable information if you submit it to us voluntarily.

In this case, Acial justifies the processing of personal data based on the legitimate interest that Acial has in the proper and effective execution of the contract.

Website

In the context of your access to and use of our website, the following personal data will be processed:

• Your IP address
• Your browsing behavior

Acial processes the above data in order to optimize the content and functioning of the site, based on the visitor’s needs.

Acial justifies this processing of personal data by the legitimate interest that Acial has in offering a website that is easily accessible, understandable, appropriate, complete, and relevant.

For more information regarding the use of www.acial.com legal notice please refer to the website’s and cookie policy.

Newsletters

In the context of sending newsletters and advertising brochures, the following personal data are processed :

• Your first and last name
• Your email address

The above data are processed to personalize our newsletter and advertising brochures, as well as to inform you about current promotions and special offers.

In this case, Acial relies on your formal and prior consent for the processing of personal data.

Statistics

In the context of compiling and analyzing statistics on an anonymous basis, the following personal data are processed :

• The sequence of pages you visit on the website
• Duration of the visit
• The media through which you visited the website
• Browser / system information
• Location information

Processing for statistical purposes is carried out using encrypted data, from which the identity of the data subject cannot be traced.

The legal basis on which Acial justifies this processing is the company’s legitimate interest in continuously submitting its services to evaluation and improvement.

Acial undertakes not to process your personal data for purposes other than those mentioned above, unless you have previously authorized Acial to do so. Acial guarantees that your personal data will not be kept if Acial no longer requires them for the provision of services, or if it is no longer subject to a legal retention obligation.

You are not obliged to transfer your personal data to Acial. However, please be aware that refusing to provide certain basic data to Acial could prevent Acial from providing you with certain services.

Your personal data are only processed for direct marketing purposes if you give your explicit consent to Acial.

If you authorize Acial to use your data for direct marketing purposes, these data will be processed to send you marketing documentation in electronic form.

You can object to the use of your personal data for direct marketing purposes at any time, free of charge. To do so, simply send a request to the site publisher via the attached contact address.

Your personal data processed by Acial are stored for a period of 5 years.

As a data subject whose personal data are processed, you have a number of rights regarding the processing operations carried out by Acial.

To exercise these rights, you must contact us via the attached contact address.

Acial is required to respond to this request within one month. You will receive a response within this timeframe provided that you submit your request to exercise your rights using the procedure mentioned above.

Vous avez les droits suivants:

Right of Inspection and Access

You have the right to access your personal data and the right to check how they are being used via the attached contact address. You can obtain a free copy of your available personal data at any time by simply making a request to that effect.

Right to Rectification, Erasure, and Restriction

With the exception of personal data that must be processed in the context of orders or retained due to a legal obligation, you can indicate which personal data may not be processed or may only be processed for a limited number of operations. In addition, you can request that the personal data you do not wish to be processed in whole or in part be deleted. You can also request to check and, if necessary, correct your personal data.

Right to Object, Automated Decisions, and Profiling

You can object to the processing of your personal data at any time if your objection is based on serious and legitimate grounds. If you wish to object to the use of your personal data for direct marketing purposes, you do not need to provide any reasons for doing so.

The processing of personal data by Acial is not based on automated decision-making; in other words, it is not carried out without human intervention.

Acial does not engage in profiling based on the available personal data.

Right to Withdraw Consent

If the processing of your personal data is based on the consent you have given, you can withdraw this consent at any time.

Right to Data Portability

Under the conditions stipulated in the GDPR, you have the right to obtain your personal data in a structured, commonly used, and machine-readable format. You can request Acial to transfer your data in this manner to another data controller.

Complaints

If you believe that your rights as a data subject are violated by or during the processing of your personal data, you have the right to lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL), 8, rue Vivienne CS 30223 75083 Paris cedex 02, without prejudice to any other possibility of seeking judicial review or requesting a legal remedy.

Acial undertakes not to sell, rent, distribute, or otherwise disclose your personal data to third parties, unless the disclosure is made to the third party pursuant to a legal obligation. In exceptional cases, mandatory laws oblige Acial to transfer your personal data to the competent government authorities. Likewise, a court order may compel Acial to disclose personal data to the persons authorized by the order to inspect the personal data concerned.

Acial makes an exception to its non-disclosure commitment in the event of a partial or complete reorganization or transfer of the company’s activities. In such cases, your personal data will be transferred along with the business operations to the third parties involved in the transfer and in the confidential negotiations prior to the transfer.

Insofar as possible, Acial will inform you of the transfer to the aforementioned third parties.

Acial guarantees that the processing of your personal data is carried out in an appropriate, correct, and secure manner. Upon request, you will be informed transparently of the processing procedures and the technical and organizational measures taken to prevent any loss, falsification, unlawful alteration, or unauthorized access to your personal data.