PERSONAL DATA POLICY
This policy informs you of the processing of personal data that SOTHYS PARIS carries out as part of the operation of the Sothys Institute, in its capacity as data controller within the meaning of EU Regulation No. 2016/679 of the European Parliament and of the Council of 27 April 2016, known as “GDPR”, for the purchase of Gift Vouchers and Online Bookings on the website www.institutsothys.paris, hereinafter the “Website”.
We attach great importance to the protection of the personal data of users of the Website and, to this end, we have implemented the following policy:
What is personal data?
This refers to any data likely to directly (ex: a name) or indirectly to a natural person (ex : an identifier, a code).
What data does we collect?
As part of your user experience of our Website, we collect personal data about you.
You can provide us with your personal data in different ways via our Website:
– Either directly: creation of a customer account, request for information, participation in competitions, bookings and purchases;
– Or indirectly: cookies.
We do not collect personal data from third parties.
We make sure to collect only data that is strictly necessary to be able to offer you a user experience that is as pleasant as possible and adapted to your needs and to be able to provide you with the services to which you have subscribed.
For this purpose, your consent is always required except in cases where we are in the context of the execution of a contract concluded with you (sales contract for example).
The fields that must be filled in are marked with an asterisk.
The data that may be collected are as follows:
| Situation that may give rise to the collection of personal data | Nature of data collected | Purpose of the processing carried out by us | Nature of user consent | Data retention period |
|---|---|---|---|---|
| Creating a customer account | Surname, first name, email address | Manage customer relations; Send you personalized offers | Performance of a sale contract (being able to respond to the service to which you have subscribed) | 3 years from the end of the business relationship |
| Invoice management | Surname, first name, email address, telephone, order summary | Performance of the sale contract | Performance of the sale contract | 10 years from the date of issue of the invoice (accounting document) |
| Bookings and purchases management | Surname, first name, email address, telephone number, booking summary, comments (for a booking) and order summary (for a purchase) | Performance of the sale contract | Performance of the sale contract | 5 years from the booking date or purchase date. |
| Offer of a gift voucher | Surname, first name and email address of the beneficiary of the gift voucher if different from the customer | Performance of the contract | Performance of the contract | 5 years from the end of the purchase of the Gift Voucher |
| Enquiries | Surname, first name, address, telephone number, email address | Send you an answer | Consent | 3 years from the last relaunch |
| Sending a newsletter | Surname, first name, email address | Send you information about the brand | Consent | Until unsubscribing |
| Send commercial communications | Surname, first name, email address | Send you commercial communications | Consent | 3 years from their collection or from the last contact |
| Promotional operations (competitions) | Surname, first name, address, telephone number of participants | Communicate around the commercial operation | Consent | Time necessary for the purpose of this operation |
It should be noted that the retention periods indicated cover retention in active database and internal archives.
Who is the data controller?
The data controller corresponds to the person who determines the purposes and means of the processing. It is directly responsible for compliance with personal data protection obligations.
We are responsible for the treatment.
Recipients of your data
Sothys Paris informs you that it has subscribed to a platform administered by a third-party service provider for the realization of online purchases of Gift Vouchers and online Bookings.
Also, besides members of Sothys Paris’ internal services who, for the purposes of the execution of the contract, the management of the customer relationship, the proper performance of the Services ordered and/or booked, the sending of commercial communications and the management of the Website, may be required to process some of your personal data in accordance with the purposes referred to below; your personal data provided as part of the purchase of a Gift Voucher and/or during an online Booking have been transmitted to our service provider MINDBODY Inc., for the purposes of the execution of the sales contract and the online booking with the Sothys Institute.
You will find the privacy policy of MINDBODY Inc. here:
https ://company.mindbodyonline.com/fr/legal/politique-confidentialite.
As such, we inform you that your personal data may be transferred to the United States, in accordance with the privacy policy of MINDBOY Inc.
Data security and retention
We ensure the confidentiality of your personal data and put in place technical means to ensure the conservation of these
Your data is stored on protected software with restricted and controlled access.
What are your rights?
In accordance with the regulations in force, you have a right of information (receive concise, transparent, understandable and easily accessible information in clear and simple terms), a right of access to your personal data, rectification, opposition, erasure and limitation thereof, by contacting the address: privacy.spa@sothys.net. For any request to be admissible, you must attach a copy of your identity document.
In case of exercise of your right of opposition and / or deletion and / or portability of data concerning you, we will be unable to perform certain services.
In addition, you have the possibility to withdraw your consent to the collection and processing of your personal data at any time.
You also have the right to lodge a complaint with the CNIL and/or to take any legal remedy.