It should be noted that the retention periods indicated cover retention in active database and internal archives.
Who is the data controller?
The data controller corresponds to the person who determines the purposes and means of the processing. It is directly responsible for compliance with personal data protection obligations.
We are responsible for the treatment.
Recipients of your data
Sothys Paris informs you that it has subscribed to a platform administered by a third-party service provider for the realization of online purchases of Gift Vouchers and online Bookings.
Also, besides members of Sothys Paris’ internal services who, for the purposes of the execution of the contract, the management of the customer relationship, the proper performance of the Services ordered and/or booked, the sending of commercial communications and the management of the Website, may be required to process some of your personal data in accordance with the purposes referred to below; your personal data provided as part of the purchase of a Gift Voucher and/or during an online Booking have been transmitted to our service provider MINDBODY Inc., for the purposes of the execution of the sales contract and the online booking with the Sothys Institute.
Data security and retention
We ensure the confidentiality of your personal data and put in place technical means to ensure the conservation of these
Your data is stored on protected software with restricted and controlled access.
What are your rights?
In accordance with the regulations in force, you have a right of information (receive concise, transparent, understandable and easily accessible information in clear and simple terms), a right of access to your personal data, rectification, opposition, erasure and limitation thereof, by contacting the address: firstname.lastname@example.org. For any request to be admissible, you must attach a copy of your identity document.
In case of exercise of your right of opposition and / or deletion and / or portability of data concerning you, we will be unable to perform certain services.
In addition, you have the possibility to withdraw your consent to the collection and processing of your personal data at any time.
You also have the right to lodge a complaint with the CNIL and/or to take any legal remedy.