ETERNALL STORIES, a société par actions simplifiée (simplified joint stock company), registered with the Lille Métropole Trade and Companies Register under number 931 956 262, with its registered office at 87 rue du Fontenoy, 59100 Roubaix (hereinafter referred to as "THE COMPANY"), publishes the www.eternallstories.com website. THE COMPANY is committed to a policy of respecting and maintaining high standards of personal data protection.
In the course of its business activity, THE COMPANY collects and processes personal data relating to its customers, visitors to its website, users of its platform, suppliers, prospects and employees.
With a view to fostering innovation while building a lasting relationship of trust based on the sharing of responsible social values and respect for individuals, THE COMPANY has put in place the technical and organizational means necessary to protect the personal data it collects and processes.
The purpose of this policy is to present the commitments made by THE COMPANY with regard to the protection of personal data.
In the interests of transparency, THE COMPANY takes care to inform its customers, users, web surfers, employees and business partners of any processing operations that concern them.
THE COMPANY is available at the following address to provide any clarification required concerning its personal data protection policy: rgpd@eternallstories.com
The collection of personal data is intended in particular to optimize the management of its activities and requests received on the sites belonging to THE COMPANY, as well as the management of its professional relations with its customers, suppliers, prospects and employees.
When THE COMPANY processes data, it does so for specific purposes: each data processing operation carried out by THE COMPANY has a legitimate, specific and explicit purpose.
The purposes for which personal data may be processed by THE COMPANY are as follows:
- Management of advertisements published on THE SOCIETY's platform (creation, verification, distribution, deletion, etc.);
- Putting tenants and landlords in touch with each other;
- Management of user accounts;
- Management and follow-up of requests for information made;
- Management and follow-up of sales and service provision;
- Management and follow-up of applications transmitted via the website;
- Management of navigation on the website.
Personal data will only be processed by THE COMPANY if one of the following conditions is met:
- your consent to the processing operations has been obtained;
- the existence of our legitimate interest, or that of a third party, which justifies us implementing the processing of personal data concerned;
- the performance of a contract binding us to you requiring us to implement the processing of personal data concerned;
- we are bound by legal and regulatory obligations which require the implementation of the processing of personal data concerned.
Respecting the right to be forgotten, THE COMPANY ensures that data is only kept in a form that allows identification of the persons concerned for as long as is necessary for the purposes for which it is processed.
For each of the processing operations carried out, THE COMPANY undertakes to collect and process only data that is adequate, relevant and limited to what is necessary for the purposes for which it is processed.
When placing an order for services with THE COMPANY, creating a customer or user account, submitting a request via THE COMPANY's online contact form, and/or any other contractual commitment with THE COMPANY, you are informed of the processing of personal data that is essential for the provision of THE COMPANY's services.
The data collected by THE COMPANY is processed by computer entry and is the subject of detailed information (nature of the data collected, purpose of processing, retention period and data transfer) by THE COMPANY to the persons concerned.
The personal data collected is kept for the time strictly necessary to achieve the purposes for which it was collected. Once the data has been stored in an active database, THE COMPANY may store the data in an intermediate archive if this is justified by the purposes of the processing or by legal and regulatory obligations.
The main retention periods applicable to data processing carried out by THE COMPANY are as follows:
- Three months for prospects from the last contact with THE COMPANY.
- Five years for data relating to advertisements published on THE COMPANY's platform.
- Three years for customers from the end of the contractual relationship with THE COMPANY.
- Three months for candidates from the end of the recruitment process with THE COMPANY, or, with their consent, for a period of two years.
- Data entered on the ETERNALL STORIES platform is kept for the duration of your use of the platform and until your user account is deleted. In the event of deletion of your user account, your data will be deleted on expiry of the applicable limitation periods.
You may request deletion of your user account and associated data by contacting us at the address given below. However, there are certain exceptions where we may refuse a request for deletion, for example, where the collection of your personal data is required to comply with a legal obligation or to establish, exercise or defend legal claims.
- For accounting and financial records, ten years from the end of the relevant accounting period.
However, an exception is made to the foregoing retention periods in the case of information required to fulfill legal obligations.
An exception is also made to the foregoing retention periods in relation to tracers, as detailed in Article 5 of this policy.
THE COMPANY ensures that data is, where necessary, updated and that procedures are implemented to ensure that inaccurate data is deleted or rectified.
In order to optimize its operation, THE COMPANY is developing a website that uses analytical tracers to measure the site's audience for various purposes (performance measurement, detection of navigation problems, optimization of technical performance or ergonomics, estimation of server power requirements, analysis of content consulted). These tracers are necessary for the functioning and day-to-day operations of a website.
THE COMPANY makes every effort to provide Internet users with all the prior information necessary to obtain their informed, free, specific and unambiguous consent, and in particular all the distinct purposes of each tracker and the identity of those jointly responsible for processing, within the meaning of CNIL deliberation no. 2020-091 of September 17, 2020 adopting guidelines relating to the application of article 82 of the amended law of January 6, 1978 to read and write operations in a user's terminal (in particular to "cookies and other tracers").
THE COMPANY does not use cookies without the express consent of the persons concerned, except for the use of cookies exempt from the requirement to obtain consent, namely :
- tracers intended for authentication with a service,
- tracers storing the choice expressed by users on the deposit of tracers,
- tracers having a purpose strictly limited to the sole measurement of the audience on the site or application for the exclusive account of the publisher, and serving solely to produce anonymous statistical data, the personal data collected cannot be cross-referenced with other processing or transmitted to third parties.
Once consent to the deposit of cookies has been given, it is possible to revoke this consent at any time.
The retention period for this information is limited to a maximum of 13 months, and you have the option of objecting to the collection of tracers on your web browser.
You can delete cookies from your computer via your web browser.
Below are the different procedures after opening your Internet browser:
If you use Firefox:
- Click on the icon with 3 bars in the top right-hand corner - Then "Options"
- In the "Privacy" tab, click on "Delete specific cookies"
- Click on the "Delete all cookies" button, or on "Select the desired cookies" and delete the cookies
If you use Internet Explorer :
- Click on the cogwheel icon at top right
- Then "Internet options"
- In the "Privacy" tab, click on the "Sites" button
- Then on the "Delete all" button, or select the desired cookies and "Delete"
If you use Chrome :
- Click on the icon with 3 small dots in the top right-hand corner
- Then "Settings"- Select "Advanced settings" at the bottom of the page-
- Paragraph "Privacy and security"
- Then "Content settings"
- Then "Cookies"
- Select "Show all cookies and site data"
- Click on "Delete all", or delete the desired cookies by clicking on the trash can icon in the corresponding line
If you use Safari :
- Open Safari
- Click on Safari in the menu bar
- Select "Preferences"
- Select the "Privacy" tab
- Click on "Delete all website data" in the "Cookies and other website data" field
- Click on "Delete" to confirm
- Restart Safari
THE COMPANY attaches particular importance to the security of personal data.
Technical and organizational measures appropriate to the degree of sensitivity of the data are implemented to protect it against malicious intrusion or accidental loss, destruction or damage that could undermine its confidentiality or integrity.
When developing and designing, or selecting and using, the various tools that enable personal data to be processed, THE COMPANY ensures, where appropriate with the publishers of such tools, that they provide an optimum level of protection for the data processed.
THE COMPANY thus implements measures that comply with the principles of protection by design and protection by default of the data processed. To this end, THE COMPANY is able to use pseudonymization or encryption techniques whenever possible and/or necessary.
When using a service provider, THE COMPANY will only pass on personal data to the latter once it has imposed compliance with its own security principles.
THE COMPANY also carries out regular audits of its own services and those of its service providers, in order to verify the application of data security rules.
THE COMPANY applies strict empowerment policies that ensure that the data it processes is transmitted only to persons authorized to have access to it.
To accomplish the purposes for which the data is collected, your personal data is communicated to THE COMPANY's staff, and to its partners and subcontractors.
When THE COMPANY needs to transfer data outside the European Economic Area, it does so only under specific arrangements that comply with the requirements of Chapter V of the RGPD. Thus, when the third country to which data is transferred does not benefit from an adequacy decision, THE COMPANY ensures that appropriate safeguards are put in place, in particular by concluding standard contractual clauses.
When THE COMPANY needs to transfer data outside the European Union, it does so only within the framework of specific contractual provisions and in compliance with the requirements of the competent supervisory authorities.
THE COMPANY is particularly concerned about respecting the rights of persons affected by the data processing it implements and therefore recognizes the existence of the following rights:
- the right to information and transparency;
- the right of access;
- the right of rectification;
- the right to erasure ("right to be forgotten");
- the right to limitation of processing;
- the right to portability;
- the rights of opposition ;
- the right to define directives relating to the retention, erasure and communication of personal data after death;
- the right to lodge a complaint with the CNIL at the following address https://www.cnil.fr/fr/plaintes
THE COMPANY also acknowledges that, except in the specific cases listed in the applicable regulations, individuals have the right not to be the subject of a decision based exclusively on automated processing, including profiling, likely to produce legal effects on the data subjects or to affect them in a similar significant way.
THE COMPANY is able to respond to requests to exercise the rights of the persons concerned throughout the processing, in compliance with the conditions and deadlines laid down by the applicable regulations.
Requests to exercise rights by the person concerned are made, unless otherwise requested, by e-mail to the following address: rgpd@eternallstories.com
On this occasion, you may be asked to prove your identity by communicating your surname, first name or any other information enabling us to verify your identity, such as your customer number or user name.
