Effective Date: March 17, 2025

(hereinafter, the "Site")

This privacy policy is intended to help you understand how your personal data is collected, processed, and stored by SITEINSIGHT via the Site.

SITEINSIGHT understands that data and privacy protection is a concern for all users visiting the Site.

SITEINSIGHT is committed, in accordance with the GDPR regulations, as defined below, to respecting your privacy and protecting your personal data, i.e., data that can directly or indirectly identify you as an individual.

The purpose of this privacy policy is to present SITEINSIGHT's commitments in this regard.

During your use of our Site and when placing an order on our Site, we may ask you to provide us with personal data concerning you.

The term "personal data" refers to all data that allows the identification of an individual, which includes your name, surname, pseudonym, photograph, postal and email address, job title, phone numbers, date of birth, data related to your transactions on the Site, details of your purchases, bank card numbers, SIRET, VAT number, IP address, as well as any other information you choose to provide us about yourself.

This policy (hereinafter the "Policy") aims to inform you about the means we implement to collect your personal data, in strict compliance with your rights.

We inform you that we comply, in the collection and management of your personal data, with Law No. 78-17 of January 6, 1978, relating to data processing, files, and freedoms, in its current version (hereinafter: the "Data Protection Act"), as well as Regulation (EU) 2016/679 of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter: the "GDPR").

The data controller of your personal data is SITEINSIGHT, registered with the Trade and Companies Register of Nanterre under number 929 093 052, with its registered office at 99 avenue Achille Peretti – 92200 Neuilly-sur-Seine (hereinafter: "We").

The legal basis for our collection of your personal data is as follows:

This collection is necessary to execute the contract concluded when you use our services on our Site;

Legitimate interest when you voluntarily provide us with personal data during your visit to our Site, the data being collected to allow us to better respond to your requests for information about our services.

Your personal data is collected to fulfill one or more of the following purposes:

Manage your access to certain services available on the Site and their use,

Perform operations related to customer management concerning contracts, invoices, and customer relationship follow-up,

Create a file of users, customers, and prospects,

Send newsletters, solicitations, and promotional messages. In case you do not wish to receive these, we give you the option to express your refusal at the time of data collection,

Develop commercial and service usage statistics,

Organize contests, lotteries, and all promotional operations, excluding online gambling and games of chance subject to the approval of the Online Gaming Regulatory Authority,

Manage reviews of products, services, or content,

Handle unpaid bills and potential disputes regarding the use of our products and services,

Personalize responses to your information requests,

Comply with our legal and regulatory obligations. We inform you, at the time of collecting your personal data, if certain data must be provided or if it is optional (indicated by asterisks on the Site).

We inform you, at the time of collecting your personal data, if certain data must be provided or if it is optional.

The following will have access to your personal data:

Our company's staff;

Control services (lawyers, accountants, etc.);

Our subcontractors (communication providers, productivity software providers, data hosting providers, payment service providers, billing providers, audience analysis and measurement providers, customer relationship management providers);

Public bodies, exclusively to meet our legal obligations, judicial officers, ministerial officers, and debt collection agencies may also be recipients of your personal data.

Regarding data related to customer and prospect management:

Your personal data will not be kept longer than strictly necessary for the management of our commercial relationship with you.

However, data necessary to establish proof of a right or a contract, which must be retained to comply with a legal obligation, will be kept for the period required by applicable law.

Regarding potential prospecting operations for customers, their data may be kept for a period of three (3) years from the end of the commercial relationship.

Personal data related to a prospect, who is not a customer, may be kept for a period of three (3) years from their collection or the last contact from the prospect.

At the end of this three (3) year period, we may contact you to find out if you wish to continue receiving commercial solicitations.

In case of exercising the right of access or rectification, data related to identity documents may be kept for the period provided by Article 9 of the Code of Criminal Procedure, i.e., one (1) year. In case of exercising the right of opposition, this data may be archived for the limitation period provided by Article 8 of the Code of Criminal Procedure, i.e., six (6) years.

Financial transactions related to the payment of purchases and fees via the Site are entrusted to a payment service provider who ensures their proper execution and security.

For the needs of the services, this payment service provider may be the recipient of your personal data related to your bank card numbers, which it collects and stores on our behalf and for our account. We do not have access to this data.

To allow you to make regular purchases or pay related fees on the Site, your data related to your bank cards is kept for the duration of your registration on the Site and at least until you make your last transaction.

Data related to the visual cryptogram or CVV2, written on your bank card, is not stored.

If you refuse that your personal data related to your bank card numbers be kept under the conditions specified above, we will not keep this data beyond the time necessary to allow the completion of the transaction.

In any case, data related to these may be kept, for the purpose of proof in case of a possible dispute of the transaction, in intermediate archives, for the period provided by Article L 133-24 of the Monetary and Financial Code, i.e., thirteen (13) months following the debit date. This period may be extended to fifteen (15) months to take into account the possibility of using deferred debit payment cards.

Regarding the management of opt-out lists for prospecting:

Information allowing us to take into account your right of opposition is kept for a minimum of three (3) years from the exercise of the right of opposition.

Regarding audience measurement statistics:

Information stored in users' terminals or any other element used to identify users and allow their traceability or attendance will not be kept beyond thirteen (13) months.

We inform you that we take all necessary precautions, appropriate organizational and technical measures to preserve the security, integrity, and confidentiality of your personal data and, in particular, to prevent them from being distorted, damaged, or accessed by unauthorized third parties. We also use secure payment systems in compliance with the state of the art and applicable regulations.

We inform you that your data is stored and kept, for the entire duration of their retention, on the servers of the company GoDaddy, located in the European Union.

Your data may be transferred outside the European Union as part of the tools we use and our relationships with our subcontractors.

This transfer is secured by the following means:

Either this data is transferred to a country that has been deemed to offer an adequate level of protection by a decision of the European Commission;

Or we have concluded with our subcontractors a specific contract governing the transfer of your data outside the European Union, based on standard contractual clauses between a data controller and a subcontractor approved by the European Commission.

In accordance with European regulations on the protection of personal data, you have the following rights:

A right of access allowing you to know at any time whether your personal data is or is not processed by our services and, when it is, to access said personal data and the information required by law regarding the processing of this data,

A right of rectification allowing you to request that any inaccuracy concerning your personal data be corrected as soon as possible,

A right to erasure, allowing you to request that your personal data be deleted as soon as possible, provided that this request for erasure complies with the conditions required by applicable law,

A right to limit the processing of your personal data, provided that this request for limitation complies with the conditions required by applicable law,

A right to data portability allowing you to receive your personal data in a structured, commonly used, and machine-readable format, or to request that this personal data be transmitted to another data controller, provided that this request for portability complies with the conditions required by applicable law,

A right to object to the processing of your personal data for reasons related to your particular situation, provided that this objection complies with the conditions required by applicable law,

The right to withdraw at any time the specific consent given to the collection of your personal data, in particular when the processing of your personal data is used for commercial prospecting purposes,

The right to define directives regarding the retention, deletion, and communication of your personal data after your death.

You have the right to obtain the limitation of the processing of your personal data, in the cases defined in Article 18 of the GDPR:

During the verification period we implement, when you contest the accuracy of your personal data,

When the processing of this data is unlawful, and you wish to limit this processing rather than delete your data,

When we no longer need your personal data, but you wish to retain it to exercise your rights,

During the verification period of legitimate grounds, when you have objected to the processing of your personal data.

It is reminded to individuals whose data is collected on the basis of our legitimate interest that they can at any time object to the processing of their data. However, we may continue the processing if there are legitimate grounds for the processing that prevail over your rights and freedoms or if the processing is necessary to establish, exercise, or defend our legal rights.

You can unsubscribe from our promotional emails via the link provided in the emails. Even if you choose not to receive promotional messages from us, you will continue to receive our administrative messages.

Your rights can be exercised at any time by sending an email to [email protected] or a letter to the following address: 99 avenue Achille Peretti – 92200 Neuilly-sur-Seine.

If you have complaints about how we process your personal data, you can contact us using the contact details provided above.

You have the right to the portability of the personal data you have provided to us, understood as the data you have actively and knowingly declared in the context of accessing and using the services, as well as data generated by your activity in the context of using the services.

We remind you that this right does not apply to data collected and processed on a legal basis other than consent or the execution of the contract binding us.

This right can be exercised free of charge, at any time, and in particular when closing your account on the Site, to retrieve and retain your personal data.

In this context, we will send you your personal data, by any means deemed useful, in an open standard format commonly used and machine-readable, in accordance with the state of the art.

You are also informed that you have the right to file a complaint with a competent supervisory authority (the National Commission for Information Technology and Liberties for France), in the Member State where your habitual residence, place of work, or the place where the violation of your rights occurred, if you consider that the processing of your personal data subject to this policy constitutes a violation of applicable laws.

This remedy can be exercised without prejudice to any other administrative or judicial remedy. Indeed, you also have the right to an effective administrative or judicial remedy if you consider that the processing of your personal data subject to this policy constitutes a violation of applicable laws.

We reserve the right, at our sole discretion, to modify this Policy at any time, in whole or in part.

These modifications will take effect from the publication of the new policy.