At EYELIGHTS, the protection of your personal data is a priority.
When you participate in our contest (hereinafter the "Game"), we collect personal data about you.
The purpose of this policy is to inform you about the manner in which we process this data in accordance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the "GDPR").
1.Who is the controller?
The Data Controller is eyelights, a simplified joint-stock company, registered with the Toulouse Trade and Companies Trade and Companies Under No. 819 514 118 and whose registered office is located at 308 allée du Lac in LABEGE 31670 (hereinafter "We").
2. What data do we collect?
Personal data is data that makes it possible to identify an individual directly or by cross-checking with other data.
We collect data that falls into the following categories:
- Identification data (surname, first name, email address, postal code, country);
- Data relating to your motorcycle and your hobbies.
Mandatory data is indicated when you provide us with your data. They are marked with an asterisk and are necessary to provide you with our services.
3.On what legal bases, for what purposes and for how long do we keep your personal data?
Allow you to participate in our Game
|Execution of pre-contractual measures taken at your request
Your data is kept for 3 years for prospecting purposes.
In addition, your data may be archived for probationary purposes for a period of 5 years.
Create a roster of participants
Our legitimate interest in developing and promoting our business
Your data is kept for a period of 3 years from your last contact.
Respond to your requests for information
Our legitimate interest in responding to your requests
The data is kept for the time necessary to process your request for information and deleted once the request for information has been processed.
|Manage requests to exercise rights
Comply with our legal and regulatory obligations
If we ask you for proof of identity: we only keep it for the time necessary to verify your identity.
Once the verification is completed, the credential is deleted. If you exercise your right to object to prospecting: we keep this information for 3 years.
4. Who are the recipients of your data?
Will have access to your personal data:
The staff of our company;
- Our hosting provider;
- Where applicable: public and private bodies, exclusively to meet our legal obligations.
5. Is your data likely to be transferred outside the European Union?
Your data is stored and stored for the duration of the processing on the servers of the company Facebook, located in France in the European Union.
As part of the tools we use (see article on recipients concerning our subcontractors), your data may be transferred outside the European Union. The transfer of your data in this context is secured by means of the following tools:
- either these data are transferred to a country that has been deemed to offer an adequate level of protection by a decision of the European Commission;
- either we have concluded a specific contract with our subcontractors governing the transfer of your data outside the European Union, on the basis of the standard contractual clauses between a controller and a processor approved by the European Commission;
- or we use the appropriate safeguards provided by the applicable regulations.
6.What are your rights over your data?
You have the following rights with regard to your personal data:
- Right to information:this is precisely why we have drafted this policy. This right is provided for in Articles 13 and 14 of the GDPR.
- Right of access:you have the right to access all your personal data at any time, pursuant to Article 15 of the GDPR.
- Right to rectification:you have the right to rectify your inaccurate, incomplete or obsolete personal data at any time in accordance with Article 16 of the GDPR
- Right to limitation:you have the right to obtain the limitation of the processing of your personal data in certain cases defined in Article 18 of the GDPR.
- Right to erasure:you have the right to demand that your personal data be erased, and to prohibit any future collection of it for the reasons set out in Article 17 of the GDPR
- Right to lodge a complaint with a competent supervisory authority (in France, the CNIL), if you consider that the processing of your personal data constitutes a violation of the applicable texts. (Article 77 GDPR)
- Right to define guidelines relating to the storage, erasure and communication of your personal data after your death, in accordance with article 40-1 of the Data Protection Act.
- Right to withdraw your consent at any time:For purposes based on consent, Article 7 of the GDPR provides that you can withdraw your consent at any time. This withdrawal will not call into question the lawfulness of the processing carried out before the withdrawal.
- Right to portability:under certain conditions specified in Article 20 of the GDPR, you have the right to receive the personal data you have provided to us in a standard machine-readable format and to demand their transfer to the recipient of your choice.
- Right to object:under Article 21 of the GDPR, you have the right to object
to object to the processing of your personal data. Please note, however, that we may continue to process them despite this opposition, for legitimate reasons or the defence of legal claims.
You can exercise these rights by writing to us at the contact details below. We may ask you on this occasion to provide us with additional information or documents to prove your identity.
7.Personal data contact point
Contact email: email@example.com
Contact address: 308, allée du Lac at LABEGE 31670