PRIVACY POLICY

1. Where does your personal data come from?

The personal data we are likely to process comes from :

• Data that you communicate when you use our Site and/or when we exchange information by telephone, e-mail or otherwise;

This includes, for example, the data you enter in forms when you request a demonstration of our services.

• Data that we collect by means of cookies and/or equivalent technologies;

These cookies and other tracers record and transmit information to us about the pages you visit, the time you spend on our Site, the searches you perform, the actions you take, etc.

2. What information do we process?

We process some or all of the following data:

• Information about your identity (your title, surname(s), first name(s), postal address, e-mail address, landline and/or mobile telephone number, etc.);
• Information about your professional activity, such as the position or functions you hold within the entity that employs you, or your professional contact details: e-mail address, telephone number, etc. 
• Data to monitor our commercial relations 
• Information related to your browsing on the Site, such as URLs of pages visited, your browsing path to - on - or from our Site (including date and time of browsing), page response time, error messages, data related to your interaction with our Site (page scrolling, your clicks, your mouse cursor, etc.).

We do not process any sensitive data about you (your religion, political opinions, health, trade union membership, sexual preferences, etc.).

We take all possible steps to prevent the collection and processing of personal data from minors under the age of 15.

3. For what purposes is your data processed?

We collect and/or process your personal data in order to :

• Manage our commercial relationship with you, if you are a customer
• Manage our prospecting operations (and thus enable you to receive, by e-mail, post, SMS, MMS or telephone, our news or offers concerning our products and/or services, our activity, our promotional operations, etc.);
• To measure the audience of our Site, to evaluate its use and to improve its contents;
• Offer you polls and surveys;
• Manage your feedback on our products and/or services or our content;
• Notify you of any changes to our Site;
• To manage your requests to exercise your rights under article 9 of these terms and conditions;
• Managing unpaid bills and disputes ;
• Anti-fraud operations.
  
  

4. What is the legal basis for processing your data?

The processing of your data is generally based on our legitimate interest in performing, improving and optimizing relations with our customers and prospects.

It may also be used to perform a contract (for example, when you subscribe to a service) or to carry out pre-contractual measures taken at your request (for example, a demonstration of a product or service or an estimate).

Lastly, some of the data we process is required by law.

However, in the following cases in particular, the processing of your data is based on your express and specific consent (which will be collected via a checkbox for example, or any other relevant positive action on your part, which will be indicated to you):

• The use of your data for commercial prospecting purposes (by e-mail, SMS, MMS, telephone, etc.). However, canvassing by e-mail will not require your consent if you are already one of our customers and if the canvassing message we are sending you concerns products or services similar to those we have already provided you with, or if we are writing to you at your business e-mail address and the subject of our solicitation is related to your business activity;
• The use of your data transmitted by certain types of cookies (including: certain audience measurement cookies);
• The re-use of your data for purposes other than those set out in article 3 hereof.

As indicated in article 9 below, you may revoke this consent at any time.

For example, if you no longer wish to receive commercial prospecting e-mails from us, you can let us know under the conditions set out in article 9 below, or use the unsubscribe function provided for this purpose in the e-mail we send you (usually a clickable unsubscribe link at the end of the message).

We will endeavour to deal with your request as soon as possible and to inform the recipients of your data accordingly.

5. Who processes your data?

The person responsible for processing your personal data is :

• Food Hotel Tech, 

The recipients of this data are :

• The authorized personnel of our company's data department, as well as their line managers;
• Authorized personnel from auditing departments (statutory auditors, departments responsible for internal control procedures, etc.);
• The authorized personnel of our partners, our subcontractors, as well as any person involved in the execution of the contract concluded with you (for example, the service providers supplying us with data hosting services), it being specified that we ensure that these persons present serious guarantees of security and confidentiality of the personal data that we transmit to them;

• Bodies, auxiliaries of justice, ministerial officers, and judicial and administrative authorities, under the conditions laid down by law;
• Any authorized person, when we are obliged to disclose and/or share your personal data in order to fulfil our legal obligations;
• The organization in charge of managing the "Do not call" list.

The use of your personal data by third parties to our company is governed by their own privacy policy.

6. Where is your data processed?

Your data is processed mainly within the European Union.

Nevertheless, when our relationships with partners, subcontractors or third parties involve cross-border exchanges of your personal data outside the European Union, we ensure that these transfers are made to countries offering an adequate level of protection, or that they are framed by legal tools guaranteeing these transfers a level of protection in line with European requirements (for example, by concluding European Commission Standard Contractual Clauses, and/or by the accession of data recipient entities to the Privacy Shield, when they are located in the United States).

In any event, you consent to your personal data being processed, under these conditions, outside the European Union.

7. How is your data protected and stored?

Safety is at the heart of our concerns.

Accordingly, we implement appropriate technical and organizational measures, including physical, hardware and software measures, to maintain the security, integrity and confidentiality of your personal data, and to protect it from unauthorized access, use, misappropriation, alteration, disclosure or destruction.

We also require our subcontractors to provide sufficient guarantees of security and confidentiality.

8. How long do we keep your data?

• Concerning data relating to the management of our customers and prospects :

Data relating to our customers will not be kept beyond the time strictly necessary to manage the commercial relationship.

We may, however, retain your data for analysis or aggregate statistical purposes, for longer than is necessary for the purposes for which we have processed it, after having irreversibly anonymized it.

If you are one of our customers, your data used for commercial prospecting purposes will be kept for a maximum period of three (3) years from the end of our commercial relationship (for example, from the expiry date of your subscription, the last contact from you, etc.).

If you are one of our prospects, not yet a customer, your data will be kept for a period of three (3) years from the date of collection or from the last contact from you (such contact corresponding, for example, to the case where you ask us for documentation or click on a hypertext link contained in one of the e-mails we send you for prospecting purposes).

At the end of this three (3) year period, we will contact you again to find out if you wish to continue receiving commercial solicitations.

In the absence of a positive response from you, we undertake to delete or archive your personal data.

• Concerning identification :

If you exercise your rights of access or rectification under article 9 below, the data relating to your identity document will be kept for a period of one (1) year.

If you exercise your right to object as set out in article 9 below, this data will be archived after a period of three (3) years.

• Concerning your bank details :

Your credit card details will be deleted once the transaction has been completed.

If you pay by credit card, your card number and its validity date may be kept as proof in the event of a dispute over the transaction, for a period of thirteen (13) months following the debit date, or fifteen (15) months in the case of a deferred debit card.

However, if you expressly consent, we may retain your credit card details for a longer period, for example to facilitate payment for future purchases. You may withdraw your consent at any time.

The data relating to the visual cryptogram of your card will not be kept beyond the time necessary to complete each transaction, including in the case of successive payments or retention of the card number for subsequent purchases.

When your credit card expires, your card details will be deleted.

Data relating to your SEPA direct debit mandate is kept for the duration of the commercial relationship and for one year thereafter, subject to the processing of any complaints.

• Concerning the management of opt-out lists:

If you exercise your right to object to receiving canvassing, the information used to take account of your right to object will be kept for a minimum of three (3) years from the date you exercise this right.

• Concerning audience measurement statistics :

The information stored in your terminal (for example, thanks to cookies), or any other element used to identify you and allow your traceability, will not be kept beyond thirteen (13) months.

New visits to our Site will not extend the life of this information.

Raw traffic data associated with an identifier will not be kept for longer than thirteen (13) months.

After this period, your data will either be deleted or made anonymous.

• Concerning your account data on our Site

When you create an account on our Site, the data will be deleted as soon as the account is deleted (subject to the aforementioned exceptions).

Your account will be considered inactive after two (2) years have elapsed since you last used it. At the end of this period, the data relating to your inactive account will be deleted, after you have been notified and given the opportunity to object.

In any event, should we continue to process your data independently of the closure of your account and the deletion of your data from it, you will have the possibility of exercising the rights referred to in article 9 below.

9. What are your rights with regard to the processing of your data?

With regard to the processing of your personal data, you have a right of access, opposition, rectification and deletion.

If you have created an account on our Site, you can modify some of your data directly in your account.

In addition, you have the right to provide us with instructions on how you wish your personal data to be handled after your death (for example, whether you wish it to be retained, deleted or passed on to a designated third party).

Finally, you can ask us to delete any personal data collected when you were a minor.

You may also exercise your right to limit processing and your right to portability of your personal data.

You also have the right to withdraw your consent to the processing of your personal data (if the processing we carry out is based on your consent).

Lastly, you may exercise your right not to be subject to a decision based exclusively on automated processing (such as profiling, for example) that produces legal effects concerning you or significantly affects you (but in this case we do not carry out such processing).

Finally, you have the right to lodge a complaint with a supervisory authority regarding the processing of your personal data (such as the CNIL).

These rights may be exercised :

• By you, with regard to your personal data ;
• By the person(s) exercising parental authority, if you are a minor;
• By your legal representative, if you are under guardianship;
• By the heirs of the deceased.  

These persons will then receive the information resulting from the exercise of these rights.

You may exercise these rights by sending us your request:

• By e-mail: hello@foodhoteltech.com ;
• By post to the following address: 9 rue Christophe Colomb, 75008, PARIS.

To process your request, we will need to know your identity.

We may therefore request a photocopy of one of your identity documents bearing your signature. We will only keep this copy for as long as is necessary to process your request (subject to the specific time limits set out in article 8 above).

You will also need to specify the address to which the reply should be sent.

Your request does not need to be justified, unless you exercise your right to object. In fact, if you exercise your right to object, you will have to justify the existence of a legitimate reason, except in the case where your data is processed for canvassing purposes, in particular commercial canvassing.

10. Modification of the privacy policy

We reserve the right to change this privacy policy at any time without notice.

We invite you to regularly consult this privacy policy available on our Site, in order to take note of any changes.

When necessary, we will notify you by e-mail of any changes to this privacy policy.

If you have any questions, please contact us using one of the following methods:

• By e-mail: hello@foodhoteltech.com ;
• By post to the following address: 9 rue Christophe Colomb, 75008, Paris

Please note that our Data Protection Officer is: Pierre-Emmanuel Servant, whose contact details will be communicated to you if necessary via one of the means of contact specified above.

You are bound by this privacy policy as soon as you continue to use our Site.