Privacy Policy

1. Why Have a Privacy Policy?

We place great importance on protecting your personal data. This privacy policy explains how we collect, use, share, and protect your information in accordance with the GDPR (General Data Protection Regulation 2016/679 of April 27, 2016). We encourage you to read this policy carefully to understand how we process your personal data.

This policy applies to the entire website developed by CAREPROD, regardless of the device you use to visit the site.

We regularly update this privacy policy to reflect changes in our data processing practices or regulatory developments. We will notify you of any significant changes via our website or through other appropriate communication channels. We encourage you to review this policy regularly to stay informed about our privacy practices.

This policy supplements the legal notices.

2. Our Core Principles

Our goal is to ensure the security and confidentiality of your personal data. To that end:

CAREPROD will not sell your personal data to third parties

Your personal data will be shared with trusted third parties who help us provide our services, such as:

• Web Hosting Providers (Gandi)
• Email service providers (Microsoft)
• Newsletter providers (MailChimp

We require these third parties to respect the confidentiality of your information and to use it only in connection with the services they provide.

In accordance with the GDPR, we are committed to collecting and processing only the data strictly necessary for the intended purpose. Similarly, the data collected is retained only for as long as is necessary to fulfill that purpose.

3. Who is the data controller?

CAREPROD is the data controller within the meaning of Article 4 of the GDPR for all operations offered by the careprod.com website.

CAREPROD determines the means and purposes of the data processing necessary for the proper functioning of the careprod.com website.

CAREPROD, 447 Rue de la Tour de Candelon, 34090 Montpellier.

MailChimp is a processor within the meaning of Article 4 of the GDPR. It hosts and stores the personal data of individuals requesting assistance. For more information: https://mailchimp.com/fr/about/security/

Our subcontractors are required to comply with contractual provisions that ensure the required levels of confidentiality and security.

4. I have a question, a complaint, or I would like to exercise my rights

For any questions regarding security and personal data, or to exercise your rights of access*, rectification*, erasure*, withdrawal*, restriction*, objection* to processing, or data portability*:

You can contact us:

• Through the “Contact the DPO” contact form on the website
• By email: dpo@careprod.com
• By mail: Attention: DPO

CAREPROD
447 Rue de la Tour de Candelon
34090 Montpellier

We will get back to you as soon as possible.

For more information, please contact the CNIL (Commission Nationale Informatique et Liberté) via its website at www.cnil.fr.

*Articles 15, 16, 17, 18, 20, 21, 23, and 77 of the GDPR

5. What data do we process?

As a visitor using the contact form, we collect the following information:

• Last name, first name, email address, so that we can contact you and respond to your request;
• The phone number where you can be reached, so that we have a second way to contact you and can better discuss your project.

These required fields will be marked with a red asterisk (*).

This data will be retained for 2 years after the last contact. If the project does not move forward, the data will be deleted after one month.

When you sign up to receive the newsletter or any communications regarding CAREPROD events, we collect your last name, first name, email address, and country so that we can send you newsletters via Mailchimp, as well as any other communications, in the appropriate language (English or French).

This data is retained until you unsubscribe from the newsletter.

Mailchimp has its own privacy policy, which you can review when you sign up for the newsletter.

When you submit a request for information via the “Contact the DPO” form, we collect your last name, first name, and email address so that we can contact you and respond to your request for information or to exercise your rights.

This data will be retained for 5 years from the end of the calendar year in which the request was made (CNIL recommendations).

This data is collected based on your consent, which you may withdraw at any time by contacting us (see §4 above).

We do not use profiling techniques to analyze or predict your behavior, preferences, or other personal characteristics. If we decide to use profiling in the future, we will notify you and obtain your explicit consent before proceeding.

We are committed to processing your personal data transparently. All information regarding the collection, use, retention, and sharing of your data is provided in a clear, concise, and understandable manner. We avoid technical jargon and ensure that this information is easily accessible.

6. How is the data protected?

We take appropriate security measures to protect your personal information from loss, misuse, unauthorized access, disclosure, alteration, or destruction. We comply with the data protection requirements of the GDPR and implement appropriate technical and organizational measures to ensure the security of your information.

7. Who has access to my data?

Only CAREPROD’s internal departments will have access to your data for the purposes specified. The data may be disclosed pursuant to a decision by a regulatory or judicial authority or in accordance with the law.

Your data is not sold for commercial purposes

8. What about cookies?

CAREPROD uses functional cookies that are necessary for using the website. These cookies cannot be disabled because they are necessary for the platform to function properly:

There are optional cookies

CAREPROD does not control the cookie policies of other websites to which CAREPROD may provide links.

Mailchimp has its own cookie policy, which can be configured and viewed when you sign up for the newsletter.