Our Privacy Statement
1. Personal data collected by Uptale for the purpose of providing the Services
1.1. Data controller – Data collected and purposes
The Data controller is:
Uptale SAS, 128 rue La Boétie, 75008 Paris – France
Uptale collects Users’ names, first names and email addresses for the purpose of creating user accounts. This processing falls within the framework of Article 6(1)(f) of Regulation of the European Parliament and of the Council of 27 April 2016 on data protection (the “GDPR”), according to which processing is lawful when it is necessary for the purpose of performing a contract.
In addition, Uptale collects Public Users’ names, first names and email addresses when they access an Experience to send them emails for the purpose of marketing, to the extent that they have given their consent to such a survey.
Each computer connected to the Internet has an IP address. As soon as a User navigates on the Site, Uptale collects the IP address of the User and associated activity logs in order to analyze the traffic on the Site and to control the activity of the User on the Site to make sure that this one does not run acts likely to damage the Terms of Use. This processing falls within the framework of Article 6(1)(f) of the GDPR, according to which processing is lawful where it is necessary for the legitimate interests of the controller.
The legitimate interests of the controller are:
- the assistance to client companies for the needs of the good execution of a contract
- commercial prospecting
- fraud prevention
1.2. Recipient of the collected data
The collected data is processed exclusively by Uptale and its service providers.
1.3. Users’ Rights
The User is informed that he or she has, in accordance with and within the limits of articles 5, 16, 17, 18 and 20 of the GDPR, a right of access, rectification and erasure of his or her personal data, as well as a right to object to the processing of his personal data. He or she also has a right to limitation and portability of his personal data. The User may exercise his or her rights with Uptale at the following address: hello@uptale.io. The User also has the possibility to send specific instructions concerning the use of his or her data after his or her death.
The User is also informed that he or she may, in accordance with article 77 of the GDPR, file a complaint with the French Personal Data authority (the “CNIL”) if he or she considers that the personal data processing operated by Uptale constitutes a violation of the GDPR.
1.4. Use of cookies by Uptale
When User navigates on the Site, Uptale may use cookies to (i) facilitate navigation on the Site, (ii) make statistics that are stored on the device used by the User in order to connect to the Site and (iii) send the User information that may be of interest to him or her. The User can set his device to accept or refuse cookies, either according to the person issuing cookies, or systematically. The User can also set his device so that the acceptance or refusal of cookies are proposed punctually.
1.5. Retention of personal data
The personal data of the User are kept for as long as the User accesses the Site as well as during the applicable statutory limitation period and/or retention and archiving required by the regulations in force.
All transfers outside the European Union, in countries not presenting an adequate level of protection, that Uptale’s service providers who process personal data on its behalf are likely to perform are covered by appropriate safeguards such as binding corporate rules.
1.6. Selling personal data to third parties
We do not sell personal data to third parties.
1.7. Collected personal information and sources
The solution has collected the following categories of Personal Information from its consumers within the last 12 months:
- Identifiers: User input, Received from the Identity Provider of the customers (if an SSO integration is in place), Authentication Token, Authentication Cookies, Telemetry
- Inferences: Data collected when a user plays an Uptale Experience
1.8 Personal information disclosed for a Business Purpose
The solution has disclosed for a Business Purpose the following categories of Personal Information from its consumers within the last 12 months:
- Identifiers
- Inferences
2. Personal data collected by the Client in the context of Experience
Any further processing of personal data made in connection with the use of the Services is carried out under the responsibility of the Client Company. For more information, the User can contact the Client Company.