1. Personal data collected by Uptale for the purpose of providing the Services
1.1. Data controller – Data collected and purposes
Uptale collects Users names, first names and email addresses for the purpose of creating user accounts. This processing falls within the framework of Article 6(1)(f) of Regulation of the European Parliament and of the Council of 27 April 2016 on data protection (the “GDPR”), according to which processing is lawful when it is necessary for the purpose of performing a contract.
In addition, Uptale collects Public Users’ names, first names and email addresses when they access an Experience to send them emails for the purpose of marketing, to the extent that they have given their consent to such a survey.
1.2. Recipient of the collected data
The collected data is processed exclusively by Uptale and its service providers.
1.3. Users’ Rights
The User is informed that he or she has, in accordance with and within the limits of articles 5, 16, 17, 18 and 20 of the GDPR, a right of access, rectification and erasure of his or her personal data, as well as a right to object to the processing of his personal data. He or she also has a right to limitation and portability of his personal data. The User may exercise his or her rights with Uptale at the following address: email@example.com. The User also has the possibility to send specific instructions concerning the use of his or her data after his or her death.
The User is also informed that he or she may, in accordance with article 77 of the GDPR, file a complaint with the French Personal Data authority (the “CNIL”) if he or she considers that the personal data processing operated by Uptale constitutes a violation of the GDPR.
1.5. Retention of personal data
The personal data of the User are kept for as long as the User accesses the Site as well as during the applicable statutory limitation period and/or retention and archiving required by the regulations in force.
2. Personal data collected by the Client in the context of Experience
Any further processing of personal data made in connection with the use of the Services is carried out under the responsibility of the Client Company. For more information, the User can contact the Client Company.