WHY A PERSONAL DATA PROTECTION CHARTER?
Unolia (hereinafter "we") is a website owned by Eser DENIZ's company. We place great importance on respecting the personal data of users (hereinafter "you"). We handle them with the utmost care and ensure the highest level of protection in accordance with Regulation 2016/679 of April 27, 2016, on the protection of individuals with regard to the processing of personal data and the free movement of such data (hereinafter "GDPR"), as well as the applicable legislation in this area.
This Personal Data Protection Charter (hereinafter the "Charter") informs you about:
- the personal data we collect about you and the reasons for this collection;
- how we use your personal data;
- the rights you have over your personal data and how to exercise them.
DEFINITIONS
To facilitate your reading and help you understand our Charter, here are some important definitions:
- "Adequacy Decision": a decision adopted by the European Commission under Article 45 of the GDPR, establishing that a third country (i.e., a country not bound by the GDPR) or an international organization ensures an adequate level of protection of personal data. This decision is made after observing the country's internal legislation, its supervisory authorities, and its international commitments.
- "Personal Data" or "Personal Data": any information that can be related to an identified or identifiable individual directly or indirectly. This may include a name, phone number, IP address, social security number, photo, voice recording, etc.
- "DPO": Data Protection Officer. The DPO is responsible for implementing compliance with the European data protection regulation within the organization that has appointed them for all the processing operations carried out by this organization.
- "Data Controller": a legal or natural person who determines the purposes and means of processing data. In practice and generally, this refers to the legal entity through its legal representative.
- "Processing": an operation or set of operations performed with or without the aid of an automated process applied to personal data or sets of personal data. This may include collection, recording, organization, dissemination, deletion, etc.
DATA CONTROLLER
The data controller of your personal data described in this Charter is Mr. Eser DENIZ, sole trader whose registered office is located at 10 chemin du bergeron, 27930 Huest (France). Any contact for questions related to your personal data can be made via email at the following address: dpo@unolia.com.
Mr. Eser DENIZ is the owner of the "Unolia" site (unolia.com) and all its sub-domains (*.unolia.com).
COLLECTING YOUR DATA: WHY AND HOW?
The GDPR only allows us to collect, use, and retain your personal data within a strictly limited framework. Below is a detailed list of the cases:
- The information we collect and process.
- The reasons we need to use this data.
- The retention period for this data (which varies according to objectives and any legal retention obligations).
1. Managing received messages
To best respond to your requests (information questions, customer service, complaints, etc.), Unolia has set up a communication service. Therefore, we have a legitimate interest in collecting and processing the following information:
- your email address
- your first and last name
- the information provided during the exchange
- the dates and times of the various exchanges
To ensure quality follow-up over time, we keep this data until the end of our contractual relationship. If the request is made by a User who does not use Unolia's services (i.e., without a contract binding us), this data is retained for two years from the date of the last message sent.
2. Sending newsletters
These newsletters inform you about content uploaded or upcoming, possible events organized by us or third parties related to this content, and more generally about any news concerning Unolia. They are sent to you after you subscribe to the newsletter.
To this end, we collect and process the following information:
- your email address
- the subscription date
This data is retained for two years from the day you unsubscribe from the newsletter.
3. Providing Unolia's services
Unolia is a project management service.
To ensure the best possible service and allow for the proper execution of the contract between you and Unolia, we collect and process the following information:
- your first and last name
- your email address
- your address
- your different domain names
This data is retained throughout our contractual relationship.
4. Payment of the service
When you choose to subscribe to a paid plan to benefit from Unolia's services, we issue an invoice. For this purpose, we collect and process the following information:
- your first and last name
- your billing address
- your email address
- your phone number
- the subscription date
- your customer number
- the subscribed plan
- where applicable, additional information you provide in the "Extra Billing Information" field (e.g., VAT number, SIREN number, etc.).
In accordance with Article L123-22 of the Commercial Code, we are required to retain invoices for 10 years. The information contained therein is deleted once this period has elapsed.
Important: online payment processing is handled by Stripe, a reputable and reliable company. Unolia does not have access to your payment method data or any other banking data. The collection, processing, and security of this data are guaranteed by Stripe.
5. Website traffic statistics
It is in Unolia's legitimate interest to continue improving its products and services and to better understand the interests of its visitors. Therefore, we may conduct surveys or polls. The statistical results obtained can be used for various purposes, including improving the content of our offers and developing the Unolia application and website.
To this end, we collect and process the data you voluntarily provide (during surveys and polls, when creating your account, through our electronic exchanges, etc.). This data is retained for three years from the achievement of the survey or poll objective.
In any case, the results of the processing do not allow the identification of individuals whose information has been collected and processed.
6. Security of the Unolia site
To ensure the security of its website, Unolia collects and processes the following connection data:
- your IP address
- your user agent
This data is retained for one year from the date of collection.
SHARING YOUR DATA
Unolia may entrust certain processing tasks to third parties such as service providers or subcontractors. Consequently, some of your personal data may be shared, including:
- With providers contributing to the prevention and detection of fraud (application firewalls, payment security, various website misuse, etc.)
- With providers offering online payment solutions
- With providers offering email sending solutions
- With providers offering statistical tools
- With public authorities
- In response to legal or judicial requests, for example, to meet national security requirements or to comply with a judicial decision.
Note that data sharing may also occur in specific operations affecting Unolia, such as a merger, acquisition, or sale of assets. In such cases, we may share your personal data with buyers or sellers.
Apart from the above cases, we will never share or sell your information to another organization or company. We also do not have partnerships or commercial relationships with advertising agencies.
YOUR RIGHTS
In accordance with the GDPR, you have the rights listed below, which you can exercise by sending an email to: dpo@unolia.com
1. Right of access
Upon simple request to the data controller, you have the right to know whether Unolia processes personal data about you. If so, you can request access to it and have it corrected (updated), in accordance with Articles 15 and 16 of the GDPR.
2. Right to erasure (or "right to be forgotten")
Upon simple request to the data controller, you have the right to have your personal data we process deleted as soon as possible.
The cases in which this right can be exercised are detailed in Article 17.1 of the GDPR. The cases in which the erasure of this data is not possible are mentioned in Article 17.3 of the GDPR.
3. Right to restriction of processing
Upon simple request to the data controller, you have the right to request the restriction of the processing of your personal data that we process.
The cases in which this right can be exercised are listed in Article 18.1 of the GDPR. The cases in which this right cannot be exercised are mentioned in Article 18.2 of the GDPR.
If applicable, the data controller will inform you when the restriction measure is lifted.
4. Right to object
Upon simple request to the data controller, and without needing to justify this request, you have the right to object to the use of your personal data for direct marketing purposes.
By providing a reason related to your particular situation, you can also object to the processing of your personal data that we have a legitimate interest in performing. However, as mentioned in Article 21 of the GDPR, we may not comply with your request if there are compelling and legitimate reasons to process this data that override your interests, rights, and freedoms, or if this processing is necessary to establish, exercise, or defend legal claims.
5. Right to data portability
In accordance with Article 20 of the GDPR, you have the right to retrieve your personal data that we process in a structured, commonly used, and machine-readable format. You also have the possibility to transmit this data to another data controller under the conditions provided for by Article 20 of the GDPR.
The right to data portability concerns the data
you have provided to us and the data resulting from the use of our services. This data must be processed using automated processes based on your consent or on the execution of a contract.
6. Right to define instructions on the fate of your personal data after your death
In accordance with Article 85 of the GDPR and Article 48 of the Law n°78-17 of January 6, 1978, you have the right to define instructions on the fate of your personal data after your death. In the absence of specific instructions, your heirs may exercise the rights listed above concerning your personal data.
In case of doubt, we may ask you for proof of your identity to ensure that the request comes from you. If necessary, we will also explain the reasons for our refusal to comply with your request. In this case, you have the right to file a complaint with the CNIL.
SECURITY OF YOUR DATA
Unolia attaches great importance to the security of your data. Therefore, we implement all necessary measures to ensure their confidentiality and protection. These measures include technical and organizational means (password protection, data encryption, restricted access, etc.) to prevent any unauthorized access, loss, misuse, or alteration of your data.
TRANSFER OF YOUR DATA OUTSIDE THE EUROPEAN UNION
Unolia generally processes your data within the European Union. However, some of our service providers may be located outside this area. In such cases, we ensure that these providers comply with the requirements of the GDPR concerning the protection of personal data, for example, by requiring them to provide appropriate guarantees (standard contractual clauses, binding corporate rules, etc.).
AMENDMENT OF THE CHARTER
Unolia reserves the right to amend this Charter at any time, to adapt it to changes in our services, or to comply with legal and regulatory changes. We encourage you to consult this Charter regularly to stay informed about the protection measures we implement. Any major amendment will be brought to your attention through a notice on our website or by email. The latest version of this Charter is available on our website.
Last updated: June 17, 2024