STRATEGIC RESEARCH (“STRATEGIC RESEARCH”, “our”, “we”, and “us”) and our partners respect your privacy.
We ask you to please read this privacy policy carefully to understand how your personal data is collected, processed, and stored when you use the STRATEGIC RESEARCH website, accessible via the URL strategicresearch.fr.
The term “personal data” refers to any information related to an individual that allows them to be identified, directly or indirectly, from a single piece of data or the combination of a set of data.
All personal data collected on this website are processed under the responsibility of the company STRATEGIC RESEARCH, a limited liability company with a share capital of €105,000, registered in the Paris Trade and Companies Register under number 478153513, with its registered office at 17 Boulevard Malesherbes, 75008 Paris, France, and in compliance with Law No. 78-17 of January 6, 1978, relating to information technology, files, and freedoms, in its current version, as well as Regulation (EU) 2016/679 of April 27, 2016, relating to the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
In the sense of the applicable personal data regulation, STRATEGIC RESEARCH is therefore the data controller.
This privacy policy describes:
- How STRATEGIC RESEARCH uses your personal data;
- How STRATEGIC RESEARCH shares your personal data;
- How STRATEGIC RESEARCH protects your personal data;
- Where STRATEGIC RESEARCH hosts and transfers your personal data;
- How you can exercise your rights related to your personal data;
- Updates to the privacy policy;
- How to contact us.
I. How STRATEGIC RESEARCH Uses Your Personal Data
STRATEGIC RESEARCH may use your personal data for the following purposes:
- To carry out actions necessary for the management of contracts, invoices, and customer relationship monitoring;
- To publish and manage your reviews and/or comments left on the website;
- To send you our newsletter, if you have subscribed to it;
- To respond to your contact request made from our website;
- To establish a loyalty program;
- To offer you advertisements and content tailored to you;
- To compile a file of users, prospects, and customers;
- To develop commercial statistics and site traffic analysis;
- To manage unpaid bills and potential disputes;
- To comply with our legal obligations.
The processing of your personal data is carried out as part of a pre-contractual contact approach, based on your consent to be contacted to discuss our offers and obtain a quote. You may withdraw this consent at any time and request that we delete your information and cease contacting you.
When you voluntarily provide us with personal data, the collection of your personal data is based on the following legitimate interest: better responding to your information requests.
The processing of your personal data to send you our newsletter is, however, based solely on your consent to receive our newsletter, which you can withdraw at any time. If you do not consent to the sending of the newsletter, please note that this will not prevent you from creating your customer account and placing orders on our website.
II. How STRATEGIC RESEARCH Shares Your Personal Data
Within STRATEGIC RESEARCH, and with respect to each processing purpose, personal data concerning you are collected, processed, and stored by authorized STRATEGIC RESEARCH staff, only within the scope of their respective competencies, particularly by customer service, the marketing department, and the IT department.
We do not share personal data with other companies, organizations, and individuals unless one of the following circumstances applies:
(1) Sharing with prior consent: after obtaining your consent, STRATEGIC RESEARCH will share the information you have authorized with specific third parties or categories of third parties identified at the time of collecting your consent.
(2) Sharing with our service providers: STRATEGIC RESEARCH may also disclose your information to companies that provide services for us or on our behalf. These service providers include companies that offer IT services, such as our hosting provider or our email sending provider, or that conduct marketing activities on our behalf. These service providers may use your information only for the purpose of providing services on behalf of STRATEGIC RESEARCH.
(3) Sharing in execution of a legal obligation, in accordance with laws and regulations: STRATEGIC RESEARCH may share your information as stipulated by laws and regulations, to resolve legal disputes, or as required by judicial or administrative authorities under the law.
STRATEGIC RESEARCH will ensure the legality of any sharing of personal data through data processing clauses with the companies with which your personal data are shared, obliging them to comply with this privacy policy and to take appropriate security and confidentiality measures when processing personal data.
III. How STRATEGIC RESEARCH Protects Your Personal Data
STRATEGIC RESEARCH attaches great importance to the security of your personal data and has adopted industry-standard practices to protect your personal data and prevent unauthorized access, disclosure, use, alteration, damage, or loss of this information.
We have also taken the necessary precautions to preserve, through our hosting provider, the security and confidentiality of the data, and in particular to prevent them from being distorted, damaged, or disclosed to unauthorized persons.
STRATEGIC RESEARCH also adopts the following organizational measures:
(1) We adopt reasonable and feasible measures to ensure that the personal data collected are minimal and relevant to what is necessary for the purposes for which they are processed.
(2) We retain your personal data for the duration that is strictly necessary for the purpose of the processing, unless the retention of your data is required or permitted by law. For example, we retain data related to the execution of your orders for the duration required by law for the retention of accounting records, namely a maximum of 10 years from the concerned fiscal year.
(3) We deploy access control mechanisms to ensure that only authorized personnel can access your personal data.
In the event of a personal data breach, STRATEGIC RESEARCH will comply with the legal and regulatory requirements applicable to the notification of personal data breaches to the competent supervisory authorities and/or affected individuals.
IV. Where STRATEGIC RESEARCH Hosts and Transfers Your Personal Data
Your personal data will be hosted within the hosting infrastructures of our hosting provider, OVH, located in France.
Some third parties to whom we communicate your personal data are located in third countries outside the European Union, particularly in England and the USA.
When such transfers exist, we ensure that these transfers of personal data are framed in accordance with applicable regulations to ensure an adequate level of data protection, either by a decision of adequacy of the European Commission or through legal instruments such as data transfer contracts incorporating the Standard Contractual Clauses of the European Commission.
For any request concerning the recipients and the transfers of data that we perform outside the European Union, please contact us at the addresses indicated in the “How to Contact Us” section below.
V. How You Can Manage Your Rights Relating to Your Personal Data
You have the right to access, rectify, erase, limit, oppose the processing of your personal data, and the right to define directives concerning the fate of your data after your death and the right to the portability of your personal data.
The CNIL defines personal data as “any information relating to an identified or identifiable individual. But because they concern individuals, they must retain control over them.”
You also have the right to appeal to the National Commission on Informatics and Liberty (CNIL) for France and to a competent supervisory authority for any other Member State according to your usual residence, your place of work, or the place where the infringement of your rights was committed if you believe that the processing of your data does not comply with the applicable texts. This appeal can be exercised without prejudice to any other recourse before an administrative or judicial jurisdiction, which also constitutes a right you have.
You can contact us at any time at the addresses indicated in the “How to Contact Us” section below to exercise your rights concerning personal data under the conditions set by applicable regulations. You must indicate which right you intend to exercise and all the necessary details for us to respond to your request.
These rights are exercised under the conditions set by applicable regulations.
- The right of access means that you can ask us at any time to indicate whether we are processing personal data concerning you and, if so, to indicate what personal data is concerned and the characteristics of the processing(s) carried out.
- The right to rectification means that you can ask us to rectify your personal data when they are inaccurate. You can also request that your personal data, when incomplete, be completed to the extent that this is relevant to the purpose of the processing in question.
- The right to erasure means that you can request the erasure of your personal data, particularly when:
- Their retention is no longer necessary for the purposes for which they were collected;
- Your personal data are processed on the basis of your consent, you wish to withdraw this consent, and there is no other legal basis that could justify the processing;
- You have opposed the processing of your personal data and consequently wish them to be erased;
- Your personal data have been unlawfully processed;
- Your personal data must be erased to comply with a legal obligation provided for either by European Union law or French law.
- The right to limitation means that you can ask us to limit the processing of your personal data:
- When you contest the accuracy of your personal data for a period allowing us to verify the accuracy of these data;
- When following a processing established as non-compliant, you prefer the limitation of processing to the complete erasure of your personal data;
- When we no longer need your personal data for the purposes of the processing but these data are still necessary for you for the establishment, exercise, or defense of legal claims;
- When you have objected to the processing of your personal data and you wish for a limitation of the processing during the period allowing us to verify whether the legitimate reason you invoke justifies it.
- The limitation of processing means that the processing of your personal data will then be understood as the sole storage of your corresponding personal data. We will then no longer perform any other operation on the considered personal data.
- The right to object means that you can object to the processing of your personal data when this processing is based on the pursuit of the legitimate interest of STRATEGIC RESEARCH. The right to object is exercised subject to justifying a legitimate reason related to your particular situation. We will then cease the processing in question unless there are legitimate and compelling reasons justifying the continuation of the processing in accordance with applicable regulations.
- The right to define directives concerning the fate of your data after your death allows you to make known your instructions concerning the retention, erasure, and communication of your personal data after your death.
- The right to portability means that you can ask us, under the conditions set by applicable regulations, to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit them to you, or to ask us to transmit them directly to a third party of your choice when this is legally and technically possible.
When we process your personal data based on your consent, you finally have the option to withdraw your consent at any time by contacting us at the addresses indicated in the “How to Contact Us” section or by clicking on the unsubscribe link present in each of our communications.
However, the withdrawal of your consent does not affect the validity of the processing carried out before this withdrawal.
VI. Updates to This Privacy Policy
STRATEGIC RESEARCH reserves the right at any time to modify or update, in whole or in part, this privacy policy, due to changes in applicable data protection regulations or data processing carried out.
Any substantial modification to the privacy policy will be notified by email when you have provided us with a valid email address and will be published on the website. We recommend that you regularly consult this privacy policy to have perfect knowledge of our commitments in terms of security and protection of your personal data.
VII. How to Contact Us
If you have any questions, comments, or suggestions, please contact us
- by email, at the following address: dpo@strategicresearch.fr.
- or by postal mail to STRATEGIC RESEARCH, 17 Boulevard Malesherbes, 75008 Paris, France.
If you are not satisfied with the response provided by STRATEGIC RESEARCH to a request for the exercise of rights in accordance with section V above or if you wish to report an infringement of the applicable data protection regulations, you have the right to file a complaint with the CNIL by mail (CNIL – 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07) or on its website (www.cnil.fr), or with the data protection authority of the country in which you reside or habitually work.
