Privacy and Cookie Policy

1. Scope

Scan-Match / Captag places the utmost importance and care on protecting privacy and personal data, as well as complying with legal provisions in this regard.

The European Regulation on the protection of personal data (GDPR) requires that personal data be processed lawfully, fairly, and transparently. Thus, this privacy policy (hereinafter referred to as the "Policy") aims to provide you with simple, clear information about the processing of personal data concerning you, particularly in the context of your browsing on our website, the use of our web app (hereinafter referred to as the "platform"), or participation in events we organize. If you have any questions or complaints regarding Scan-Match / Captag's compliance with this Policy, our DPO is available to address all your requests, including exercising your rights under the French Data Protection Act and the GDPR, related to your personal data. You can contact them by email at: dpo@captag.fr.

2. Data Controller

In the context of all our activities, Scan-Match / Captag collects and uses personal data related to you, natural persons (hereinafter referred to as "data subjects").

For some of the processing activities carried out, Scan-Match / Captag determines the means and purposes as the data controller within the meaning of the regulations on personal data, particularly Regulation EU 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

3. Data Processor

In the context of your participation in events or your browsing on our platform, Scan-Match / Captag collects and processes personal data on behalf of the data controller benefiting from the service. This data controller is most often the event organizer who uses the services of Scan-Match / Captag.

For these processing operations, Scan-Match / Captag acts as a data processor within the meaning of the regulations on personal data, particularly Regulation EU 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

4. What data do we collect and how?

In the context of our various activities, you provide us with certain information about yourself, some of which may identify you ("personal data"). This is particularly the case when you browse our platform, visit our website, or apply to us...

The categories of personal data collected about you may vary depending on the relationships you establish with Scan-Match / Captag, the main ones being:

• Identification data: this includes any information that would allow us to identify you, such as your name, first name, phone number, postal or email address, as well as any information provided by you in the context of your contact request and, if applicable, the content of the message, as well as any information subsequently communicated during your exchanges with Scan-Match / Captag.
• Personal life data: family situation, number of children.
• Professional life data: job, activity category, workplace, skills.
• Connection data: these are all the information we need to access your personal account, such as the password and other information necessary for authentication and account access, as well as your browsing data, such as your IP address or your activity history on our platforms.

Scan-Match / Captag ensures that the collection of your personal data is relevant, adequate, not excessive, and strictly necessary for its activities.

You are informed that certain information is essential to benefit from our services (for example, when you fill out a collection form, this information is marked with an asterisk). If you do not provide it, we will not be able to provide you with the relevant services.

5. Why do we collect your personal data and how?

We collect your personal data for specific purposes and based on different legal grounds.

We may also process and retain certain personal data to fulfill our legal or regulatory obligations, and to enable us to exercise our rights (e.g., filing a claim before any court) or for statistical or historical purposes.

6. Do we share your personal data?

Your data is transmitted to Scan-Match / Captag's internal services and organizing companies, only when strictly necessary for the purposes described above.

We may also, for certain processing purposes, share your data with our service providers, including:

• Hosting providers;
• Technical maintenance and support service providers;
• Mailing service providers;
• Customer support providers…

However, this data sharing is only carried out when necessary for the performance of our contract with you. Furthermore, only the information they need to perform the service is communicated to them. They contractually commit not to use the data for purposes other than those initially intended. We make every effort to ensure that these third parties maintain the confidentiality and security of your data.

Finally, your data may also be transmitted to legal or regulatory authorities to comply with our legal obligations.

In these last two cases, as with service providers, only the necessary data is provided, and we make every effort to maintain their confidentiality and security.

We do not sell your data.

7. Are your data transferred to third countries?

Scan-Match / Captag strives to store personal data in France, or at least within the European Economic Area (EEA). However, it is possible that the data we collect when you use our platform or as part of our services may be transferred to other countries, for example, when some of our service providers are located outside the European Union.

In the event of such a transfer, we guarantee that the transfer is carried out:

• Either to a country ensuring an adequate level of protection, i.e., a level of protection equivalent to what European regulations require;
• Or that it is governed by standard contractual clauses;
• Or that it is governed by binding corporate rules.

8. How long do we retain your data?

We retain your personal data only for as long as necessary to achieve the purpose for which we hold this data, to meet your needs, or to fulfill our legal obligations (see 5. "Why do we collect your personal data and how?").

Retention periods vary depending on several factors, such as:

• The needs related to Scan-Match / Captag's activities;
• Contractual requirements;
• Legal obligations;
• Recommendations from supervisory authorities.

9. How do we ensure the security of your data?

Scan-Match / Captag is committed to protecting the personal data processed in the context of its activities against any loss, destruction, alteration, unauthorized access, or disclosure.

Thus, we implement all appropriate technical and organizational measures, depending on the nature of the data and the risks their processing entails, to preserve their security and confidentiality.

These measures may include practices such as limited access to personal data by Scan-Match / Captag employees based on their roles, contractual guarantees when using an external service provider, conducting privacy impact assessments, regular reviews of practices and procedures on Scan-Match / Captag's information systems, physical and/or logical security measures (secure access, authentication procedures, backups, antivirus software, firewalls, etc.).

10. What cookies do we use on our site?

10.1 What is a cookie?

Cookies are data placed on your computers or mobile devices. They are distinguishable by their unique identifiers, associated with your computers or phones. These allow you to avoid having a poor consumer experience on your favorite sites, as they remember your actions and preferences. Thus, you don't need to enter your browsing preferences each time you use a site, such as location, font, or language.

These "cookies" are stored in your computer's memory. They do not allow us to identify you; however, they record information related to your computer's navigation on the Site (the pages you've viewed, the date and time of viewing, etc.) that we can read during your subsequent visits.

For all Data Processing related to cookie collection, Scan-Match / Captag determines the means and purposes of the Processing. Thus, Scan-Match / Captag acts as a Data Controller, within the meaning of the Regulations relating to Personal Data, and in particular of Regulation (EU) 2016/679 on the protection of natural persons with regard to the Processing of Personal Data and on the free movement of such Data.

Scan-Match / Captag places the utmost importance and care on protecting privacy and Personal Data, as well as complying with the provisions of the Applicable Legislation.

This Cookies policy (hereinafter the "Policy") aims to provide you with simple, clear information on how your Data is collected through cookies placed on the website.

10.2 Are cookies placed when you browse our platforms?

During your first visit to the website, a banner informs you of the presence of these cookies and invites you to indicate your choice. Cookies requiring your consent in accordance with regulations are only placed if you accept them. You can at any time learn about and set cookies to accept or refuse them by going to the Cookie Management link at the bottom of each page of the site or by configuring your browser.

10.3 What data is collected through cookies?

The following data may be collected via cookies, related to a terminal at a given time, including:

• One or more technical identifier(s) to identify your internet box
• The date, time, and duration of a terminal's connection to a website;
• The Internet address of the page from which the terminal accesses the website;
• The type of operating system used by the terminal (e.g., Windows, MacOs, Linux, Unix, etc.);
• The type and version of the browser software used by the terminal (Internet Explorer, Firefox, Safari, Chrome, Opera, etc.);
• The brand and model of the mobile terminal or tablet;
• Possible download errors;
• The language of use of the browser software used by the terminal;
• The characteristics of the content viewed and shared;

10.4. What are the purposes of the cookies and trackers collected?

Functional cookies

They are necessary for the operation of the website and allow the use of the main functionalities of the site, including recording information between two consultations of the site on the same device. They do not require your prior consent. These cookies are essential for the proper functioning of the Site. These cookies have a validity period of 6 months.

Navigation trackers

They allow tracking your journey on the platform to identify the pages visited and the content viewed. They are only used within this platform and are only communicated to the event organizer. These trackers have a duration of 2 months from the end of the service unless explicitly requested by the organizer, for example, to maintain the platform for a longer period.

10.5. Who places cookies on the website?

The entities placing cookies on the website are:

• The publisher of the site is Scan-Match / Captag;
• The subcontractors of Scan-Match / Captag, namely the technical service providers who process your browsing Data on behalf of Scan-Match / Captag;

10.6. How to configure cookies on web browsers?

You have the choice to configure your browser to accept or reject all cookies, delete cookies periodically, or see when a cookie is issued, its validity period and content, and refuse its storage on your hard drive.

You can at any time choose to block or disable these cookies by setting the internet browser of your computer, tablet, or mobile, in accordance with the instructions established by your internet browser provider and found on the websites mentioned below:

On Microsoft Edge
Open the "Tools" menu, then select "Internet Options"; click on the "Privacy" tab then the "Advanced" tab and choose the desired level or follow this link: https://support.microsoft.com/en-us/help/4027947/microsoft-edge-delete-cookies

On Mozilla Firefox
Open the "Tools" menu, then select "Options"; click on the "Privacy" tab and choose the desired options or follow this link: https://support.mozilla.org/en-US/kb/block-websites-storing-cookies-site-data-firefox

On Safari Mac/iPhone/iPad
Choose "Safari > Preferences" then click on "Security"; In the "Accept Cookies" section, choose the desired options or follow this link: https://support.apple.com/en-us/HT201265

On Google Chrome
Open the configuration menu (gear logo), then select "Options"; click on "Advanced Options" then in the "Privacy" section, click on "Content Settings", and choose the desired options or follow this link: https://support.google.com/chrome/answer/95647?hl=en

On iOS
https://support.apple.com/en-us/guide/safari/sfri11471/mac

You can also type "cookies" in the "help" section of your browser to access the configuration instructions. For more details, you can also consult the CNIL website: https://www.cnil.fr/cnil-direct/question/198

11. What are your rights?

Regarding the personal data we collect/process, you can exercise the following rights:

• A right of access (Article 15 of the GDPR): you have the right to request access to the personal data we hold about you, and you can request a copy (learn more);
• A right to rectification: you can request rectification of any inaccurate data about you;
• A right to erasure (Article 17 of the GDPR): you can request the deletion of your personal data in certain circumstances (learn more);
• A right to data portability (Article 20 of the GDPR): under certain conditions, you can receive all personal data concerning you that you have provided to us, in a structured format. You also have the right to require us to transmit it, as far as possible, to another controller (learn more);
• A right to object to processing by invoking legitimate interests (Article 21 of the GDPR) (learn more);
• A right to withdraw consent at any time (Article 7-3 of the GDPR) (learn more);

• A right to restriction of processing (Article 18 of the GDPR): you have the right to restrict the processing of your data if:

  • You contest the accuracy of your data, until we verify their accuracy;
  • The processing is unlawful but you do not want us to delete your data;
  • We no longer need your personal data for processing purposes but you need this data to establish, exercise, or defend legal claims;
  • You have objected to processing based on related grounds while verifying whether our legitimate and compelling reasons for continuing the processing outweigh these interests;
  • If this personal data is subject to restrictions of this type, we will only process your data with your consent, or to establish, exercise, or defend ourselves against legal claims (learn more);
• A right to define the fate of your data after your death and to choose whether we communicate (or not) your data to a third party you have previously designated (Digital Republic Law) (learn more).

You can exercise all these rights by making a simple request to the Data Protection Officer (DPO) of Scan-Match / Captag, at the following address: dpo@captag.fr.

When you send us a request to exercise a right, you are asked to specify as much as possible the scope of the request, the type of right exercised, the personal data processing concerned, and any other useful information, in order to facilitate the processing of your request.

In addition, in case of reasonable doubt about your identity, proof of identity may be requested.

If you believe, after contacting us, that your rights regarding your data are not being respected, you can lodge a complaint with the French Data Protection Authority (CNIL).

12. How to contact us?

You can contact us by email at the following address: dpo@captag.fr.

13. Update of this Policy

This policy may be regularly updated to take into account changes in regulations relating to personal data.

Last updated: 07/25/2024.