Privacy policy

In accordance with the General Data Protection Regulation (hereinafter, the “GDPR”), Docaposte Institute informs you that we place the protection of Personal data at the heart of our business and the services we offer you.

This Policy sets forth the principles and guidelines for the protection of Personal Data for users of the web site https://www.docaposteinstitute.com/.

  • Cookies : file stored by a server in a user’s terminal (computer, telephone, etc.) and associated with a web domain name. This file is automatically sent back for subsequent contacts with the same domain ;

 

 

  • Data Controller : means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law ;

 

  • Data Processor : means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller ;

 

  • Data Recipient : means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing ;

 

  • Data Subject : a natural person who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity. In the context of the Docaposte Institute website, the natural person visitor is the Data Subject; ;

 

  • Personal Data or Data : refers any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person ;

 

  • Personal data breach : means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed ;

 

  • Processing of personal data : means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction ;

 

  • Processing Purposes or Processing : the main purpose for which personal data is used. Data is collected for a well-defined and legitimate purpose and is not further processed in a way that is incompatible with this initial purpose ;

 

  • Retention period : period imposed by law and/or chosen by the data controller, after which personal data may be destroyed ;

 

  • Sub-processor : means the natural or legal person, public authority, department or other body to which the Data Processor has delegated the performance of Personal Data Processing operations granted to him on behalf of the Data Controller and in accordance with its instructions.

 

  • Transfer of Personal Data or Cross-border processing : any transfer of data, carried out by any means of communication, copying or moving data via a network or medium, regardless of the type of medium, from European territory to a country outside the European Union.

Your Data is processed by DOCAPOSTE INSTITUTE, a subsidiary of the DOCAPOSTE Group with a capital of 480.000€, whose registered office is located at 45-47 Bd Paul Vaillant Couturier 94200 IVRY-SUR-SEINE, chaired by Olivier ROUS and whose Unique Identification Number is 813 058 542 (RCS of Créteil).

The main purpose of processing personal data on the Docaposte Institute website is to promote Docaposte Institute’s solutions and services.

The personal data collected by the website may be used for different sub-purposes, depending on the pages consulted. We may process your personal data for the following sub-purposes :

  • Sending and processing the contact and registration forms generated. These forms enable you to register for a training session, request a quote or ask for further information about a training course;
  • Sending newsletters to registered users;
  • Writing and publishing comments on the Docaposte Institute blog (with photos of the persons concerned);
  • Deposit of cookies and session and third-party trackers (Matomo and Captcha) on the terminal of visitors to the website.

The legal basis for the processing of your personal data is the consent gave by web site visitors.

In order to carry out the Purposes of the processing, Docaposte Institute is required to process sets of Personal data that can be linked directly or indirectly to its users. The sets of Personal data processed by Docaposte Institute are as follows :

 

Processing purposes Personal Data Processed Personal data Retention period
Sending and processing forms to the relevant departments of Docaposte Institute. The forms are as follows :

  • Registration for training sessions ;
  • Request for a quote;
  • Request for information.
 Data relating to the civil status and identity of visitors to the site : surname, first name, e-mail address, telephone number ;

Data relating to the professional and educational life of trainees.

 Customer data : stored for the duration of the contractual and pre-contractual relationship.

Data relating to prospective customers : stored for 3 years from the last contact from the prospective customer.
Delivery of the newsletter (communications and management of unsubscriptions). Data relating to the civil status and identity of Users : surname, first name, e-mail address, etc. ;

Subscriber list : Data subjects unsubscribed from Docaposte Institute communications.

 Until the registrant unsubscribes from the newsletter using the unsubscribe link at the bottom of the email. Opposition kept for 3 years on the opt out pushers list.
Cookies deposited on the devices of visitors to the website to optimise the User experience and compile statistics. Data relating to the User’s browsing of the website : title of pages consulted, URL of pages, date of consultation, browsing behaviour, etc.

Connection data : IP address of website visitor, session ID.

 The retention periods for cookies are set out in the website’s cookie policy.

 

At the end of the retention period, your Personal Data is securely and manually deleted. When the deletion is done, a formal report is drawn up.

The data subjects concerned by the processing of personal data at https://www.docaposteinstitute.com/ are visitors to the website, customers and prospective customers.

Personal Data processed by Docaposte Group is hosted within the European Union (EU) or the European Economic Area (EEA).

Your Personal Data are not transferred outside the European Economic Area.

Considering the Purpose of this Processing, the Data processed on the Docaposte Institute website is intended for Docaposte Institute’s dedicated employees, in particular the account managers, Docaposte Institute’s sales team and the employees in charge of managing this website. The following Subcontractors and Third Party Data Recipients are used for specific Processing Purposes and Sub-Purposes :

Third Party – Data Recipient Type of Processing performed Transfer of Personal Data
OVH Third party hosting provider for the Docaposte Institute website Not concerned

Your Personal Data is stored in appropriate conditions of security and confidentiality, Docaposte Institute having deployed a security policy providing for organizational and technical measures that comply with the state of the art and applicable standards.

The legal basis of the Processing carried out by Docaposte Institute is the consent of visitors, which may affect the rights and freedoms of the data subject. With regard to this legal basis of processing, we remind you that you can exercise the following rights, according to the European legislation on data protection:

 

  • Right of access : you have the right, without prior justification, to ask directly to Docaposte Institute to access the Personal data concerning you. Thus, any user will have the right to access the Data recovered by contacting the service in charge of data protection;

 

  • Right to rectification of your personal data : in case of Processing of your Personal data, Docaposte Institute implements appropriate measures to guarantee the accuracy of your Data and their update for the Purposes for which they were collected. If your Personal data are inaccurate or incomplete, you have the right to obtain their rectification;

 

  • Right to erasure of your personal data : you have the right to request, in certain specific situations, that Personal data concerning you be erased. This right to erasure may be exercised by Data subjects when :
  • Your Data is used for Prospecting purposes;
  • Your Data is no longer necessary for the purposes for which it was initially collected or processed ;
  • Your Data is processed unlawfully ;
  • Your Data must be deleted to comply with a legal obligation ;

 

  • Right to data portability : you have the possibility of recovering part of your Personal data in an open and readable format for re-use for personal purposes ;

 

  • Right to object or right to withdraw consent : You have the right, at any time, to object to your Data being processed.

 

Depending on the situation, one or more of these rights may not be exercised, for example:

  • If there are compelling legitimate grounds for continuing to process your Personal data ;
  • If your Personal Data are necessary for the establishment, exercise or defense of legal claims ;
  • If a legal obligation requires us to retain your Data.

 

For all requests relating to the exercise of your rights, you may contact Docaposte Institute at the following address: mesdroits.rgpd@docaposte.fr

We remind you that you have the right to lodge a complaint with the supervisory authority, la Commission Nationale de l’Informatique et des Libertés (CNIL).

The appointment of a data protection officer demonstrates the importance that the Docaposte-La Poste Group places on the protection, security and confidentiality of its clients’ personal data.

If you have any questions concerning this confidentiality policy and the data processing activity of Docaposte Institute, or if you would like to exercise your GDPR rights, please contact:

  • By post:
    DOCAPOSTE
    Pôle PRIVACY-RGPD
    45-47 boulevard Paul Vaillant Couturier
    94200 Ivry-sur-Seine
    FRANCE
  • By email: privacy@docaposte.fr

This Privacy Policy may be modified in whole or in part at any time by Docaposte Institute. Users will be informed of any changes to this policy and/or to the Processing of personal data.

 

Last updated on 29/10/2024.