2ISO, hereinafter referred to as "We", attaches great importance to the protection and respect of your privacy.
We hereby provide you with clear and accurate information about the collection and processing of personal data that you may provide to us through the www.2iso.fr website (hereinafter referred to as the "Site").
Art.1 Confidentiality rules
The general data protection regulation of 27 April 2016 (hereinafter referred to as the GDPR) applies from 25 May 2018. It imposes strict rules and conditions on companies and traders when processing the personal data of their customers and prospects, in order to protect their privacy.
Art.2 The controller
The "controller" of your personal data is 2ISO, which is responsible for the site www.2iso.fr that you visit and to which you provide data.
Art.3 Legal basis for data processing and use
We may only use your personal data for legitimate and necessary purposes (Art. 6 GDPR). In concrete terms, this means that we process your personal data, whether or not in electronic form, for legitimate purposes in the context of the contractual relationship, business and security/safety.
These purposes include, but are not limited to, the following:
Art.4 What is personal data
Personal data includes all information about you on the basis of which you can be identified (hereinafter referred to as "data"). Anonymous data, which does not allow you to be identified, is therefore not considered personal data. Your personal data may therefore include:
The processing of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, as well as the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning the sex life or sexual orientation of a natural person are prohibited.
We undertake to comply strictly with this prohibition.
Art.5 Sources and origins of personal data
In principle, the data we hold comes from you, when you fill in a form. If you do not intend to provide the mandatory or necessary information, you may lose the benefit of certain advantages and/or we may decide to terminate our services to you or we will be unable to perform the contract.
Art.6 Access to personal data - Who do we share your information with?
In accordance with the regulations in force, data may be passed on to the competent authorities on request and in particular to public bodies, exclusively in order to meet legal obligations, court officers, legal agents and bodies responsible for collecting debts, as well as in the case of the search for the perpetrators of offences committed on the Internet.
Your data is mainly for internal use. We may communicate your data to third-party companies, which will be able to process them, within the framework of legitimate reasons and in particular for the proper execution of the contract, when we call upon service providers and subcontractors to carry out the order or services provided by us (technical services, payment service, securing of payment, deliveries, sending of commercial prospecting, etc.).
We will only transmit to them the data they need to perform their services.
We will however ensure that our subcontractors comply with the RGPD regulations.
The processing of data by the latter is governed by a strict legal framework.
Art.7 Duration of data retention
We take the necessary steps to ensure that the storage of personal data for the purposes described above does not exceed the legal time limits.
Art.8 What are your rights?
We undertake to take appropriate technical and organisational measures to ensure the security of the processing of everyone's personal data (Art. 32 of the GDPR).
In accordance with the applicable laws and regulations on the protection of personal data, you have a number of rights relating to your personal data, namely:
You have the right to be informed in a concise, transparent, intelligible and easily accessible manner of how your data is processed. You also have the right to obtain confirmation that your data is being processed and, where appropriate, access to your own personal data and the right to obtain or make a copy thereof to the extent reasonable.
You have the right to obtain the rectification of inaccurate data concerning you. You also have the right to complete incomplete data.
We undertake to grant the erasure of your personal data in particular in the following cases:
You have the right to receive your data in a structured, commonly used and machine-readable format, for your own use or for transmission to a third party of your choice.
You may withdraw your consent to the processing of your data where the processing is based on your consent. Withdrawal of consent does not affect the lawfulness of processing based on consent carried out prior to that withdrawal.
The customer has the right to lodge a complaint with the Privacy Commission at any time if he/she believes that the processing of his/her personal data constitutes a breach of the GDPR.
To exercise your rights, you can contact us by e-mail: contact
Art.9 Our commitment
We aim to implement security techniques to protect stored data from unauthorised access, improper use, alteration, unlawful or accidental destruction and accidental loss.
Art.10 Procedure in case of violations
It is always possible that personal data processed in the context of the contractual relationship may fall into the wrong hands as a result of human error, computer error, etc. Where the breach poses a high risk to the rights and freedoms of the individual, we will immediately inform the individual of the facts and measures. We will ensure that the necessary steps are taken to notify the Privacy Commission of the breach in question within 72 hours of becoming aware of it, unless the breach does not present a high risk to the rights and freedoms of the individual (Art. 32-34 GDPR).
Art. 11 Consent
You give your express, informed and unambiguous consent to the processing of personal data as described in this Privacy Notice. You have the right to withdraw your consent at any time by written request. We reserve the right to amend this Privacy Notice.