**Data Protection Policy**
*1. General Provisions*
The following provisions apply to all processing of personal data carried out by the data controller (hereinafter referred to as “the Controller”).
> Legal Framework – Compliance with GDPR and French Law
The Controller declares that it processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data and the free movement of such data (hereinafter referred to as “GDPR”), and French Law No. 78-17 of January 6, 1978, relating to data processing, files, and freedoms (as amended).
> Data Controller and Other Parties Involved
Florent JACQUES currently holds the position of Data Protection Officer (DPO) and is responsible for data processing.
> Recipients of Personal Data
Confidential data of our clients is solely utilized by FINKEY and its authorized partners. Under no circumstances shall LAB 0X transmit any personal information related to our clientele to third-party services or entities not covered by agreements.
> Data Transfers
The Controller refrains from transferring personal data to third countries or international organizations.
> Retention Period of Personal Data
Data will be retained for the duration authorized by law.
> Rights of the Data Subject
The individual whose personal data is collected has the right:
– To request access to personal data, rectification, erasure, or restriction of processing from the Controller,
– To object to processing,
– To data portability,
– To lodge a complaint with a supervisory authority,
– To withdraw consent at any time.
*2. Specific Provisions*
The following provisions are specific to each type of personal data processing.
> Management of Relations with Contacts, Prospects, and Clients
No personal data is processed. We only process the following professional data: title, first name, last name, phone number, email address, postal address.
Purposes – The processing of personal data aims to manage relations with our contacts and prospects. Specifically, this processing aims to provide the concerned individuals with information regarding our organization’s news, products, and services.
Legal Basis – The processing is necessary for the legitimate interests pursued, which consist of enhancing and optimizing our website for the benefit of users. It is based on Article 6(1)(f) of the GDPR. The request for data has a contractual nature. The data subject is not obliged to provide this data and can object to its processing at any time. To prevent the collection of data concerning their site usage and its processing by Google, the data subject should follow Google’s instructions: http://tools.google.com/dlpage/gaoptout.