Privacy Policies

**Data Protection Policy**

*1. General Provisions*

The following provisions apply to all processing of personal data carried out by the data controller (hereinafter referred to as “the Controller”).

> Legal Framework – Compliance with GDPR and French Law

The Controller declares that it processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data and the free movement of such data (hereinafter referred to as “GDPR”), and French Law No. 78-17 of January 6, 1978, relating to data processing, files, and freedoms (as amended).

> Data Controller and Other Parties Involved

Florent JACQUES currently holds the position of Data Protection Officer (DPO) and is responsible for data processing.

> Recipients of Personal Data

Confidential data of our clients is solely utilized by FINKEY and its authorized partners. Under no circumstances shall LAB 0X transmit any personal information related to our clientele to third-party services or entities not covered by agreements.

> Data Transfers

The Controller refrains from transferring personal data to third countries or international organizations.

> Retention Period of Personal Data

Data will be retained for the duration authorized by law.

> Rights of the Data Subject

The individual whose personal data is collected has the right:

– To request access to personal data, rectification, erasure, or restriction of processing from the Controller,
– To object to processing,
– To data portability,
– To lodge a complaint with a supervisory authority,
– To withdraw consent at any time.

*2. Specific Provisions*

The following provisions are specific to each type of personal data processing.

> Management of Relations with Contacts, Prospects, and Clients

No personal data is processed. We only process the following professional data: title, first name, last name, phone number, email address, postal address.

Purposes – The processing of personal data aims to manage relations with our contacts and prospects. Specifically, this processing aims to provide the concerned individuals with information regarding our organization’s news, products, and services.

Legal Basis – The processing is necessary for the legitimate interests pursued, which consist of enhancing and optimizing our website for the benefit of users. It is based on Article 6(1)(f) of the GDPR. The request for data has a contractual nature. The data subject is not obliged to provide this data and can object to its processing at any time. To prevent the collection of data concerning their site usage and its processing by Google, the data subject should follow Google’s instructions: http://tools.google.com/dlpage/gaoptout.