Data Privacy Policy

Last update: January 2025

Introduction

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of Personal data and on the free movement of such data, otherwise known as the General Data Protection Regulation (hereinafter referred to as the GDPR) set out the legal framework applicable to the processing of Personal data. The GDPR strengthens the rights and obligations of data controllers, data processors, data subjects and data recipients.

In the course of our business, we may process Personal data and we make the protection of Personal data a requirement and a commitment.

For a proper understanding of this Policy:

Personal data means any information relating to an identified or identifiable individual; an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

Data controller means the natural or legal person which, alone or jointly with others, determines the purposes and means of the processing of Personal Data;

Data processor means the natural or legal person which processes Personal Data on behalf of the controller;

“we” and any related words refer to VusionGroup SA or any of its affiliated companies (hereinafter together referred to as VusionGroup), acting as a Data Controller ;

“you” or any related words refer to customers and/or prospective customers, partners, suppliers, visitors and/or users of our website, acting as data subjects ;

“Recipient” refers to the natural or legal persons who receive Personal data from VusionGroup. Data recipients may therefore be employees of VusionGroup as well as external bodies (partners, exhibitors, etc).

In all transparency our goal is to inform you how we process, in our role as a Data Controller and in conformity with the GDPR, your Personal data in your role as a prospect, customer, supplier, partner or as a visitor and user of all the websites managed by VusionGroup and which services are covered with this Data Privacy Policy.

In a nutshell, the information we store, and use is to enable ongoing business relations – to facilitate trading and general correspondence with you. Our information systems backup and store all information in a secure, off-site and encrypted environment which only VusionGroup can access.

Our Data Privacy Policy

Our Data Privacy Policy let you know what Personal data we may collect about you, how we use it and gives you information about your rights and how you can get in touch with us. This policy relates only to processing for which we are the Data Controller and therefore does not cover processing that is not created by us or is operated outside our governance rules (so-called “Shadow IT”), or processing for which we act as a data processor.

Processing of Personal data

This section details the Personal data we may collect, how we collect it, the purposes and the legal basis for processing such data.

3.1. Data related to prospects, visitors and users of the Websites

How we collect the Personal data	Categories of Personal data	Purpose of processing	Legal basis for processing	Retention period
From you when you exchange your business card	Name, Surname, e-mail address, job title, company	To enable contact between commercial teams	Legitimate interest of having data about our customers/prospects	For as long as is necessary to fulfill the purpose
From you by filling one of our contact form available on the website or subscribing to a newsletter	Name, Surname, e-mail address, company, job title, country of residence, any other information you chose to share with us	To enable marketing communications about our brands, services and commitments and management of unsubscription requests	Legitimate interest of having data about our customers/prospects	For as long as is necessary to fulfill the purpose or until opt-out from the data subject
From you by contacting us on social media	Name, surname, e-mail address, company, job title, country, any other information you chose to share with us	To enable contact between commercial teams	Legitimate interest of having data about our customers/prospects	For as long as is necessary to fulfill the purpose
From you or the company you represent	Name, surname, e-mail address, company, job title, country of residence, any other information you chose to share with us	To establish, exercise or defend legal claims	Legitimate interest in protecting our legal interests	Following the end of our relationship/ or contact, for as long as is necessary to fulfil the purpose
By acquiring a database with your data on it	Name, surname, e-mail address, job title, company	To enable contact between commercial teams	Legitimate interest in fulfilling our activity	For as long as is necessary to fulfill the purpose

Where necessary, VusionGroup requires the consent from the data subjects.

3.2. Data related to customers, suppliers, partners in a contractual relationship with us

How we collect the Personal data	Categories of Personal data	Purpose of processing	Legal basis for processing	Retention period
From you or the company you represent	Name, Surname, e-mail address, job title and company, financial information, and any other information you provide us	Contract management (negotiation, signature, etc of the contract) and management of the contractual relationship (billing and payment, purchase order, etc).	Legitimate interest in managing the contract with your company.	For the duration of the contract.
From you or the company you represent	Name, Surname, e-mail address, job title and company, financial information, and any other information you provide us	To fulfill legal requirements such as accounting requirements	Compliance with legal obligations	For as long as is required by law
From you or the company you represent	Name, Surname, e-mail address, job title and company, financial information, and any other information you provide us	To establish, exercise, defend and follow legal claims	Legitimate interest in protecting our company	For as long as is necessary to fulfill the purpose
From you by contacting our support teams via our website	Name, surname, e-mail address, profession phone number, company, any other information you share with us	To provide help and support while using our solutions	Legitimate interest to fulfill our contractual obligations	For as long as is necessary to fulfill the purpose

Information on the processing, by VusionGroup as a data processor, of any other Personal data collected when using one of our SaaS solutions can be found in your relating contract with VusionGroup.

3.3. Data recipient

We ensure that Personal data is only accessible to authorized internal or external recipients.

Internal recipients

External recipients

Authorized staff in the marketing, sales, customer relations, communication, administrative, legal, logistics and IT department, and their line managers ;

Authorised staff of the departments responsible for auditing (departments responsible for internal audit procedures, etc);

Our affiliates.

Partners, legal counsels, advisors, external companies or subsidiaries of the same group of companies ;

Organisations, legal authorities and regulatory bodies, court officers and public officials within the scope of their duties ;

Authorised staff of external auditors, statutory auditors, etc ;

Authorized staff of subcontractors, service providers, partners, consultants, etc.

The recipients of the Personal data are subject to an obligation of confidentiality and we ensure that they comply with the obligations of the GDPR.

In addition, Personal data may be communicated to any authority legally authorized to deal with it. In this case, we are not responsible for the conditions under which the staff of these authorities have access to and use the data.

In case of a transfer outside the EU, we take all necessary steps to ensure that your Personal data is adequately protected as required by the GDPR (e.g. by applying the EU Commission’s standard contractual clauses).

Your rights

You have the right at any time to receive information (right of access) at no charge concerning your stored Personal data, the origin and recipients of your Personal data, and the purpose for which your Personal data is processed.

You also have the following rights:

Right to withdraw your consent: when the processing of your Personal data is based on your consent as a legal basis, you have the right to withdraw your consent at any time by contacting us via the contact information listed at the bottom of this paragraph;

right to erasure: ask us to delete your data;

right to restriction of processing: you can request restriction of processing when (i) the accuracy of your data in question is contested; (ii) you don’t want the data to be erased, (iii) the data is no longer needed for the original purpose but may not be deleted yet because of legal grounds; (iv) the decision on your objection to processing is pending.

right to data portability: If we have collected your Personal data following your consent, or because we need it in order to provide you with a product or service (under a contract), you have the right to receive your Personal data back in a ‘machine-readable’ format ;

right to rectification: you have a right to ask us to correct inaccurate, incomplete or outdated data collected;

right to object: you have a right to object, on grounds relating to your particular situation, at any time to the processing of Personal data based on a legitimate interest as legal basis. We will then no longer process your Personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims;

right to lodge complaints: you have a right to lodge a complaint with the French national commission for informatics and freedoms (CNIL) if you think that our use of your Personal data does not comply with the GDPR.

In this regard, or if you have questions concerning Personal data, you can contact us at any time via [email protected]

Security

Our information systems backup and store all data in a secure, off-site, and encrypted environment which only VusionGroup can access.

We regularly review the technical and organizational security measures we have in place on our information and communications systems to prevent the loss, misuse, or unauthorized alteration of your Personal data.

The provider of the website automatically collects and stores data in so-called server log files, which are transmitted to us automatically by your browser. This information consists of:

Browser type / browser version

Operating system used

Referrer URL

Host name of the accessing computer

Time of the server request

This data cannot be associated with specific persons. A combination of this data with other data sources does not take place. We reserve the right to retroactively check this data if we become aware of solid indications of unlawful use.

Contact

VusionGroup

Legal Department – Data Protection

55 Place Nelson Mandela, 92000 Nanterre France

[email protected]