Privacy Policy

ARTICLE 1: PREAMBLE 

The purpose of this privacy policy is to inform the users of the site:
On how their personal data is collected. Personal data is any information that can be used to identify a user. As such, it may include: first and last names, age, postal or email address, location or IP address (non-exhaustive list);
On the rights they have concerning this data;
On the person responsible for processing the personal data collected and processed;
On the recipients of this personal data;
On the site’s policy on cookies.
This policy completes the legal notice and the General Conditions of Use which can be consulted by users at the following address
[Insert the URL allowing access to the General Conditions of Use and the Legal Notice].

ARTICLE 2: PRINCIPLES RELATING TO THE COLLECTION AND PROCESSING OF PERSONAL DATA 

In accordance with Article 5 of the European Regulation 2016/679, personal data shall be:
Processed lawfully, fairly and transparently with regard to the data subject;
Collected for specified (see Article 3.1 hereof), explicit and legitimate purposes and not further processed in a way incompatible with those purposes;
Adequate, relevant and limited to what is necessary for the purposes for which they are processed;
accurate and, where necessary, kept up to date. All reasonable steps must be taken to ensure that personal data which are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay;
kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which they are processed
Processed in such a way as to ensure appropriate security of the data collected, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, by means of appropriate technical or organisational measures.
Processing shall be lawful only if and insofar as at least one of the following conditions is met
The data subject has consented to the processing of his/her personal data for one or more specific purposes;
The processing is necessary for the performance of a contract to which the data subject is party or for the performance of pre-contractual measures taken at the request of the data subject;
The processing is necessary for compliance with a legal obligation to which the controller is subject;
The processing is necessary to protect the vital interests of the data subject or of another natural person;
The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
The processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data prevail, in particular where the data subject is a child. 

ARTICLE 3: PERSONAL DATA COLLECTED AND PROCESSED IN THE CONTEXT OF BROWSING THE SITE 

Article 3.1: Data collected
The personal data collected within the framework of our activity are the following:
[List the data collected when using the site].
The collection and processing of this data is for the following purpose(s):
[Specify the reason(s) for which the collection of personal data is necessary in the context of your activity]
e.g.: contract management, management of the customer area, monitoring of the quality of services, sending of newsletters, etc.
Article 3.2: Data collection method
When you use our site, the following data is automatically collected:
[List of data automatically collected during the user’s simple visit to the site]
Other personal data is collected when you perform the following operations on the platform:
[List the personal data collected, and specify the purpose of the collection]
They are kept by the data controller under reasonable security conditions, for a period of : 3 years
The company may keep certain personal data beyond the above-mentioned periods in order to fulfil its legal or regulatory obligations.
Article 3.3: Data hosting
The site https://events-mas.com is hosted by :
This Site is hosted by the company OVH
SAS with a capital of €10,174,560
RCS Lille Métropole 424 761 419 00045
Code APE 2620Z
VAT NUMBER: FR 22 424 761 419
Head office: 2 rue Kellermann – 59100 Roubaix – France

Chairman: Michel Paulin
OVH SAS is a subsidiary of OVH Groupe SA, a company registered in the Lille Trade and Companies Register under number 537 407 926 and located at 2, rue Kellermann, 59100 Roubaix.
[In the event that personal data collected by the company is shared with third parties, insert a clause « Article 3.4: Transmission of data to third parties »:
« Data may be transmitted to our partners, listed below: »]
[If the site is concerned with the use of cookies, specify their use in an Article 3.5: « Cookie » policy]
ARTICLE 4: DATA CONTROLLER AND DATA PROTECTION OFFICER 

Article 4.1: The data controller 

Personal data are collected by the micro enterprise M.A.S, whose registration number is 593805093.
The person in charge of processing personal data can be contacted in the following way:
By mail to the address: 24 A rue de Genève 01210 Ferney-voltaire ;
By e-mail: contact@events-mas.com.
Article 4.2: The data protection officer
The data protection officer of the company or the person responsible is :
[Indicate the identity, address, telephone number and/or email address of the DPO].
If, after having contacted us, you believe that your « Data Protection » rights are not being respected, you can send a complaint to the CNIL. 

ARTICLE 5: THE USER’S RIGHTS REGARDING DATA COLLECTION AND PROCESSING 

Any user concerned by the processing of his/her personal data may avail him/herself of the following rights, pursuant to the European Regulation 2016/679 and the French Data Protection Act (Law 78-17 of 6 January 1978):
Right of access, rectification and right to erasure of data (laid down in Articles 15, 16 and 17 of the GDPR respectively);
Right to data portability (Article 20 of the GDPR);
Right to restriction (Article 18 of the GDPR) and to object to data processing (Article 21 of the GDPR);
Right not to be subject to a decision based exclusively on an automated process;
Right to determine the fate of data after death;
Right to have recourse to the competent supervisory authority (Article 77 of the GDPR).
To exercise your rights, please send an e-mail to contact@events-mas.com
In order for the data controller to comply with the request, the user may be required to provide certain information such as: his or her full name, e-mail address and account, personal space or subscriber number.
Consult the cnil.fr website for more information on your rights.

ARTICLE 6: CONDITIONS OF MODIFICATION OF THE PRIVACY POLICY

The publisher of the site https://events-mas.com reserves the right to modify this Policy at any time in order to ensure that users of the site comply with the law in force.
Any changes will not affect previous purchases made on the site, which remain subject to the Policy in force at the time of purchase and as accepted by the user at the time of validation of the purchase.
The user is invited to take note of this Policy each time he/she uses our services, without it being necessary to formally inform him/her of it.
This policy was updated on 30/11/2022