Personal data protection policy

The present policy describes the way in which personal data is collected and processed on the website cap2i.eu. This policy is subject to updates and modifications at any time in order to conform to legal and technical evolutions.

The party responsible for data processing has the role of implementing the technical and organisational measures necessary to ensure and demonstrate that data processing is carried out in accord with the General Data Protection Regulation.

In the case of this website, the party responsible for data processing is the company CAP2i, single-person simplified joint-stock company with a capital of 40000 euros, listed in the Versailles trade register under number 441 734 902, with headquarters located at 13 rue de Beauce, 78500 Sartrouville.

CAP2i is represented by its Chief Executive Officer, Erik Sabatier.

In the alternative, personal data is also gathered in order to:

• Fight against piracy, hacking and spam
• Improve navigation on the website
• Generate statistics for the website's usage

Each form limits the collection of personal data to the strict minimum necessary, and informs the user of each field's mandatory or optional nature.

A user's personal data will never be transmitted to advertisers or commercial third parties.

Hosting of personal data gathered on the present website via a dedicated server is outsourced to 1&1 Internet, provider of cloud infrastructure in accord with the CISPE code of conduct.

The CISPE code of conduct aims to ensure that a client's cloud infrastructure provider is in accord with data protection norms defined by the General Data Protection Regulation. The cloud service providers who respect the code of conduct let the clients decide whether to store and process their data entirely within the European economic area. The providers must also never access or use a client's personal data, notably for data mining, profiling or marketing purposes.

CAP2i stores a user's personal data until the account is deleted by the user within their secure private environment, or if they request the deletion of their account by contacting CAP2i.

For statistical purposes, CAP2i uses the Google Analytics service, which stores information files (cookies) on the user's device.

Upon visiting the website for the first time and in the case where the "Do Not Tracking" option is not active, the user may reject the use of these cookies by clicking "Refuse" at the bottom of the page. Otherwise, statistical analysis is activated.

The user may change this at any time by deleting the "hasContent" cookie (value TRUE or FALSE, storage duration of 13 months) in their browser settings (refer to the browser's user guide for further directions).

According to the General Data Protection Regulation (GDPR), a user has the following rights:

• The right of access (GDPR article 15)
• The right to rectification (GDPR article 16)
• The right to erasure (GDPR article 17)
• The right to withdraw consent (GDPR article 13)
• The right to restrict processing (GDPR article 18)
• The right to object to processing (GDPR article 21)
• The right to data portability (GDPR article 20)

To exert one of the previously stated rights, the user can contact the Data Protection Officer (DPO) of CAP2i at the following address: CAP2i, 13 rue de Beauce, 78500 Sartrouville or by e-mail at info@cap2i.eu, by attaching proof of identity.