SoBenefit Privacy Policy

SoBenefit Privacy Policy

Last revised on September, 2022

In this privacy policy (the “Policy“), we inform you about the collection, use and processing of your personal data.

SoBenefit (“SoBenefit”, “we”, or “us”), SoBenefit – a French simplified joint-stock company – whose registred office is at 13 rue des Champs, 92600 ASNIERES SUR SEINE, under the RCS of Nanterre number 91068544500017, and represented by Mrs Stéphanie Denoual, is the controller of your personal data.

This Policy applies to all users of the SoBenefit website “sobenefit.com” (the “Website” or the “Site“).

If you have any questions or requests regarding this Policy or generally about how we process your data, please contact us at rgpd@sobenefit.com.

Table of Contents

1. What personal data do we collect?

1.1 Messages sent to SoBenefit via the contact form on the Website

You may contact SoBenefit by using the contact form provided on the Website for various reasons (request for information, informing of a project, etc.).

The mandatory data collected are: name and surname, company name, email address, and the content of the message that you wish to send to SoBenefit.

The mandatory data collected is necessary for SoBenefit to be able to respond to your request.

1.2 Messages sent to SoBenefit by any other means

You may contact SoBenefit by email, or by taking an appointment into our agenda.

In this context, the data is processed in order to respond to your request.

SoBenefit may, depending on the nature of your request, ask you to communicate any personal data necessary for the processing of your request, indicating, where applicable, the purpose of this collection.

2. How do we use your personal data and on what basis?

SoBenefit processes your personal data in compliance with the amended Law No. 78-17 of 6 January 1978 relating to information technology, files and freedoms and the European Regulation No. 2016/679 of 27 April 2016 on the protection of individuals regarding the processing of personal data and on the free movement of such data (together the “Data Protection Laws“).

Data will only be collected and processed by SoBenefit if there is an appropriate and relevant legal basis for doing so.

SoBenefit collects your personal data based on the performance of pre-contractual measures taken at your request (Article 6 (b) of the GDPR) to respond, communicate with you and process your requests. Where applicable, your data will be processed based on the performance of a contract between you and SoBenefit for the purpose of providing our services.

SoBenefit collects your personal data based on its legitimate interest (article 6 (f) of the GDPR):

  • For the purpose of promoting its activities, in particular by making its contact form available;
  • To contact you subsequently to offer you services related to your request and your professional activity.

 

SoBenefit may also process your personal data based on a legal or regulatory obligation.

3. With whom is your data shared?

The data collected is that which is strictly necessary and indispensable for the purposes set out in this Policy and is intended for the relevant departments of SoBenefit as well as its possible partners and subcontractors.

We may share your personal data with the following third parties, subcontractors, partners, or authorised agents:

  • The authorised personnel of SoBenefit for the purpose of processing your requests and providing our services;
  • Partners with whom we may collaborate in the processing of your requests and our service offering;
  • Our IT service providers for the purpose of maintaining and hosting your data;
  • Third parties, in order to deliver our service.

 

We may also share information about you:

  • In response to a request for information from a competent authority, if we believe that disclosure of the information is lawful or required by law, applicable regulation or legal process;
  • With law enforcement officials, judicial or administrative authorities or other authorized third parties.

 

We may also transfer your personal data to some of these recipients outside the European Economic Area (“EEA“). Where such transfers occur and the country or third party does not benefit from an adequacy decision from the European Commission, appropriate safeguards are put in place to protect your personal data.

You can obtain more information about these safeguards by contacting our data protection referent, whose contact details are set out in this Policy.

4. How long is your data stored?

Your data will be retained for a period not exceeding that necessary to fulfil the purposes set out in this Policy.

Personal data collected to process your request will only be kept for a period of one (1) year following the last contact we had with you. It will then be deleted or stored anonymously. 

If a contractual relationship is established between you and SoBenefit for the provision of our services, your data will be collected for the duration of our contractual relationship with you, plus a period of five (5) years from the end of the contractual relationship.

We may retain your data beyond the above-mentioned periods (i) to ensure compliance with legal, accounting and tax retention obligations (ii) for the preservation of evidence during applicable statutes of limitation, (iii) for the exercise of SoBenefit’s rights in the event of litigation or court action for the duration of the proceedings or investigation.

5. What are your rights?

In accordance with the Data Protection Laws, you have the following rights:

  • The right of access. You have the right to obtain a copy of your personal data.
  • The right of rectification. You have the right to have your personal data corrected if it is inaccurate or incomplete.
  • The right to erasure (the “right to be forgotten”). You have the right to have your personal data erased. However, the right to erasure is not absolute and is subject to specific conditions. We may retain your personal data to the extent permitted by applicable laws and regulations, in particular where processing remains necessary to comply with a legal obligation to which SoBenefit is subject or to establish, exercise or defend a legal claim.
  • The right to limit processing. You have the right to obtain the limitation of processing in certain circumstances (for example, when SoBenefit no longer needs your personal data for certain processing operations, but it is still necessary for the establishment, exercise, or defence of a legal claim).
  • The right to portability of personal data. You have the right, in certain circumstances, to receive the personal data concerning you that you have provided to SoBenefit in a structured, commonly used, and machine-readable format and to transmit it to another controller.
  • Right to object to the processing. You have the right to object on grounds relating to your particular situation to certain types of processing (for example, where the processing is based on SoBenefit’s legitimate interests) and without any particular grounds where the processing is carried out for commercial prospecting purposes.
  • The right to withdraw your consent. If you have given your consent to the processing of your personal data by SoBenefit, you have the right to withdraw it at any time.
  • The right to define directives as to the fate of your data after your death. You may define directives relating to the conservation, deletion, and communication of your personal data after your death.

 

You may exercise all your rights by contacting our data protection referent by email at rgpd@sobenefit.com.

You also have the right to lodge a complaint with the CNIL:
Commission Nationale de l’Informatique et des Libertés (« CNIL »)
3 Place de Fontenoy – TSA 80715 – 75334 Paris CEDEX 07

You may opt out of receiving commercial offers from SoBenefit by following the instructions in the messages sent to you.

6. Privacy Policy Changes

Although most changes are likely to be minor, we may change this Privacy Policy from time to time, and in our sole discretion. We encourage you to frequently check this page for any changes to its Privacy Policy. Your continued use of the Website after any change in this Privacy Policy will constitute your acceptance of such change.

See also:
In addition to this Privacy Policy, we also have our Terms of use.