PRIVACY POLICY             


Last updated on 14th June 2023


This Privacy Policy will help you understand how and why your personal data is collected and processed by Tarmac Technologies and how to exercise your rights.


This Privacy Policy may be updated, in particular to take into account changes in our services, technologies or applicable regulations. These updates will take effect immediately when they are made available and can be consulted on our website or via our application AGOA.


  1. Data controller


    The person processing your personal data is Tarmac Technologies, a French simplified joint stock company with a capital of 20,000 euros registered with the trade and commercial register of Bobigny under n°880 562 343 00025 and having its head office at 7 place de l’Hôtel de Ville, 93600 Aulnay-sous-Bois (France), and whose legal representative is Anthoine Dusselier.


    This Privacy Policy applies to all the processing of personal data carried out by Tarmac Technologies in its capacity as data controller via its website tarmactechnologies.com and via the application AGOA.


  2. Personal data collected and sources


    The personal data we collect when you contact us or use our services may be, without this list being exhaustive, data relating to:

  3. Purpose and legal basis of the processing


    Tarmac Technologies collects personal data in particular for the following purposes:

  4. Period for which the personal data are stored


    Data subject

    Retention period

    Reason for retention period

    Clients

    3 years after the end of the business relationship

    For evidentiary purposes / To contact them

    Prospects

    3 years after the end of the business relationship.

    To answer to their request or to contact them

    Website visitors

    13 months after they were first installed on your terminal

    To allow proposer functioning of the services

    Data subject that exercise its rights

    5 years from the date of your request

    To be able to prove within the statutory limitation periods that it has complied with its obligations


  5. Recipients of personal data


    Tarmac Technologies communicates your personal data to its third party service providers.


  6. Personal data transfer


    Tarmac Technologies may transfer your personal data to countries outside the European Union.


    With regard to data hosting and storage, Tarmac Technologies requires its hosting service providers to host data in a European Union country. Tarmac Technologies databases are hosted by AWS on servers located in the European Union.

    If, for technical reasons or for specific needs, personal data is transmitted or made accessible to third parties located outside the European Union, Tarmac Technologies ensures beforehand that the latter guarantee a sufficient level of protection for this data and comply with the GDPR.


  7. Rights


    Unless stated otherwise by the applicable law or any other legal provision or applicable regulations, you may exercise the following rights:

    You may exercise these rights by sending an email to dpo@tarmactechnologies.com, indicating your first and last name and attaching a proof of identity.


    For the processing of personal data relating to employees or customers (travelers) of our clients, and that are communicated to us or provide to us in the context of the use of our services, our clients act as the controller and we act as a subcontractor within the meaning of the RGPD. It is therefore the responsibility of our clients to ensure that the rights of the persons concerned are respected and, more generally, that the applicable regulations are complied with.


  8. Cookies


    A cookie is a small text file that may be stored on your computer or mobile device that contains data related to a website you visit. It may allow a website “remember” your actions or preferences over a period of time, or it may contain data related to the function or delivery of the site. Cookies can be set by the owner of the website or in some cases by third party services the website.


    Cookies will remain stored on your computer or device until deleted or until they reach their expiry date.


    The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies we need your permission.


    There are different types of cookies.


  9. Security


    Tarmac Technologies has implemented a number of technical and organisational measures to meet the requirements of the GDPR in terms of personal data protection and security.


    Tarmac Technologies has also appointed a Data Protection Officer (DPO), Maud Payan, who is responsible for ensuring that our practices comply with the GDPR. For each new processing operation implemented by Tarmac Technologies, our DPO, as part of an internal prior validation procedure, checks its purpose and legitimacy with regard to the company's needs, but also and above all with regard to the risk of infringement of data protection and/or the privacy of the persons concerned.


  10. Contact


For any questions related to data protection and asserting the rights as listed, please do not hesitate to contact us by email : dpo@tarmactechnologies.com.


In the absence of a satisfactory response, you may contact the supervisory authority in charge of personal data protection, the Commission Nationale de l'Informatique et des Libertés ("CNIL"), located at 3 Place de Fontenoy - TSA 80715, 75334 Paris CEDEX 07.