Data Protection Policy

1.What is the purpose of the data protection policy?

1. Given the relationship of trust that exists between Digital Virgo Entertainment and its customers, Digital Virgo Entertainment has wished to set out its personal data protection policy with regard to data protection regulations by taking into account the European Union standards in this matter and more particularly the General Data Protection Regulation (“GDPR”) [1].

2. With this data protection policy, Digital Virgo Entertainment undertakes, within the framework of its activities and in accordance with the regulations in force, to protect the privacy of its prospects and customers (the “data subjects”) by ensuring the protection, confidentiality and security of the personal data collected.

3. Digital Virgo Entertainment further undertakes to have suitable financial, human and technical means to safeguard the data subjects’ human dignity, legitimate interests and fundamental rights.

4. The main objective of this data protection policy is to concentrate in a single document clear, simple and precise information concerning the data processing operations carried out by Digital Virgo Entertainment, in order to enable the data subjects to understand what information and personal data (hereinafter referred to as the “personal data”) are collected, how they are used and what their rights are with regard to these personal data.

5. Digital Virgo Entertainment reserves the right to amend this data protection policy at its sole discretion and at any time, in accordance with applicable data protection regulations.

2.Governance of personal data

6. Digital Virgo Entertainment has developed a personal data governance policy.

7. This policy includes all the guidelines, rules, procedures, and practices implemented by Digital Virgo Entertainment to take into account the requirements of regulations relating to the use and protection of personal data, whose guiding principles are presented in this policy.

8. In this context, Digital Virgo Entertainment has designated a Data Protection Officer (DPO).

9. The task of the DPO is to ensure compliance with data protection regulations and to liaise with the Data Protection Authorities and all data subjects in relation to the collection or processing of personal data.

10. The DPO can be contacted by any interested person at the following postal address: “Service RGPD – 350 rue Denis Papin 13594 Aix en Provence Cedex 3 France” or at the following email address “service-rgpd@digitalvirgo.com”.

3.Definitions

“anonymisation” means “the result from processing personal data in order to irreversibly prevent identification”[2];

“controller” means the person or body which, alone or jointly with others, determines the purposes and means of the processing of your personal data;

“online services” means digital services offered by Digital Virgo Entertainment, such as website, applications, or associated services;

“providers” should be construed in the broadest sense and means in particular service providers, subcontractors working with Digital Virgo Entertainment;

“processing of personal data”: means any operation or set of operations in relation to such data, whatever the mechanism used.

“products or services” means all products and services, including technological products and services (websites, applications and associated services) offered or to be offered by Digital Virgo Entertainment;

“profiling”[3] means “any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements”;

“prospect” means any person who has contacted Digital Virgo Entertainment to obtain information about a product or service offered by Digital Virgo Entertainment.

“collect” means to obtain personal data. Data may be collected in particular by means of questionnaires or replies to messages;

“consent” means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;

4.When does Digital Virgo Entertainment collect personal data?

11. Personal data may be collected primarily in the context of:

the entry into contact with Digital Virgo Entertainment;

the customer’s use of any Digital Virgo group’s products and services, including technological services (website, application, and associated services);

the relationship between Digital Virgo Entertainment, its prospects, and its customers;

the performance of contracts;

the performance of legal or regulatory obligations relating to the activity of the Digital Virgo group and having an impact on the protection of personal data, such as tax obligations, audit, fight against fraud,...;

and those relating to the management of the commercial relationship in particular at the time of complaints, or satisfaction surveys; ...

5.What are the categories of data processed by Digital Virgo Entertainment?

12. Personal data means any information relating to a natural person which permits to identify him or her, directly or indirectly.

13. The data collected by Digital Virgo Entertainment may be divided into the following main categories: contact data, identification data, civil status, photos, data linked to the use of the services, payment data.

14. Personal data may include an individual’s first and last name, telephone number, photograph, video recording, messages exchanged, postal address, email address, computer’s IP address, type of device used.

5.1Declarative personal data

15. Declarative personal data are those provided by the data subjects and collected by Digital Virgo Entertainment in the context of commercial or contractual relationships.

16. The data come mainly from the data subjects and the persons authorised by the data subjects to transmit them to Digital Virgo Entertainment.

17. For example, the data subject may be asked to provide personal data relating to his or her family situation as well as his or her full name and contact details. These data can be collected through electronic forms (on website or mobile applications) or paper forms or through answers to questions asked for example by an employee of the Digital Virgo group.

5.2Personal data related to the functioning of the Digital Virgo group’s products and services

18. Personal data may arise from the use by the data subjects of the Digital Virgo group’s products and services or may relate to operations carried out via the products and services offered by Digital Virgo Entertainment in the context of its relationship with the data subject.

19. For example, information is collected on the communications with the customer service, or the connection to the services offered, or the use of online services (use of applications).

5.3Personal data from third parties

20. The personal data processed may also come from:

service providers;

public or supervisory authorities;

subcontractors, providers of the Digital Virgo group or third parties if their personal data protection policies allow it;

other products or services provided by third parties to which the data subjects have subscribed and/or for which they have authorised sharing with Digital Virgo Entertainment.

last name, first name;

sex;

sex searched;

languages;

date of birth: age;

nationality/place of origin;

number of children;

email address;

mailing address;

telephone number;

alias (identifier encrypted by the mobile telephone operator allowing contact to be made by SMS);

data relating to related persons (children, parents, spouses);

connection and consultation data to electronic applications (IP, device, logs, tracers);

photos;

messages exchanged on community services or with the customer service;

SMSs sent or received;

conversations with the customer service;

calls to value-added services;

bank details/RIB;

identity card;

telephone bills.

the improvement of the marketing knowledge of the data subjects;

the improvement of products and services;

segmentation, profiling, direct marketing, marketing segmentation.

5.4Public personal data

21. Digital Virgo Entertainment may collect public personal data concerning the data subjects.

22. Public personal data are personal information or data that are produced or received by an administrative or public authority as part of its public service task, that are published by an administrative authority or that can be communicated to any person upon request.

23. Digital Virgo Entertainment may use public information or personal data where permitted by law or regulation and in compliance with the specific rules of communication and re-use specified by such law or regulation.

5.5Personal data calculated or inferred byDigital Virgo Entertainment

24. Digital Virgo Entertainment may generate or calculate new personal data on the basis of declarative personal data or data related to the functioning of technological tools.

25. This is in particular used to know its customers, to adapt its products and services, to personalize the offers that can be made to customers, in which case Digital Virgo Entertainment may define commercial or marketing profiles, segments.

5.6Special categories of data

26. Special categories of personal data are data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, personal genetic data, personal biometric data for the purpose of uniquely identifying a natural person, personal data concerning health or personal data concerning a natural person’s sex life or sexual orientation.

27. These special categories of personal data, which must be subject to special attention, are not processed by Digital Virgo Entertainment; in the event that their processing becomes necessary, Digital Virgo Entertainment undertakes to process them under the conditions laid down by the regulations relating to the protection of personal data.

28. It may happen that the data subject chooses to provide Digital Virgo Entertainment with some of this information such as his or her racial origin, sexual orientation or religious beliefs, in which case the fact of choosing to provide this information constitutes consent to its processing.

6.What are the personal data processed by Digital Virgo Entertainment?

29. Digital Virgo Entertainment processes the following main personal data in relation to user:

7.Who are the recipients of the data collected by Digital Virgo Entertainment?

7.1When Digital Virgo Entertainment is acting as a controller

30. The personal data collected, as well as those that will be obtained later, are intended for Digital Virgo Entertainment in its capacity as the data controller.

31. Digital Virgo Entertainment ensures that the personal data of the data subjects are only accessed by authorised persons and only when necessary for the performance of their tasks.

32. Some personal data may be sent to third parties to comply with legal, regulatory or contractual obligations or to legally authorised authorities.

33. The categories of recipients of the data include: customers, Digital Virgo group companies, financial and accounting departments, legal department, sales department, internal customer relationship service, technical providers, service providers in charge of customer relations.

7.2When Digital Virgo Entertainment is acting as a processor

34. As part of its contracts with its partners, Digital Virgo Entertainment may collect and process data on behalf of its partners, who act in in these cases as the controllers and end recipients of the data collected.

35. Digital Virgo Entertainment ensures that the same security measures are in place for such processing and data as for those where Digital Virgo Entertainment is the controller.

8.How long does Digital Virgo Entertainment keep the personal data?

36. Personal data are stored in Digital Virgo Entertainment’s information systems or those of its subcontractors or providers. Subject to transmission to third parties, personal data are stored in a data centre and processed in Europe.

37. As a matter of principle, Digital Virgo Entertainment undertakes to choose subcontractors and providers who meet the best quality and security criteria and provide sufficient guarantees in terms of reliability, security and resources to implement technical and organisational measures.

38. Lastly, Digital Virgo Entertainment knows at all times the place where its data are hosted in order to be able to demonstrate compliance to the competent supervisory authorities.

9.Guiding principles for the protection of personal data

39. The GDPR has strengthened the duty to provide information to data subjects whose personal data are collected.

9.1Lawfulness, fairness and transparency

9.1.1Lawfulness

40. Digital Virgo Entertainment will not process data unlawfully, with the understanding that lawfulness is assessed in the light of one of the conditions described below.

41. Consent of data subject. Digital Virgo Entertainment may carry out processing where the data subject has given consent to the processing of his or her personal data for one or more specific purposes.

42. Such consent may be given by a written statement, including by electronic means, or an oral statement, or when using the services.

43. Performance of the contract or taking steps prior to entering into a contract. Digital Virgo Entertainment may carry out processing where processing is necessary for the performance of the contract.

44. For example, processing is implemented within the framework of the performance of the contract when maintaining and managing contracts, such as with reimbursements or management of unpaid invoices.

45. Legal and regulatory obligations. Digital Virgo Entertainment may carry out processing where processing is necessary for compliance with its legal or regulatory obligations.

46. These legal or regulatory obligations include, for example, those relating to the control and monitoring regarding the internal control to which Digital Virgo Entertainment is subject and, more particularly, banking and tax obligations.

47. In this context, it may be required to request specific information concerning certain operations if required by law or regulation and to transmit personal information and data to third parties.

48. Legitimate interests of Digital Virgo group. Digital Virgo Entertainment may carry out processing where processing is necessary for the purposes of the legitimate interests pursued by the Digital Virgo group or a third party.

49. The legitimate interests pursued by Digital Virgo Entertainment are diverse but may consist in particular of:

50. Such processing operations are carried out taking into account the interests and fundamental rights of the data subjects. As such, they are accompanied by measures and guarantees to ensure the protection of the interests and rights of the data subjects and allow a balance with the legitimate interests pursued by Digital Virgo Entertainment.

9.1.2Fairness and transparency

51. Digital Virgo Entertainment undertakes to provide fair, clear and transparent information.

52. Digital Virgo Entertainment undertakes to inform the data subjects of each processing operation it carries out by means of information notices.

9.2Specified, explicit and legitimate purposes

53. Personal data are collected and processed by Digital Virgo Entertainment for specified, explicit and legitimate purposes at all times.

54. Committed to guaranteeing the ethics and security of the personal data of its customers, Digital Virgo Entertainment uses personal data in accordance with the terms of this data protection policy.

55. Digital Virgo Entertainment uses all or part of the personal data for the following main purposes:

taking steps at the request of the data subjects prior to entering into a contract;

managing contracts and relationships with its customers;

managing exchanges with Digital Virgo group’s partners in the context of complaints or requests sent to it;

managing its activities (e.g. internal and external audit) and compliance with legal obligations;

managing, protecting and securing tools, websites and applications;

measuring quality and satisfaction;

improving the services provided;

developing service innovation;

executing solicitation operations;

developing trade statistics;

managing data subject’s requests in relation to their rights;

managing unpaid debts, litigation, fight against fraud, money laundering and terrorist financing, and tax evasion;

managing people’s opinions on products, services or content;

getting customer knowledge.

9.3Adequacy, relevance and restriction

56. For each processing operation, Digital Virgo Entertainment undertakes to ensure that the processing operations are adequate and to collect and process only data that are strictly necessary for the purpose pursued.

9.4Data accuracy

57. Digital Virgo Entertainment is committed to ensuring that the data collected are complete and as up-to-date as circumstances permit.

58. Data subjects have the right to exercise their right to rectification, under the conditions given below, if they become aware of the existence of inaccurate data.

9.5Storage period and restriction

59. Digital Virgo Entertainment undertakes that it will not keep personal data longer than is necessary to fulfil the purposes for which they are stored or no longer than the period provided for by the regulations relating to the protection of personal data.

No.

Categories of personal data

Rules for active storage

Customer and prospect file management

For customers: for the duration of the contractual relationship and 3 years thereafter

For prospects: 3 years from the last contact from the prospect

Analytics statistics

26 months

Newsletter management

Until unsubscription

Photos

Until deleted or 6 months after unsubscription or 3 years after last service access

Messages or recordings

1 year

60. After the end of the retention period, the data will be deleted from Digital Virgo Entertainment’s information system.

9.6Commitment to security and confidentiality

61. Digital Virgo Entertainment undertakes to implement security measures appropriate to the degree of sensitivity of the personal data to protect them against any malicious intrusion, loss, alteration or disclosure to unauthorised third parties.

62. All Digital Virgo Entertainment’s premises in which personal data are processed are protected electronically and/or manually against intrusion by unauthorised third parties.

63. Digital Virgo Entertainment has adopted internal policies and processes implementing measures that comply with the principles of personal data protection by design and by default.

64. For example, it may apply pseudonymisation of personal data as soon as this is possible or necessary.

9.7Rights of data subjects

65. The individuals whose data are processed are granted the following rights, unless otherwise legally required from Digital Virgo Entertainment:

the right of information;

the right of access;

the right to rectification;

the right to erasure or the right to be forgotten;

the right to portability;

the right to object;

the right to restriction of processing;

the right to question;

the right to give guidelines for the storage, erasure and communication of personal data after their death.

9.7.1Procedures for exercising these rights

66. If you have any questions or requests regarding the processing of personal data by Digital Virgo Entertainment, please contact: service-rgpd@digitalvirgo.com

9.7.2Right to lodge a complaint

67. The data subjects have the right to lodge a complaint with a supervisory authority, without prejudice to any other administrative or judicial remedy.

68. The data subjects may lodge this appeal with the Data Protection Authorities.

9.8Automated decision-making

69. Data subjects are informed of the possibility of using their personal data for automated processing, including for profiling purposes.

70. “Profiling” means “any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements”.[4]

71. Data subjects have the right not to be subject to a decision based solely on automated processing, including profiling, where such a decision produces legal effects concerning them or similarly significantly affects them. This right does not apply if the decision is necessary for entering into, or performance of, a contract between the data subject and Digital Virgo Entertainment or is based on the data subject’s explicit consent.

72. The automated processing of personal data carried out in the circumstances mentioned above may only be carried out by Digital Virgo Entertainment on condition that suitable measures have been implemented by it to safeguard the data subject’s rights and freedoms and legitimate interests

73. Furthermore, data subjects have the right to demand human intervention or to express their point of view or to contest the automated decision taken.

9.9Profiling

74. Digital Virgo Entertainment may use personal data, in particular personal contact data as well as other information and data transmitted for commercial and advertising purposes, including for internal analyses and statistics, to improve its products and services and to send information and offers relating to Digital Virgo Entertainment’s products and services, such as SMS, newsletters and other advertising messages to the data subjects.

75. The consent of the data subjects is always required for this type of processing.

9.10Framework for transfers outside the European Union

76. The personal data that European citizens have transmitted to Digital Virgo Entertainment in accordance with the agreed purposes are transferred to a country inside the European Union or outside the European Union.

77. In case of transfers to a country outside the European Union, rules have been put in place to ensure the protection and security of the data.

78. In all cases, Digital Virgo Entertainment undertakes to take all necessary and appropriate measures to ensure the security of personal data.

79. These personal data may be communicated, at the request of the data subjects, to official bodies and to authorised administrative or judicial authorities, or to third parties.

10.Special processing

10.1Cookies and other tracking technology

80. When we talk about cookies or other tracking technology, we mean the technology placed and read for example when you consult a website, read an email, install or use software or a mobile application, whatever the type of device used.

81. In order to improve the use and functionalities of its websites, Digital Virgo Entertainment uses various types of cookies or other trackers such as pixel tags, some of which may automatically record and transmit personal data to Digital Virgo Entertainment’s websites.

82. Digital Virgo Entertainment has set up a cookies policy for its websites. For more information please refer to the Cookie Policy available on the site during your visit.

10.2Plug-in and social modules

83. The access to and use of Digital Virgo Entertainment’s websites or applications by the data subjects may give third party service providers access to personal data.

84. These features are not activated automatically and require the express permission of users. For example, if the user uses certain features, Digital Virgo Entertainment’s websites may connect and transmit personal data to social networks such as Facebook, Twitter or Instagram.

85. Because these social networks use your data inter alia for tracking and advertising purposes, Digital Virgo Entertainment recommends that you consult those networks’ data policies and take measures to increase the confidentiality of your data.

[1] Reg. (EU) 2016/679 of 27 April 2016

[2] WP29 Opinion 05/2014 on Anonymisation Techniques of 10 April 2014

[3] Regulation (EU) 2016/679 of 27-4-2016: OJEU 2016 L 119 p.1 ff., 4(4).

[4] Regulation (EU) 2016/679 of 27-4-2016: OJEU 2016 L 119 p.1 s., Art. 4(4).

Cookies Information

During your browsing experience, our site may retrieve or store information, mainly in the form of cookies, on the browser of your computer, mobile or tablet.

Our site is designed to be particularly attentive to the needs and expectations of our customers.

Here are several ways we use cookies to better meet the need and expectations of our customers : indentifying who you are and allowing you to access your account, registering your consultations, customizing the offers we offer and analyzing our traffic

This information could be about you, your preferences or your device and mainly serves to make the site work as smoothly as you would expect.

We also share information about the use of our site with our social media, advertising and analytics partners.The information does not identify you directly, but can give you a more personalized Web experience. The retention period of this information in your computer depends on the website visited.

What are the cookies and tracers used?

Different types of cookies are used on our site, each serving different purposes. Some are necessary for the use of our site.

As we respect your right to privacy, you may choose not to allow certain types of cookies. However, blocking certain types of cookies may affect your experience of the site and the services we are able to offer.

Strictly necessary cookies

These cookies are necessary for the operation of our site. They allow you to use the main features of our site (eg accessing to your account). Without these cookies, you will not be able to use our site normally. These cookies are posted by our site and only concern the functioning of our site.

You can set your browser to block or alert you to these cookies, but some parts of the site may cease to function as a result. These cookies do not store any personally identifiable information.

Analytical cookies

These are cookies that allow us to know the use and performance of our site and to improve its operation (e.g. the most frequently visited pages within the site).

All information collected by cookies is aggregated and therefore anonymous. If you do not leave these cookies, we will not know that you have visited our site, and will not be able to monitor its performance. These are mainly cookies deposited by our site.

Functional cookies

These are cookies that allow us to personalize your experience on our site. They also allow you to benefit from our personalized advice and promotional offers according to your origin of navigation (for example if you come from our partner sites). They can also be used to provide you with features that you have requested.

Advertising cookies

These are the cookies used to present you advertisements or to send you information adapted to your centers of interests on our site or outside our site while browsing the Internet. They are used to limit the number of times you see an advertisement and help measure the effectiveness of an advertising campaign. We do not sell your data or reveal your identity to advertisers.

The refusal of these advertising cookies has no impact on the use of our site. However, refusing advertising cookies will not result in stopping advertising on our site or on the Internet. This will only result in an ad that does not reflect your interests or preferences.These cookies mainly depend on the advertising agencies. We cannot list them exhaustively. We do not sell your data or reveal your identity to advertisers.

Advertising targeting

We inform you that we can use advanced targeting features such as "retargeting" (Displaying advertisements on sites you browse outside of our site or email contact - following the consultation of products on our site). These functionalities made possible by the use of cookies are proposed by partners, to present you advertisements better adapted to your needs and in connection with your recent behavior on our site. You can stop targeting at any time by rejecting advertising cookies in your browser or through the preference managers of the ads offered by the partners or in the unsubscribe links in the emails.

How to set the deposit of cookies?

Your choices are never final. At any time, you can disable all or some cookies according to the methods described below.

Setting up your browser software

For the management of cookies and your choices, the configuration of each browser is different. We inform you that by setting your browser to refuse cookies, some features of the site will not be accessible. We will in no way be held responsible.

For Internet Explorer™ : http://windows.microsoft.com/fr-FR/windows-vista/Block-or-allow-cookies,

For Safari™ : https://support.apple.com/kb/PH17191?locale=fr_FR&viewlocale=fr_FR,

For Chrome™ : http://support.google.com/chrome/bin/answer.py?hl=fr&hlrm=en&answer=95647,

For Firefox™ : http://support.mozilla.org/fr/kb/Activer%20et%20d%C3%A9sactiver%20les%20cookies,

For Opera™ : http://help.opera.com/Windows/10.20/fr/cookies.html,

Setting up your smartphone

iOS : https://support.apple.com/fr-fr/HT201265,

Android : https://support.google.com/chrome/topic/3434352,

Setting an audience measurement cookie

If you do not want our site to store cookies in your browser for audience measurement purposes, you can click on the following deactivation link that will save a cookie within your browser that only deactivates them:

Google Analytics : https://tools.google.com/dlpage/gaoptout?hl=fr

Setting an advertising cookie

You can manage the use and exploitation of these cookies by visiting the advertising cookies management platform offered by advertising professionals: http://www.youronlinechoices.com/fr/controler-ses-... and following the instructions given therein. You will be able to know the companies registered on this platform offering you the possibility to refuse or accept the cookies used by these companies used to determine browsing information and advertisements that may be displayed on your device.

For Tradelab : http://tradelab.com/vie-privee-2/

For Acxiom : http://www.acxiom.fr/a-propos-d-acxiom/information...

Setting a social network cookie

Facebook : https://www.facebook.com/help/568137493302217

Twitter : https://support.twitter.com/articles/20171551-vos-...