1. General provisions The following provisions concern all processing of personal data carried out by : Redevco France The purpose of this document is to inform you of the way in which Redevco France uses and protects personal data, as well as the reasons for which it processes such data. 2. Legal framework All personal data processing carried out in connection with the distribution of products and services offered by Redevco France complies with the applicable regulations on the protection of personal data. In the course of its activities, Redevco France processes personal data. This data includes that of its employees as well as that of third parties, customers, partners, suppliers and any other organization in contact with Redevco France. Such processing is carried out in accordance with current legislation, and in particular the provisions of : – Law no. 78-17 of January 6, 1978, as amended, relating to information technology, files and freedoms, – The Charter of Fundamental Rights of the European Union, particularly chapter 2, Convention 108 of the EU, concerning the protection of individuals with regard to the automated processing of personal data, along with its additional protocol. General Data Protection Regulation (Regulation EU 2016/679 of April 27, 2016) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, referred to as the “GDPR.” 3.Commitment to Compliance Redevco France is committed to ensuring a high level of protection for the personal data of any individual whose data it processes. The company specifically commits to adhering to the following principles : – personal data are processed lawfully, fairly and transparently; Personal data is collected for specified, explicit, and legitimate purposes and is not further processed in a manner incompatible with those initial purposes. Personal data is stored in an adequate, relevant manner and limited to what is necessary for the purposes for which it is processed. Personal data is accurate, kept up to date, and all reasonable measures are taken to ensure that inaccurate data, in relation to the purposes for which it is processed, is erased or rectified without delay. Redevco France implements appropriate technical and organizational measures to: Respond promptly and efficiently to individuals wishing to exercise their rights. Ensure an appropriate level of security against risks inherent to its processing operations. Comply with regulatory requirements and protect the rights of data subjects. Offer its employees, clients, and partners products and services that respect privacy by design and by default. The company Redevco France contractually imposes the same level of commitment and data protection on its subcontractors (service providers, suppliers, etc.). Finally, Redevco France commits to complying with any other principles required by the applicable regulations on personal data protection, particularly regarding the rights granted to data subjects, the retention periods of personal data, and obligations related to cross-border data transfers. 4. Purpose and Nature of Collected Data As the data controller, Redevco France processes personal data to manage its relationships with clients and prospects. These processing activities are necessary for the use and management of various information forms and are based on your prior consent. The collected data is intended for the relevant departments of Redevco France or, where applicable, for its subcontractors and service providers. These subcontractors and service providers are bound by confidentiality obligations and may only use your data in accordance with our contractual provisions and applicable legislation. The term “Personal Data” refers to all information, whether nominative or not, that allows the direct or indirect identification of the User. The term “processing” refers to any operation or set of operations performed, whether or not by automated means, on personal data or sets of personal data.

5. Data Retention Period – Exercising Rights

Personal data may be stored for no longer than is necessary for the purposes for which it was collected, in accordance with current legal and regulatory requirements.

At the end of this period, they will either be deleted, or securely archived when required by law.

In accordance with the General Data Protection Regulation (GDPR) and applicable national legislation, you have the following rights to your personal data:

• Right of access: You may request access to information concerning you.
• Right of rectification: You may request the correction of any inaccuracies in your data.
• Right to erasure: You can request the deletion of your data under certain conditions.
• Right to object: You may object to the processing of your data for legitimate reasons.
• Right to restrict processing: You may request to limit the use of your data.
• Right to portability: Where applicable, you may request to receive your data in a structured, machine-readable format.

To exercise these rights, please contact us at communication@bpm-rivoli.fr. We undertake to process your request as quickly as possible and in compliance with legal obligations.

In the event of a dispute, you may lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL) or any other competent authority.