GN SAS organise un jeu gratuit et sans obligation d'achat dénommé « Pixooo » (ci-après le « Jeu ») et accessible à l’adresse www.pixooo.com et sur l’application mobile dédiée (ci-après le site internet et l’application pris ensemble dénommés le « Site »). La participation au Jeu est soumise à un Règlement accessible à l’adresse ICI dont les termes définis en majuscule s’appliquent à la présente Politique RGPD.
Dans le cadre de la mise en œuvre du Jeu proposé par le Site, GN SAS sera amenée à traiter des données à caractère personnel (ci-après « Données Personnelles »), à ce titre elle s’engage à respecter la vie privée des participants au Jeu et Utilisateurs du Site (ci-après participants et utilisateurs désignés ensemble “Utilisateur(s)”) et à traiter leurs Données Personnelles de manière confidentielle. Ces Données Personnelles sont collectées conformément aux dispositions du Règlement européen 2016/679 relatif à la protection des données personnelles (RGPD) et la loi n°78-17 du 6 janvier 1978 relative à l’informatique, aux fichiers et aux libertés. Les termes définis à l’article 4 du RGPD s’appliquent à la présente Politique RGPD et sont eux-mêmes mentionnés avec la première lettre en capitale. GN SAS est qualifiée de « Responsable de Traitement » et est dénommée comme tel ci-après.
As a reminder, Personal Data is any information relating to “a natural person who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an identifier online, or to one or more specific elements specific to their physical, physiological, genetic, psychological, economic, cultural or social identity” (identified or identifiable natural person).
The purpose of this GDPR Policy is to inform on the one hand on the way in which the Data Controller collects and processes Users' Personal Data and on the other hand on the means available to these Users to control this use and exercise the rights relating to it. By using the Solution, the User certifies having read and understood this GDPR Policy and accepts its conditions. This GDPR Policy applies not only to Participants in the Game but also to any User of the Site. The GDPR Policy may be subject to updates. The User will be informed of these updates by email in the event of a significant modification or by posting on the Site. In the event of a significant modification to this GDPR Policy, the User must express their clear consent regarding these changes, otherwise they must stop using the Site.
The Personal Data of Participants processed as part of participation in the Game (user account) are:
- gender
- first name
- last name
- email address (in particular for automatic notification, possible future newsletter)
- their postal address and possibly other information in order to be able to receive their winnings
- date of birth
- phone number
The Personal Data of Users processed in the context of Use of the Site are:
- last name, first name, email and telephone number when using the contact form
The collection of Personal Data is limited to the strict minimum. Consequently, only information that is relevant, adequate and limited to what is necessary for the purposes for which it is processed is collected. Other information that cannot be qualified as Personal Data is also collected and processed by the Data Controller such as: profession, etc...
The purpose of this Processing of Personal Data is to allow Users to benefit from the services offered by the Site and in particular to participate in the Game and for which the Processing of Personal Data is essential. Thus the collection and Processing of Personal Data by the Data Controller meets specific, explicit and legitimate purposes, namely:
- account management, relationship monitoring
participation in the Game
- management of Winners and Prizes
- communicate information (possible future newsletter), manage the commercial relationship
- organize marketing campaigns
- management of questions and requests for information from the contact form
The collection and processing of Personal Data is based on the consent of the User for all cases where he himself transmits his Personal Data in order to benefit from the services offered by the Site and in particular participation in the Game. This consent may be withdrawn at any time (see below 8). Collection and Processing are also based on the legitimate interest of the Data Controller, the execution of the Game Rules, and compliance with legal and regulatory obligations.
Subject to the service providers used by the Data Controller to make the Game available and operate the Site, the Data Controller is the sole recipient of the Personal Data collected and will not sell this Personal Data without the express consent of the User. . Personal Data will be processed exclusively in the territory of (i) France, (ii) and/or any other member state of the European Union, (iii) and/or any other signatory state to the Space agreement. European Economic Authority or Switzerland (iv) and/or any other State ensuring an adequate level of protection (hereinafter referred to as the “Territory”.) Furthermore, the transfer of personal data to subcontractors located outside the Territories will be governed by the signing of standard contractual clauses in their latest version proposed by the European Commission. Apart from the aforementioned cases, any transfer of Personal Data to a third country requires the prior consent of the User and is subject to compliance with the laws on the protection of personal data in force. The Data Controller’s subcontractors who may be recipients of Personal Data are:
| Identification of the service provider and contractual links | Personal Data concerned – those collected and processed by the Data Controller | Reasons for sharing and legal notice |
|---|---|---|
| GANDI SAS, Société par Actions Simplifiée au capital de 630.000 €, ayant son siège social au 63-65 boulevard Masséna à Paris (75013) FRANCE, immatriculée sous le numéro 423 093 459 RCS PARIS, n° TVA intracommunautaire FR81423093459 Prestation d’hébergement des données | Les Données Personnelles des Participants et Utilisateurs. Les Données Personnelles sont stockées et traitées sur le serveur choisi (Luxembourg) et aucun transfert ultérieur n’est effectué. | Les Données Personnelles sont hébergées ou transférées selon les instructions techniques du Responsable de Traitement, dans le but de fournir le service d’hébergement conformément aux stipulations du contrat de service conclu entre le Responsable de Traitement et GANDI. |
| Amazon Web Services, Services EMEA SARL 38 AV JOHN F KENNEDY L 1855 99137 LUXEMBOURG - http://aws.amazon.com | Les Données Personnelles des Participants et Utilisateurs. Les serveurs sont situés au Luxembourg. | Prestation de serveurs |
| Google Analytics, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irlande | Les Données Personnelles des Participants et Utilisateurs. | Google Analytics : Service d’analyse web |
The Data Controller may also be required to share the Personal Data collected:
- with the companies it controls or those controlling it within the meaning of articles L233-1 et seq. of the Commercial Code,
- in the event of a sale, split, partial contribution of assets, or any other form of restructuring that it may have to undergo,
- in order to meet its legal and regulatory obligations.
Being a free Game with no obligation to purchase, the Winnings are financed by advertising which will be broadcast for the validation of the Game grid and after each draw. On this occasion, no Personal Data will be collected. In accordance with article 12 of the Regulations, the Participant may, however, authorize the transmission of Personal Data to partners of the Data Controller so that the latter can provide him with commercial offers by email, postal mail, telephone calls and/or SMS/MMS. . The Participant may, at any time, withdraw his consent relating to the sending of these commercial offers which will cease within 14 days. The commercial offers put forward by these partners are under the sole responsibility of said partners and according to their personal data processing policy. These partners are mainly advertising agencies listed below:
| Partner identification | Personal Data concerned | Reasons for sharing |
|---|---|---|
| Google LLC, with offices at 1600 Amphitheatre Parkway, Mountain View, California 94043, United States Data Processing and Security Terms | Code IMEI | Google Firebase : service permettant l’envoi de de notification sur l’application xxxxxxxxxxx. |
The Data Controller ensures that Personal Data is protected and secured in order to ensure its security and prevent it from being distorted, damaged, destroyed or disclosed to unauthorized third parties. All persons with access to Personal Data are bound by an obligation of confidentiality.
The Data Controller keeps Personal Data for the time necessary to achieve the purposes pursued, subject to legal archiving possibilities, obligations to retain certain Personal Data, and/or anonymization. Shelf lifes are as follows:
- For user account management purposes: 12 months since the last connection;
- For accounting purposes: 10 years from the close of the accounting year;
- For the purposes of identifying and managing Participants: for the duration of contractual relations increased by 2 years.
Under the conditions defined by the Data Protection Act and the GDPR, Users - natural persons - have a right of access to Personal Data concerning them, rectification, limitation, portability, erasure. The persons concerned by the Processing implemented also have the right to object at any time, for reasons relating to their particular situation, to the processing of Personal Data, as well as a right to object to the processing of Personal Data. business development. Users – natural persons – also have the right to define general and specific directives defining the manner in which they intend the rights mentioned above to be exercised, after their death, by email to the following address: contact@pixooo.com ou par courrier postal à l’adresse suivante : GN SAS, 6 avenue Charles de Gaulle - 78150 Le Chesnay - France, accompagné d’une copie d’un titre d’identité signé. En cas de contestation ou d’atteinte portée à l'un des droits énumérés ci-dessus, l’Utilisateur est en droit de saisir la CNIL (Commission Nationale de l'Informatique et des Libertés, https://www.cnil.fr).
This GDPR Policy is subject to French law. In the event of a dispute arising regarding the execution, termination or interpretation of the GDPR Policy, the User must send their complaint to the following email address: contact@pixooo.com in order to request an amicable settlement. The User also has the right to request resolution of his dispute using the dedicated platform accessible via the following email address: http://ec.europa.eu/consumers/odr/ In the absence of an amicable agreement, the dispute will be submitted to the consumer mediator, namely the Association of European Mediators (AME CONSO), within one year of the written complaint addressed to it. Referral to the consumer mediator must be made: either by completing the form provided for this purpose on the AME CONSO website: www.mediationconso-ame.com or by mail addressed to AME CONSO, 11 Place Dauphine – 75001 PARIS.
Le Site utilise la technologie des cookies pour améliorer la navigation ainsi que l'expérience des Utilisateurs. Lors de la consultation de celui-ci, ces cookies peuvent être enregistrés sur les navigateurs du support utilisé, quel que soit le terminal (ordinateur, tablette, Smartphone). Ils servent notamment lors de l'identification pour des analyses de la fréquentation et de l'utilisation des éléments du Site. À tout moment, les Utilisateurs peuvent décider d'accepter ou de refuser l'utilisation des cookies ainsi que modifier leurs préférences. Le cookie possède une durée de validité qui varie en fonction du type de cookie et permet la reconnaissance de l’Utilisateur lors d'une prochaine utilisation du Site internet. En tout état de cause, cette durée n'excède pas 13 mois. Les Utilisateurs peuvent décider d'accepter ou de refuser les cookies lors de leur navigation sur le Site. Dans ce cas, il pourra poursuivre sa navigation sur le Site. Toutefois, tout dysfonctionnement du Site provoqué par cette manipulation ne pourrait être considéré comme étant du fait de GN SAS. A cet effet, GN SAS fait apparaître, sur le Site, un bandeau d'information préalable invitant l’Utilisateur à accepter les cookies. Tant que l’Utilisateur n'a pas donné son consentement au recueil des cookies, aucun cookie ne pourra être déposé sur son terminal, à l'exception des cookies exemptés du recueil du consentement dans la mesure où ils sont strictement nécessaires à la fourniture d'un service expressément demandé par l'Utilisateur. Pour information, l’Utilisateur peut trouver aux adresses suivantes les démarches à suivre afin de configurer son logiciel de navigation pour s’opposer à l’enregistrement des fichiers “cookies”:
- Microsoft Edge (https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09)
- Safari (https://support.apple.com/en-gb/guide/safari/sfri11471/17.0/mac/14.0)
- Chrome (https://support.google.com/chrome/answer/95647?hl=fr&hlrm=en)
- Firefox (https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox)
- Opera (https://help.opera.com/en/latest/web-preferences/#cookies)
