Website Data Protection Policy
Last updated: 2025-08-13
Personal data may be collected:
- Directly via forms: catalog downloads, alert procedures, or contact requests.
- Indirectly via:
- Cookies: these allow for the collection of browsing data and the offering of personalized advertisements. For more details, consult our cookie policy.
- Public databases on the internet.
- Commercial partners who may transmit information about you, such as your contact details or purchase preferences.
- Recruitment platforms: if you apply via recruitment sites or professional social networks (LinkedIn, Indeed, etc.), certain data may be collected to facilitate the recruitment process.
| Processing Name | Purposes | Legal Basis(es) | Data Concerned | Retention Period |
|---|---|---|---|---|
| Website forms (contact, free resource downloads, appointment booking, quote requests, etc.) | Process your request and provide you with the requested information or services. | Legitimate interest: managing interactions with the public (clients and prospects) and enabling responses to requests addressed to us. | Identity and contact data; Data related to professional life. | 3 years from the last contact in active database; and Archiving for evidentiary purposes for 5 years. |
| Recruitment | Review and manage applications. | Pre-contractual measures; Consent to retain CVs in a database (CV library). | All information contained in the CV, including: - Identity and contact data; - Data related to professional life; - Data related to personal life. | 3 months after the last contact or up to 2 years with consent |
| Event organization (webinar broadcasting, participation in trade shows, organization of contests, etc.) | Management of event organization: · Sending invitations, · Registration tracking, · Satisfaction monitoring | Legitimate interest: promoting and improving events for a professional audience and organizing these events. | Identity and contact data; Data related to event registration and participation. | 3 years from the last contact in active database; and Archiving for evidentiary purposes for 5 years. |
| Cookie placement (for more information, consult the site's cookie policy) | Ensure website functionality and security; Obtain statistics | For functional cookies: legitimate interest in offering online content, ensuring proper site operation and security; Optional cookies: consent. | Browsing data; Identification data of the equipment used to browse the site | Tracker lifespan: 13 months; and Data retention: maximum 25 months. |
| Management of Rights Requests | Receive, respond to, and document rights requests. | Legal obligation: GDPR. | Identity and contact data. | Duration necessary for processing the request; and Archiving for evidentiary purposes for 5 years. |
Collected personal data may be communicated to the following categories of recipients, in compliance with applicable regulations:
- Within NOVAE (internal recipients)
Your personal data is processed by authorized staff members of NOVAE.
- Within NOVAKAMP (internal recipients)
Your personal data is processed by authorized staff members of NOVAKAMP.
- Outside NOVAE (external recipients)
Several categories of third parties listed below may have access to your personal data. Only strictly necessary personal data is transmitted to them.
-
- IT service providers: we use subcontractors for website hosting and maintenance.
- Marketing service provider: Specialized agencies may be used for data analysis.
- CRM and email tools: Your data may be stored in tools for customer relationship management and communication sending.
We ensure that, regarding personal data, these subcontractors contractually commit to implementing a level of protection equivalent to ours and compliant with the Regulations.
- Specific cases of data sharing:
NOVAE undertakes not to transmit your personal data to service providers unless:
- You have given your prior consent for the sharing of your personal data with these service providers,
- The sharing of your personal data with these service providers is necessary for the provision of the requested products or services,
- A competent judicial or administrative authority requires the data to be transmitted to it.
We strive to keep your personal data within the European Union; however, some services we use involve potential transfers. Concerned about the security and confidentiality of your data, we inform you that when your data is transferred outside the EU, we ensure that these transfers are made to:
- Either a country recognized by the European Commission as providing an adequate level of protection;
- Or to a country not offering adequate protection but where the transfer is permitted, notably by being framed by the European Commission’s standard contractual clauses, which the CNIL has recognized as ensuring a sufficient level of protection for privacy and fundamental rights of individuals.
A. Right of Access
You can request and obtain information about the personal data we hold about you.
b. Right to Rectification
You have the right to request the correction of inaccurate or incomplete personal data.
c. Right to Erasure
Also known as the “right to be forgotten,” it allows you to request the deletion of your personal data unless the data must be retained:
- To comply with a legal obligation,
- For the establishment, exercise, or defense of legal claims.
d. Right to Restriction of Processing
This right allows you to request the restriction of the use of your personal data in certain circumstances:
- You have requested the rectification of your data, in which case processing may be restricted for the time necessary to carry out the required verifications;
- The processing is unlawful, and you oppose the erasure of your data;
- The data controller no longer needs your data, but you require it for the establishment, exercise, or defense of legal claims;
- You have objected to the processing, and we are verifying whether the legitimate grounds pursued override your grounds.
E. Right to Data Portability
You can receive your personal data in a structured, machine-readable format, and transfer it to another organization.
f. Right to Object
You have the right to object to the processing of your personal data for legitimate reasons, unless there are legitimate and compelling grounds to continue the processing.
Several processing activities of your personal data are conditioned on your consent. You can withdraw it at any time.
g. Right to Lodge a Complaint with the CNIL
You also have the right to lodge a complaint with the CNIL, the supervisory authority www.cnil.fr.
You can submit your requests using the following methods:
- Postal address: NOVAE, 30 rue du Bois Moussay 93240 Stains, France
- Email address: dpo@novakamp.fr
NOVAE has one month to respond to you from the date of receipt of your request. This period may be extended by two months due to the complexity of your request and the number of requests we receive; in this case, you will be informed.