1. Who is responsible for processing my personal data?
Coffra group
16 rue Auber
75009 Paris
Phone: +33 (0)1 58 36 12 80
RCS Paris 422 988 220
SIREN 422988220
Share capital: €1,520,400
2. Who is the person responsible for the publication of the site:
Christoph Schlotthauer
President of Coffra group
3. Who hosts the site?
This website is hosted by an external service provider (host). The personal data collected on this site are stored on the servers of the host. This may include, but is not limited to, IP addresses, contact requests, metadata and communication data, contract information, contact information, names, web page access and other data generated by a website.
The use of the hosting provider is considered necessary for the performance of our contractual obligations to our potential and existing customers (Art. 6-1-b of the GDPR) and for the purposes of our legitimate interests in enabling the secure, timely and efficient provision of our online services by a professional provider (Art. 6-1-f of the GDPR).
Our hosting provider will only process your data to the extent necessary to fulfill its obligations and to comply with our instructions regarding such data.
We use the following hosting company:
SAS WAT – We Are Together
6, Bd des Capucines
75009 PARIS
France
Tel: + 33 (0)1 47 61 58 00
4. Who do I contact if I have a request about my data?
For any request about your data you can contact Coffra group at the following address:
info@coffra-group.fr
5. How can I exercise my rights under the GDPR?
You have several rights regarding the processing of your personal data:
– A right of access to your personal data (=the right to receive a copy),
– A right of rectification, if your data are erroneous or incomplete,
– A right to erasure (or the right to be forgotten) of your personal data;
– A right to the portability of your data, i.e. the right to receive the personal data that we have provided to you, in a structured, commonly used computer format, and to transmit them to any other data controller,
– A right to object to the processing of your data, subject to certain legal limitations
– A right to object to any commercial prospecting (in particular newsletters), which can be exercised via the unsubscribe link in each prospecting email,
– A right to withdraw your consent at any time, for the purposes for which we have collected your consent (see below the purposes of our processing).
In accordance with the RGDP and the Data Protection Act, you may exercise your rights according to the following formalities:
a) Request for right of access
You can send your request to: info@coffra-group.fr
Please specify in your request which data or which processing operations it concerns as well as the service concerned (newletter, invoicing data…).
Your data will be sent to you by registered mail with acknowledgement of receipt, or by e-mail when the request has been made by e-mail.
b) Request for the right of rectification
You can send your request to: info@coffra-group.fr
Please indicate precisely the inaccurate or incomplete data that you wish to see rectified, and provide all the information needed to correct them. You can also rectify your email address, password and newsletter subscription option yourself via your dedicated professional/personal space.
c) Request for the right to erasure
You can send your request to: info@coffra-group.fr
Please indicate precisely the data concerning you that you are requesting to be deleted, and the reasons for your request. Coffra group may need to retain your data in order to comply with a legal obligation that requires the processing / retention of certain data.
d) Request to limit processing
You can send your request to: info@coffra-group.fr
Please state precisely which data about you you are requesting to be restricted or whose processing you object to, and the reasons for your request.
Coffra group may retain your data in order to comply with a legal or contractual obligation that requires the processing of some of your data (e.g. for billing purposes).
e) Request to object to the processing
You can send your request to: info@coffra-group.fr
This right is exercised before the processing, and you will have to justify reasons relating to your particular situation in certain cases provided for by the regulations.
The right to oppose any commercial prospecting (when you have consented to commercial prospecting) is exercised via the unsubscribe link present in each prospecting email or on your user account and in any case on request from you at the email address info@coffra-group.fr
f) Referral to the CNIL
If you believe, after having contacted us, that your rights on your data are not respected, you can address a complaint to the CNIL, 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07
6. Does this site collect personal data and for what purposes ?
On this site, you are free to provide Coffra group with personal data about yourself in order to submit your professional or personal details, to subscribe to our newsletter, and more generally to connect to our online services, and finally to exercise your rights under the RGPD and the Data Protection Act.
The data processing concerns :
– Coffra group staff in charge of publishing content and technical administration of the websites;
– Coffra group members and staff, who are subject to an obligation of confidentiality and professional secrecy
– Coffra group clients;
– the personnel of Coffra group service providers.
The collection of data is limited to the strict minimum, and includes the following data
– Name, first name and postal address of the persons;
– Telephone number or e-mail address of the person’s choice
– Bank details
– Year of birth
– Occupation
And more generally all data required for the processing of the client’s file.
7. On what basis is the processing of your personal data based?
Purposes legal basis
– To send you our newsletter: this processing is based on your consent at the time of opening your online membership or under the contract concluded with Coffra group
– To manage your claim: this processing is based on our legitimate interest and our fee agreements (prevention of legal actions)
– Management of the company’s website: this processing is based on our legitimate interest
– Manage billing: this processing is based on our contractual relationship
– Soliciting you to respond to satisfaction surveys and studies on our existing services and also on your wishes for editorial content of our newsletters: this processing is based on our legitimate interest and on your consent (to improve our services and editorial content)
– Commercial prospecting: this processing is based on your consent and in compliance with our deontological rules
– Archiving: this processing is based on our professional obligations of conservation and archiving of your legal or accounting files
– The preparation of tax declarations mentioning personal data of natural persons (in particular tax returns, DAS2, tax on the disabled): this processing is based on our contractual relationship
– Processing of payroll and related social declarations: this processing is based on our contractual relationship
– Advice on employment law and human resources management: this processing is based on our contractual relationship
– The creation of third party accounts for natural persons in the payroll software with mention of the IBAN: this processing is based on our contractual relationship
– Opening of your customer file – provision of proof of identity – constitution and formalities of the company: this processing is based on our contractual relationship
8. To whom is my personal data processed?
Depending on their respective needs, the following are recipients of all or part of the data:
– Coffra group staff in charge of publishing content and processing your online requests and the technical administration of the websites, and their superiors and the staff of its service providers concerned
– for the processing of your files, the company’s personnel who are subject to professional secrecy
Your data may be processed from time to time by subcontractors in a strictly regulated manner – and exclusively for the purpose of maintaining the hosting of the site and its maintenance or for the execution of a contract (in particular for sending newsletters). The subcontractors are identified in this policy or in our fee or service agreements.
The processing does not involve automated decision making.
9. How long woll my personal data be kept?
The length of time we retain your personal data depends on the purpose for which it is processed.
Purposes retention period:
– To send you our newsletter: until you withdraw your consent, or throughout our contractual relationship or at the end of our contractual relationship increased by a period of one year (in the absence of withdrawal of consent)
– Handling your complaint: the time required to process your complaint
– Prevention of money laundering and terrorism: 5 years after the end of the contractual relationship
– Operation of your online application: until you withdraw your consent, or throughout our contractual relationship or at the end of our contractual relationship plus one year (if consent is not withdrawn)
– To manage the invoicing: duration of our contractual relationship increased by 2 months without prejudice to the fiscal obligations of archiving the invoicing data (10 years)
– Soliciting you to respond to satisfaction surveys and studies on our services: until the withdrawal of your consent, or throughout our contractual relationship or at the end of our contractual relationship increased by a period of one year (in the absence of withdrawal of consent)
– Commercial prospecting: until the withdrawal of your consent, or throughout our contractual relationship or at the end of our contractual relationship increased by a period of one year (in the absence of withdrawal of consent)
We may keep certain of your personal data on file in order to be able to respond to any legal action for the duration of the statute of limitations provided for by the applicable legislation.
With regard to the retention periods for cookies, please consult the “cookie management” page of the site.
10. How is the personal data process secured?
All personal data entered on this site is protected by the https protocol.
Coffra group is committed to protecting the personal data processed on this site, in accordance with the state of the art, by using a set of technical and non-technical measures aimed at, among other things, maintaining the IS in operational and security condition and managing minor changes or major developments, such as secure servers protected by passwords, updated regularly in accordance with the recommendations of the ANSSI.
Your data is not transferred outside the European Union.