Privacy policy

We agree to abide by the amended Act N°78-17 of 6 January 1978, relating to data processing, files and personal freedom and privacy, as well as the General Regulation for Data Protection 2016/679 of 27 April 2016 (GDPR).

This Privacy Policy applies only to the processing of data collected directly on the following site: https://nexaforward.com.

The policy also applies to data that Nexa Forwardcollects over social media from its branches across Europe. Data processing for clients that are legal entities is regulated by separate agreements signed directly with these entities, and this Privacy Policy does not apply.

1. Nexa Forward' legal status is …

Nexa Forwardis responsible for data processing for data collected through its website, blog, forms, or its accounts on social media.

Nexa Forward’ contact information is: SAS Nexa Forward, 210 rue La Fayette 75010 Paris, France – Phone number: + 33 (0)6 99 02 72 50.

2. A personal data is …

In compliance with Article 4, 1) of GDPR, ‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

We (Nexa Forward) might collect your personal data or receive data from you, via our website, blogs, online forms, or Nexa Forward’ pages on social networks. This data might include: your first and last name, e-mail address, phone number, and information about your company, your job junction or information from a public comment.

You share this personal data directly with Nexa Forward when, for example, you send an information request using an online form. In other cases, we collect data using cookies to understand how you use our sites. When we collect your data using online forms, we use asterisks to indicate which data is necessary to processing your request. Usually this means your name and e-mail address. You must complete the indicated fields in order for us to fulfil your request.

3. The objectives of processing and/or utilizing your personal data include...

We may collect your data for the following reasons:Processing based on your consent:
‍
- Responding to your request for contact
- Commercial prospection
- Event organisation
- Statistical analyses
- Processing based on legitimate interest pursued by Nexa Forward

4. The recipient(s) of your personal data includes...

Nexa Forward shares collected data with its marketing and customer service departments. Data will be used for these purposes only.

We share your data with the following third parties: Our website hosting provider, marketing subcontractors to develop and manage our site and contact forms, or to organize our ad campaigns (e.g., email campaigns).

We do not share your personal data with any other third parties, except if we are legally obliged to do so or upon demand of the authorities (e.g., legal authorities).

We never share your personal data with our partners without your consent.

5. The duration for which we retain data is...

Under Article 5, 1., e) of GDPR, Nexa Forward keeps data in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.

Prospective data (including the newsletter) is stored for 3 years maximum from the last date of contact. Client data is stored for 3 years from the end of the contractual relationship.

Legally-required data is stored in accordance with laws in force (particularly but not exclusively those in the French Code of Commerce, Civil Code, and Consumer Code).

6. We transfer data outside the European Union.

We process data within the European Union and we do not transfer your data to any entity located beyond.

However, certain technical subcontractors that receive your personal data might be located outside the European Economic Area, like Google in the United States for example.

Consequently, your personal data may be processed in countries that do not provide an adequate level of personal data protection as defined in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
‍
Nexa Forward requires the same level of protection for your personal data as what is required by all applicable laws and regulations on the European territory, and thus ensures that subcontractors are either bound by clauses similar to the European Commission Standard Contractual Clauses (SCC), or bound by Binding Corporate Rules (BCR) within their international group, and have been thus authorized by a data protection regulatory authority in the EU. Otherwise, subcontractors must be registered in any program that recognizes an equivalent level of protection within their company (such as Privacy Shield in the US).

7. Your entitlements include...

Any individual whose personal data is processed shall have the right to access, rectify, erase, oppose, or restrict the processing of his or her data, in accordance with Article 15 et seq. of GDPR, withdrawal of consent if processing is based on the preceding, as well as the right to define post-mortem directives in accordance with Article 40-1 of the amended Act n° 78-17 of 6 January 1971 on information technology, data files and civil liberties. An individual may also exercise his or her right to personal data portability.

When applicable, these rights can be exercised by contacting Nexa Forward directly.

In compliance with the law, your request must be signed, and you must include a proof of your identity as well as the address to which the response should be sent.

You also have the right to file a complaint to your local regulatory authority.

You may contact Factonics in writing at: Nexa Forward SAS, 210 rue La Fayette, Paris, France, or by e-mail at: rgpd@factonics.com.