GDPR Policy
Positive Workplace places great importance on the confidentiality and security of your personal data.
This privacy policy aims to inform you clearly, simply, and transparently about the processing of personal data that you provide to us, or that we may collect while you browse our website. www.positive-company.eu (hereinafter referred to as the "Site"), on our PWP Manager audit platform www.label.scoringbypwp.com and its browser extensions, via email, SMS, or other electronic messages between Positive Workplace and you, through the information and data you provide to us online and offline and through your interaction with us via websites and third-party services (such as social networks), regarding their potential transfer to third parties, and the rights and options you have to control your personal information and protect your privacy.
This privacy notice has been prepared in accordance with the provisions of several legislations, notably Article 13/14 of European Regulation 2016/679 (General Data Protection Regulation - GDPR).
I. What is a personal data?
A personal data is any information relating to a person that can be identified directly or indirectly by reference to one or more elements specific to that person, such as their name, first name, postal or email address, or by reference to an identification number such as an order number or an IP address, etc.
II. Why does Positive Workplace collect my personal data?
Positive Workplace collects and processes your data in order to:
- to allow you to create an account on our Site;
- manage your access to your account on the Site;
- to send you emails regarding the follow-up of your labeling program;
- process and manage the labeling programs on positive-Company.eu ;
- ensure the delivery of the audit report;
- to send you quotes as part of our consulting activities;
- · ensure the security of online transactions, prevent fraud, payment incidents, and manage collections (see our T&Cs for more details), particularly through automated processing of your data;
- · manage customer relations in the context of requests for information or complaints that you may send us via our website or our social media pages;
- manage and optimize your customer experience through a better understanding of our clients;
- · conduct statistical analyses to develop management, measurement, and reporting tools in order to adapt and improve our business and marketing activities;
- subject to your consent:
- to send you information about our special offers, news, and events through the communication channels you have selected
- share your personal data with our partners for the purpose of receiving communications tailored to your needs;
- ensure the exercise of your rights in accordance with Article VIII below;
Positivewoprkplace.fr informs you that you can change your communication preferences on the Site or in the newsletters at any time.
III. On what occasions can we collect your personal data?
We may collect your personal data in connection with:
- the creation of your member account on our Site, directly with you when you complete the account creation form via an email invitation
- completion of questionnaires related to the labeling program;
- your acceptance of receiving certain commercial communications from us via email and/or notification on your smartphone;
- surveys or satisfaction questionnaires regarding your customer experience;
- an interaction with our company through its official page or via private message on social media;
- Your exchanges with the collaborators of Positive Workplace, by phone, SMS, or email;
- your participation in an event that we are organizing;
- the completion of our free online test on our site and those of our partners.
IV. What personal data may we be required to collect?
(i) As part of our activities, we may need to collect certain data directly from you for the purposes detailed in section II of this policy. The information we may collect includes:
- · the personal data you provide when creating your account such as your identity, your email address, and your password, your job title;
- your contact details; including your billing addresses;
- the information related to the labeling program, such as the answers to questions, attachments, and comments;
- the information related to your payment methods when you pay on our Site;
- the information that you may be required to communicate to the employees of Positive Workplace;
(ii) We may collect information related to your use of our Site, including your browsing (IP address, pages, products and services visited or searched, links clicked, etc.). Similarly, we may collect data related to the consultation of the emails we send you for statistical and commercial prospecting purposes. Some of this information may be collected through Cookies placed on your device while you browse our Site. To learn more about Cookies, please refer to section XI of this policy.
V. What are the legal grounds that legitimize the processing of your data?
Positive Workplace processes your personal data on the following legal grounds:
- · Contract execution: the processing of your data is necessary for the execution of the contract concluded between you and Positive Workplace when you create an account on the Site, as well as when you place an order with Positive;
- Legitimate interest: Positive Company may have a legitimate interest in processing your data. This is the case, for example, when Positive Company sends its follow-up emails for the labeling program, engages in fraud prevention and combat measures on its Site, collects unpaid orders, or analyzes the navigation of its members for the purpose of improving its offers and services, conducting statistical studies on the products and/or services it markets, and securing its digital supports;
- · Consent: Positive Workplace processes data based on your explicit consent, which can be withdrawn at any time. This is the case for the sending of our commercial communications;
- Compliance with legal obligations: Positive Workplace may carry out processing in accordance with its legal obligations.
VI. Who are the recipients of your personal data?
Your personal data is processed by the staff of Positive Workplace and possibly by our IT service provider: the development team assigned to the project (IP-Links: 2 people). We ensure that only authorized personnel within Positive Workplace can access your personal data when necessary for managing our business relationship or fulfilling our legal obligations.
We may also be required to share your personal data with:
- commercial partners of Positive Workplace, including our regional partners who could offer tailored services, our certified partners and clients who could provide solutions that Positive Workplace does not offer;
- subcontractors such as:
- our hosting and site maintenance providers and our dematerialized solutions for collecting personal data;
- our payment service providers;
- our providers of fraud prevention and combat;
- our marketing solution providers;
- our service providers for commercial prospecting management and communication via social media;
Positive Workplace may also be required to share your data with third parties to comply with legal, regulatory, contractual obligations, or to respond to requests from legally authorized authorities.
No personal data is sold to third parties.
VII. How long do we keep your data?
Positive Workplace a défini des durées des rétentions de vos données personnelles en accord avec ses obligations légales et les recommandations de la Commission Nationale Informatique et Libertés (ci-après la « CNIL »). Nous conservons vos données personnelles 3 ans (trois ans). Ce délai est prolongé d’autant de temps que la durée des contrats qui nous lient avec nos clients.
VIII. What are your rights and how to exercise them?
In accordance with the applicable regulations, particularly the GDPR, you have the right to request access to and rectification of your personal data from our services, as well as the right to request its deletion, to object to its processing, and to obtain a limitation of processing for legitimate reasons or portability where applicable.
You also have the right to issue directives regarding the retention, deletion, and communication of your personal data after your death.
In accordance with the law, you may submit:
- · General directives, which apply to all of your personal data and may be recorded in a unique register with a certified digital trusted third party by the CNIL;
- · Specific directives that concern certain processing of personal data that you have specifically identified. These directives must be addressed to the relevant data controllers, such as Positive Workplace.
You can modify or revoke these directives at any time. In the absence of directives, your heirs will be able to exercise the rights of access, rectification, and opposition necessary for the organization and settlement of your estate.
These rights can be exercised directly with Positive Workplace:
By email at the email address cmargnat@positive-company.eu
By postal mail to the following address:
Positive Company
6 Rue du parc 92300 Levallois-Perret
A response will be sent to you within a maximum period of one (1) month following the date of receipt of your request.
To oppose the processing of your data for commercial prospecting purposes, you can contact us as indicated above or modify your communication preferences regarding Positive Workplace newsletters at any time.
To inform us that you do not wish to take advantage of our customization service, you can contact us as indicated above.
You also have the right to file a complaint with the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 7.
For more information about the rights you have regarding your data, we invite you to visit the CNIL website: www.cnil.fr.
IX. Contact details of the Data Protection Officer (DPO) and the right to lodge a complaint
For any questions related to the collection and processing of your Data by Positive Company, you can contact our Data Protection Officer at Positive Company via email at the following address: cmargnat@positive-company.eu
Last updated: 02/05/2023