Data protection policy

Responsible for Personal Data Processing

Personal data on the Site is collected by CROSSCALL in its capacity as data controller, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 applicable from May 25, 2018 and Law No. 2018-493 of June 20, 2018.

Contact details of the data controller

CROSSCALL SA
245 rue Paul Langevin
Les Milles activity zone
13290 Aix en Provence
SIRET: 518 706 890 00069
Representative: Mr. Cyril VIDAL in his capacity as president

Processing of Personal Data Collected

CROSSCALL may collect your personal data through this site for different purposes, namely:

1. Create your customer account and manage your orders

Purpose of collection Purposes Data collected Legal basis Shelf life
Creation of customer account The necessary data is collected for the creation of an account Required: Name, first name, date of birth, title and address e-mail / optional: address, mobile phone number, professional situation, sports practiced, children Consent Until consent is withdrawn
Order management Necessary data is collected for processing and tracking your orders on the website Account creation data
Credit card number, name of card holder, cryptogram
Execution of the contract Payment by credit card: 540 days from the transaction date (by Ogone Worldline partner)
Payment by PayPal: Personal data used as part of the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years
Commercial documents kept for 10 years from the last contact
Payment management in several monthly installments The necessary data is collected to ensure your solvency and authorize payment in several monthly installments. Name, first name, address, date and place of birth, credit card number, name of card holder, cryptogram, etc. Legitimate interest ONEY: If payment is accepted, for the entire duration of the loan + 5 years for purposes of proof in the event of dispute / 6 months in the event of refusal of payment
Management of withdrawals The necessary data is collected to process your requests for withdrawal of products purchased on the web and to inform you about this process. Name, first name, address, email, telephone number, product reference and model Execution of the contract Commercial documents kept for 10 years from the last contact
Claims/litigation management Necessary data is collected to process your complaints Name, first name, address, e-mail, telephone number, IMEI and date of purchase Performance of contract / legitimate interest In the event of litigation, the data is kept for the duration of the contract plus the limitation period.


2. Respond to your requests

Purpose of collection Purposes Data collected Legal basis Shelf life
Contact form management The necessary data is collected to respond to Internet users' requests (obtain information on their order, invoice or sponsorship), allow people to communicate by chat with an employee of CROSSCALL, to make Partnership/Ambassador requests and receive news from CROSSCALL upon consent. Name, First name, e-mail, message
For partnership/ambassador requests, the discipline and profession are also collected.
Legitimate interest Until the request is processed
Management of quote requests The necessary data is collected to respond to quote requests and transmit promotional offers if you have consented to this. Required: Name, first name, telephone number, e-mail, country, company name, function, desired product and volume, project description Consent 3 years following your last contact / until unsubscription of commercial information
Management of requests to practice law The necessary data is collected to process the request to exercise rights made via the dedicated form. Mandatory: Nature of the request, e-mail, name, account or order number
Identity document as part of a request for access rights
Legal obligation Identity document if requested: Deleted immediately after verification
1 year on active base and 5 years on intermediate base before deletion


3. Handle your customer service requests

Purpose of collection Purposes Data collected Legal basis Shelf life
Management of requests made by telephone The necessary data is collected to contact you again and process your request Required: Name, first name, address, e-mail and telephone number, IMEI, purchase invoice Consent The data is kept while providing a response and for a maximum period of 2 years
Management of support requests within the framework of after-sales service for repairs Necessary data is collected for product support, contacting you and returning the repaired product Required: Name, address, e-mail and telephone number, IMEI, purchase invoice Guarantee contract / Legitimate interest Time to process your request + 2 years / 2 years after the end of the warranty if device under warranty


4. Manage recruitment

Purpose of collection Purposes Data collected Legal basis Shelf life
Application management Necessary data is collected to process applications online or by mail Name, first name, e-mail CV data: address, telephone number, age, gender, family situation, training and professional experience Legitimate interest 2 years from receipt of your CV


5. Offer you promotional offers and competitions

Purpose of collection Purposes Data collected Legal basis Shelf life
Newsletter management The necessary data is collected for sending personalized promotional emails, promotional offers including one specific to the anniversary date. Newsletters: Name, email address / promotional offers: Name, address e-mail and date of birth Consent Data deleted upon unsubscription or 3 years after last contact
Management of competitions The necessary data is collected for carrying out the activities and sending the prizes won Name, first name, email address, telephone number and postal address (depending on the subject of the competition) Consent Deletion of data 2 months after delivery of the batches
If consent to the newsletter: until unsubscription
Management of reimbursement offers Necessary data is collected to reimburse you and send newsletters upon your consent Name, email address, telephone number and postal address (depending on the subject of the competition) Consent Deletion of data within a maximum period of 3 years after the end of the contract / until unsubscription from the newsletter if consent to the newsletter


6. Allow us to develop our products and services

Purpose of collection Purposes Data collected Legal basis Shelf life
Management of opinion surveys The necessary data is collected to understand your use of our products Name, address e-mail and telephone number, company name and profession Consent Deletion after processing of survey results / If consent to be recontacted, data deleted upon unsubscription
User experience management The necessary data is collected to collect your user experience feedback on the products in order to develop them / contact you again for details on your responses Gender, first name, email address, country Consent 2 years then anonymization
Participation in the community of innovators The necessary data is collected to manage registrations and recruitment to the community of innovators, carrying out market, satisfaction, needs and usage studies. Name, first name, email, date of birth, city, country, Children Y/N, Sports practiced, frequency, Other possible and not obligatory: apartment/house, type of car (and desired), brand of clothing desired, Professional category, working hours, working environment, Income bracket Consent then execution of the contract / Legitimate interest Until unsubscribe


RECIPIENTS

The recipients of this data are:

  • The service provider providing the Customer Relationship Management (CRM) system and the Marketing Cloud system;
  • The service provider providing the online questionnaire deployment tool;
  • The service provider implementing online payment solutions;
  • Service provider responsible for delivering orders;
  • Repair centers;
  • The service provider providing the application management solution;
  • The external DPD/DPO of CROSSCALL as part of a legal request.

 

TRANSFER TO THIRD PARTIES AND OUTSIDE THE EUROPEAN UNION

Your personal data is processed preferentially in the European Union.

As part of the aforementioned purposes, some of your personal data may however be transferred to third-party entities established in countries outside the European Union (e.g.: Subcontractors of the company involved in the aforementioned processing, etc.).

Some of these entities receiving your personal data are considered to ensure a sufficient level of protection of personal data because they are established in a country whose regulations on the protection of personal data have been recognized as ensuring an adequate level of protection of said data (cf. adequacy decisions of the European Commission)

Furthermore, if the country of the entity receiving your personal data does not offer an adequate level of protection of said data, we ensure that appropriate security and confidentiality measures are taken to ensure that the protection of your data is maintained.

Also, in these cases, you are informed that transfers of your personal data to other entities outside the European Union are governed by the implementation of appropriate guarantees such as the conclusion, with the recipients of this data, of contractual clauses in accordance with the recommendations of the European Commission allowing us to ensure that appropriate guarantees are taken concerning the protection of said data.

We also inform you that transfers of personal data outside the European Union are lawful if (i) the transfer is necessary for the performance of a contract between the data subject and the Data Controller or for the implementation of pre-contractual measures taken at the request of the data subject, if (ii) the transfer is necessary for the conclusion or performance of a contract concluded in the interest of the data subject between the Data Controller and another natural or legal person, or even if (iii) the Data Subject has given explicit consent to the intended transfer, after having been informed of the risks that this transfer could entail for them due to the absence of an adequacy decision and appropriate guarantees.


CROSSCALL may be required to transmit personal data to the competent services and authorities in the context of requests for information or administrative or judicial decisions.

DATA SECURITY

CROSSCALL takes care to guarantee the security of your personal data hosted on its servers. The company strives to take the necessary technical and organizational security measures to guarantee the integrity, confidentiality and availability of your data.

The employees of CROSSCALL having access to the personal data of users of the Site due to their function undertake to maintain the greatest confidentiality in this regard.

The website CROSSCALL uses the TLS encryption protocol to ensure the confidentiality and integrity of your data transmitted via the site and also to ensure client-server authentication.

You can consult our security certificate, established by a third party, by clicking on the padlock pictogram in the address bar of your browser.

PERSONAL RIGHTS AND MEANS OF EXERCISING THEM

In accordance with Law No. 78-17 of January 6, 1978, relating to Information Technology, files and Freedoms (articles 38, 39, 40), and the General Data Protection Regulations, you have different rights with regard to the use made of your personal data. These rights are as follows:

  • Access: Exercising the right of access allows the User to check the accuracy of the data and, if necessary, to have it rectified or deleted;
  • Rectification: Exercising the right of modification allows the User to update their data;
  • Portability: Exercising the right to data portability allows the User to transmit them to a third party of their choice;
  • Deletion: Exercising the right of deletion allows the User to obtain the deletion of their data;
  • Opposition: Exercising the right of opposition allows the User to object to the use of their data for a specific objective;
  • Limitation: Exercising the right to limitation allows the User to ask an organization to temporarily freeze the use of certain of their data.

These rights can be exercised with the data protection officer of CROSSCALL by completing the form available on the following page: Personal data management

Note that CROSSCALL also offers you the possibility of modifying your personal information and withdrawing your consent to commercial and promotional offers directly from your customer account. It is also possible to unsubscribe from any communication by clicking on the unsubscribe link at the end of the emails received.

If you consider, after having contacted the data controller or the data protection officer of CROSSCALL, that your data protection rights are not respected, you can submit a complaint online to the National Commission for Information Technology and Liberties (CNIL) or by post to 3 place de Fontenoy – TSA 80715 – 75334 Paris Cedex 07

ABOUT COOKIES

This site uses cookies for the proper functioning of the site and the user experience: normal navigation on the site, playing videos, sharing content on social networks, measuring page audiences. Strictly necessary cookies are those related to the operation of the site.

This site also uses analytics cookies to improve the functionality of the site. All data collected by these cookies is anonymous.

Advertising cookies are used to display advertisements tailored to users' interests and measure the effectiveness of advertising campaigns.

See the cookies policy.

CHANGES TO THE PRIVACY POLICY

CROSSCALL may modify this confidentiality policy. We therefore invite you to consult it regularly in order to be aware of its latest version.