Data Protection Policy

Responsible for the processing of personal data

The personal data of the site is collected by CROSSCALL In its capacity as treatment controller, in accordance with regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 applicable from May 25, 2018 and to law n ° 2018-493 of June 20, 2018.

Contact details of the controller

CROSSCALL ITS
245 rue Paul Langevin
Milk activity area
13290 Aix en Provence
SIRET: 518 706 890,00069
Representative: Mr. Cyril VIDAL in his capacity as president

Processing of personal data collected

CROSSCALL is likely to harvest your personal data through this site for different purposes, namely:

1. Create your customer account and manage your orders

Object of collection Finality Data collected Legal basis Shelf life
Customer account creation The necessary data is collected for the creation of an account Compulsory: name, first name, date of birth, civility and address e-mail / optional: address, mobile phone number, professional situation, sports practiced, children Consent Until the withdrawal of consent
Order management The necessary data is collected for processing and monitoring your orders on the website Account creation data
CB number, name of the card holder, cryptogram
Contract execution Payment by bank card: 540 days from the transaction date (by partner Ogone Worldline)
Payment by Paypal: Personal data used in the context of the continuous relationship between you and Paypal are stored throughout the duration of the relationship to which is added a period of 10 years
Commercial documents kept 10 years from the last contact
Payment management in several monthly payments The necessary data is collected to ensure your solvency and authorize the realization of payment in several monthly payments Last name, first name, address, date and place of birth, CB number, name of the card holder, cryptogram, etc. Legitimate interest Oney: If acceptance of payment, throughout the length of loan + 5 years for proof purposes in the event of dispute / 6 months in the event of refusal of payment
Withdrawal of withdrawals The necessary data is collected to process your requests for withdrawn from the products purchased on the web and inform you about this process Last name, first name, address, email, telephone number, reference and product model Contract execution Commercial documents kept 10 years from the last contact
Complaints/ litigation management The necessary data is collected to process your complaints Last name, first name, address, e-mail, telephone number, IMEI and date of purchase Execution of the contract / legitimate interest In the event of litigation, the data is kept during the increased contract of the prescription period


2. Answer your requests

Object of collection Finality Data collected Legal basis Shelf life
Contact form management The necessary data is collected to respond to requests from Internet users (obtain information on your order, invoice or sponsorship), allow people to communicate by chat with an employee of CROSSCALL, to make requests for partnership / ambassador and to receive the news from CROSSCALL On consent. Last name, first name, e-mail, message
For partnership / ambassadors requests, discipline and profession are also harvested
Legitimate interest Until the processing of demand
DEVELOPAL REQUEST The necessary data is collected to respond to requests for quotes and transmit promotional offers if you have consented. Compulsory: name, first name, telephone number, e-mail, country, company name, function, desired product and volume, project description Consent 3 years following your last contact / until unsubscribing of commercial information
Management of law exercise The necessary data is collected to process the request for the exercise of law formulated via the dedicated form Compulsory: nature of the request, e-mail, Name, account or order number
Identity document as part of a request for access rights
Legal obligation Identity document if you were requested: deleted immediately after verification
1 year in active base and 5 years in an intermediate base before removal


3. Process your requests to customer service

Object of collection Finality Data collected Legal basis Shelf life
Management of requests made by phone The necessary data is collected to contact you and process your request Compulsory: name, first name, address, e-mail and phone number, IMEI, purchase invoice Consent The data is kept time to provide an answer and for a maximum duration of 2 years
Management of requests for care within the framework of the after-sales service for repair The necessary data is collected for the management of the product, contact you and return the repaired product Compulsory: name, address, e-mail and phone number, IMEI, purchase invoice Guarantee contract / legitimate interest Time to process your request + 2 years / 2 years after the end of the warranty if warranty


4. Manage recruitments

Object of collection Finality Data collected Legal basis Shelf life
Application management The necessary data is collected to process online applications or by mail Last name, first name, e-mail CV data: address, telephone number, age, gender, family situation, training and professional experiences Legitimate interest 2 years from receipt of your CV


5. Offer you promotional offers and contests

Object of collection Finality Data collected Legal basis Shelf life
Newsletters management The necessary data is collected for the sending of personalized promotion emails, promotional offers including one specific to the date of birthday Newsletters: name, email address / promotional offers: name, address e-mail and date of birth Consent Data deleted in unsubscription or 3 years after the last contact
Competition games management The necessary data is collected for the realization of the animations and the sending of the prizes won Last name, first name, email address, telephone number and postal address (depending on the subject of the contests) Consent Data deletion 2 months after presenting the lots
If the newsletter consent: until unsubscription
Management of reimbursement offers The necessary data is collected to reimburse you and send newsletters to your consent Name, email address, telephone number and postal address (depending on the subject of contests) Consent Deletion of data within a maximum period of 3 years after the end of the contract / until the newsletter is unsubscribed if the newsletter consent


6. Allow us to develop our products and services

Object of collection Finality Data collected Legal basis Shelf life
Management of opinion surveys The necessary data is collected to understand your use of our products Name, address e-mail and telephone number, company name and profession Consent Deletion at the end of the treatment of the results of the survey / if consent to be contacted, data deleted during unsubscription
Management of user experiences The necessary data is collected to collect your user experience feedback from the products to make them evolve / contact you for details on your responses Genre, first name, email address, country Consent 2 years then anonymization
Participation in the community of innovators The necessary data is collected to manage registrations and recruitment to the community of innovators, carrying out market studies, satisfaction, needs and use Last name, first name, email, date of birth, city, country, children O /n, sports, frequency, other possible and non -compulsory: apartment /house, type of car (and desired), desired clothing brand, professional category, working hours, work frame, income tranche Consent then execution of the contract / legitimate interest Until unsubscription


Recipients

The recipients of these data are:

  • The service provider providing the Customer Relationship Management System (RCMP) and the Cloud Marketing System;
  • The provider providing the tool for deploying online questionnaires;
  • The service provider implementing online payment solutions;
  • Provider in charge of delivery of orders;
  • Repair centers;
  • The service provider providing the management of applications;
  • The external DPD/DPO of CROSSCALL As part of a law request.

Transfer to third parties and excluding union-European

Your personal data is preferentially processed in the European Union.

In the context of the aforementioned purposes, some of your personal data can however be transferred to third-party entities established in countries outside the European Union (e.g. subcontractors of the company intervening within the framework of the aforementioned treatments, etc.).

Some of these entities recipient of your personal data are considered to be ensuring a sufficient level of protection of personal data because it is established in a country whose regulations in terms of personal data have been recognized as ensuring an adequate level of protection of said data (cf. European Commission's adequacy decisions)

Furthermore, if the country of the recipient entity of your personal data does not offer an adequate level of protection of said data, we ensure that the appropriate security and confidentiality measures are taken in order to guarantee the maintenance of the protection of your data.

Also, in these cases, you are informed that the transfers of your personal data to other European Union entities are framed by the implementation of appropriate guarantees such as the conclusion, with the recipients of this data, contractual clauses in accordance with the recommendations of the European Commission to ensure that the appropriate guarantees are taken regarding the protection of said data.

We also point out that the transfers of personal data outside the European Union are lawful if (i) the transfer is necessary for the execution of a contract between the person concerned and the controller or the implementation of pre -contractual measures taken at the request of the person concerned, if (ii) the transfer is necessary for the conclusion or the execution of a contract concluded in the interest of the person concerned between the controller If (iii) the person concerned gave their explicit consent to the envisaged transfer, after having been informed of the risks that this transfer could include for them because of the absence of adequacy decision and appropriate guarantees.


CROSSCALL could be led to transmit personal data to the competent services and authorities within the framework of requests for intelligence or administrative or judicial decisions.

Data security

CROSSCALL take care to guarantee the security of your personal data hosted on its servers. The company is working to take the necessary technical and organizational security measures to guarantee integrity, confidentiality as well as the availability of your data.

Employees of CROSSCALL Having access to the personal data of the users of the site because of their function engages in the greatest confidentiality in this regard.

The website CROSSCALL Use the TLS encryption protocol to ensure the confidentiality and integrity of your data transmitted via the Site and also ensure customer-server authentication.

You can consult our safety certificate, established by a third party, by clicking on the padlock pictogram in the address bar of your browser.

Law of persons and means to have them exercised

In accordance with law n ° 78-17 of January 6, 1978, relating to data processing, files and freedoms (articles 38, 39, 40), and general regulations on data protection, you have different rights in the use of your personal data. These rights are as follows:

  • Access: the exercise of the right of access allows the user to control the accuracy of the data and, if necessary, to have them rectified or erased;
  • Rectification: the exercise of the right of modification allows the user to update his data;
  • Portability: the exercise of the right to data portability allows the user to transmit them to a third party of his choice;
  • Deletion: The exercise of the right of deletion allows the user to obtain the deletion of his data;
  • The opposition: the exercise of the right of opposition allows the user to oppose the use of his data for a specific objective;
  • Limitation: the exercise of the right to limitation allows the user to ask an organization to temporarily freeze the use of some of his data.

These rights can be exercised with the data protection delegate of CROSSCALL By entering the form available on the next page: Personal data management

Note that CROSSCALL Also offers you the possibility of modifying your personal information and withdrawing your consent from commercial and promotional offers directly from your customer account. It is also possible to unsubscribe from any communication by clicking on the unsubscribe link at the end of the e-mails received.

If you consider it, after contacting the controller or the data protection delegate of CROSSCALL, that your data protection rights are not respected, you can send an online complaint to the National Commission for Data Protection (CNIL) or by post to 3 place de Fontenoy - TSA 80715 - 75334 Paris Cedex 07

About cookies

This site uses cookies for the proper functioning of the site and the user experience: normal navigation on the site, reading of videos, sharing content on social networks, measurement of the audience of the pages. The strictly necessary cookies are those linked to the operation of the site.

This site also uses analysis cookies to improve the functionality of the site. All the data collected by these cookies is anonymous.

Advertising cookies are used to display advertisements adapted to user interests and measure the effectiveness of advertising campaigns.

See the policy of cookies.

Modification of the confidentiality policy

CROSSCALL is led to modify this Privacy Policy. We therefore invite you to consult it regularly in order to read its latest version.