Personal Data .

Pictime Groupe undertakes to ensure that personal data processing carried out in connection with the pictime-groupe.com website complies with the General Data Protection Regulation No. 2016/679 (GDPR) and the French Information Technology, Data Files and Civil Liberties Act No. 78-17.

Data protection policy

Each service offered on pictime-groupe.com (the “online service”) limits the collection of personal data to what is strictly necessary (data minimization) and includes information on:

• the data controller and the reasons for collecting the data (purpose);
• the legal grounds for data processing;
• the mandatory or optional nature of data collection for the management of your request and the reference to the categories of data processed;
• the data source (when data other than those provided by the online service are processed);
• the data subject categories;
• the data recipients;
• the data retention period;
• the security measures (general description);
• the possibility of data transfer outside the European Union or of automated decision-making;
• your data protection rights and how to exercise them with Pictime Groupe.
•  

The personal data collected as part of the online services are processed according to secure protocols and allow Pictime Groupe to manage the requests received in our electronic applications. Security measures are implemented in accordance with the 2017 CNIL guide on personal data security.

Your rights regarding your data

You can access and obtain a copy of your data, oppose the processing of such data and have them rectified or deleted. You also have the right to limit the processing of your data and the right to data portability. You may also define directives concerning the fate of your data in the event of your death.

> Understanding your data protection rights

Exercising your rights

Pictime Groupe’s data protection officer (DPO) is the person you can contact for any information or to exercise your rights concerning the personal data processed by Pictime Groupe. You can contact the DPO:

• by email at dpo@pictime-groupe.com
• by mail at the following address:

Pictime Groupe
A l’attention du délégué à la protection des données (DPO)
Campus du Digital – Parc de la Haute Borne
61 avenue de l’Harmonie
Sainghin-en-Mélantois (59262)

Should there be any doubt as to your identity, Pictime Groupe may ask you to provide proof thereof.

Complaints to the CNIL

If you believe, after having contacted us, that we are not respecting your rights regarding your data, you can submit a complaint to the CNIL.

About cookies

We use various cookies on the website to improve the interactivity of the site and our services.

What are cookies?
A cookie is a sequence of information, usually quite small in size and given a name, that may be sent to your browser by a website that you connect to. Your web browser will save it for a certain period of time and will send it back to the web server each time you reconnect. There are a number of different ways in which cookies are used: they may save your customer ID on an online store, the current contents of your cart, an identifier for tracking your browsing for statistical or advertising purposes, etc.

 >Learn more about cookies, how they work and how to decline them

There are two types of cookies on the Pictime Groupe website

Internal cookies required for the website to function

These cookies make it possible for the website to work optimally. You can object to them and remove them via your browser settings, however this may degrade your user experience.

Third-party cookies to improve the website.

The Pictime Groupe website is supported by the service offered by a third party:

• The analysis and preparation of statistics on website viewing and use (number of pages viewed, number of visits and activity) using Google Analytics;

This feature uses third-party cookies placed directly by us. The first time you visit www.pictime-groupe.com, a banner will inform you of the presence of cookies and ask you to select your preferences regarding their installation. They are only placed if you agree. At any time, you can learn about and configure cookies by going to the bottom of the page and clicking on the Cookie Management button found on every page of this site. You can also indicate your global preferences for the whole site.

Personal Data – Management of Websites Run by Pictime Groupe

Personal data – Management of websites run by Pictime Groupe

Reason for data processing

Purpose

The reason for processing is to manage the websites run by Pictime Groupe.

It allows management of administrator accounts for:

• preparing and publishing content;
• putting contact forms (webforms) online;
• technical administration;
• managing website security (security hardware and logs);
• producing audience statistics and using online services offered by Pictime Groupe.

Legal grounds

Article 6(1)(e) of European regulation 2016/679 (General Data Protection Regulation – GDPR) – processing is necessary for the purposes of the legitimate interests pursued by the data controller to manage and protect their websites.

Data processed

Data categories processed

• Identity, roles, contact details;
• Website navigation data (timestamp, IP address of users, technical data on user hardware and browsers used, cookies);
• Data concerning management of user communications (timestamp and reason for the request, follow-up, actions taken, statistics);
• Data concerning publication management (reason, deliverable, follow-up, statistics);
• Data concerning management of technical services (timestamp and reason for the requests, follow-up, actions taken, statistics);
• Statistics on website audience and use of online services offered by Pictime Groupe.
•  

Data source

Only the data subject provides their data.

Mandatory nature of data collection and consequences of not providing the data

The data collected (including cookies) during browsing to measure the website’s audience and the use of online services are optional.

Data collected to fulfill other purposes are mandatory, unless—when directly collected—indicated otherwise on the form or digital platform in question.

Automated decision-making

No automated decision-making is expected to be involved in processing.

Data subjects

Data processing concerns:

• Pictime Groupe website administrators in charge of publishing content and providing technical administration for the website;
• Pictime Groupe staff, as well as third parties, identified in publications;
• users of websites managed by Pictime Groupe.

Data recipients

Recipient categories

Depending on their respective needs, the following are recipients of some or all data:

• Pictime Groupe website administrators in charge of publishing content and providing technical administration for the website, as well as their superiors;

• Pictime Groupe staff tasked with processing requests received via contact forms;
• staff of relevant service providers;
• users of websites managed by Pictime Groupe;
• staff responsible for supervising the security of Pictime Groupe’s information systems.
•  

Data transfer outside the EU

Publications are likely to be accessible outside the European Union due to their presence on the Internet.

Data retention period

• Publication preparation data (order, follow-up, editorial content) are retained for five years from the date they are posted online.
• Data collected via webforms or consultations are retained for a maximum period of five years from the date of their receipt.
• Data from logs are retained for three months.
• Data required to produce audience and online service use statistics (Google Analytics tool) are retained in a format that makes it impossible to identify people by their IP address and include an identifier (related to cookies), which is retained for a maximum period of 13 months, unless the data subject objects.
•  

Personal Data – Job application management

Reason for data processing

Purpose

The reason for processing is to manage job applications sent to Pictime Groupe.

Legal grounds

Article 6(1)(b) of the GDPR – processing is necessary to manage the application of the data subject.

Data processed

Data categories processed

Last name, first name, email address and resume (roles, contact details, academic history, diplomas, professional experience);

Data source

• Pictime Groupe staff as part of cooption or processing the application.

Mandatory nature of data collection and consequences of not providing the data

Data collected (including the resume) when applying for a job are mandatory. If the data are not provided, the application file cannot be processed

Automated decision-making

No automated decision-making is expected to be involved in processing.

Data subjects

Data processing concerns:

• applicants who filled out the job application form;

Data recipients

Recipient categories

Depending on their respective needs, the following are recipients of some or all data:

• Pictime Groupe staff who are involved in hiring;
• the manager and staff on the team with the open position.

Data transfer outside the EU

Data are not transferred outside the European Union.

Data retention period

Applicant data are retained for two years after the last communication with the applicant.

Security

Data are encrypted and backed up daily.

Personal data – Management of site communications

Reason for data processing

Purpose

The reason for processing is to manage communication initiated from the Pictime Groupe website.

Legal grounds

Article 6(1)(b) of the European Regulation (2016/679) (General Data Protection Regulation – GDPR) – processing is necessary to process the person’s request.

Data processed

Data categories processed

Last name, first name, email address, phone number, reason for the request;

Data source

Only the data subject provides their data.

Mandatory nature of data collection and consequences of not providing the data

Mandatory data to provide are indicated with an asterisk in the contact request form. If the data are not provided, the contact request cannot be processed.

Automated decision-making

No automated decision-making is expected to be involved in processing.

Data subjects

Data processing concerns:

• website visitors who filled out the contact form;

Data recipients

Recipient categories

Depending on their respective needs, the following are recipients of some or all data:

• Pictime Groupe staff;

staff of Pictime Groupe processors involved in processing.

Data transfer outside the EU

Data are not transferred outside the European Union.

Data retention period

• Data are retained for two years after the last communication with the data subject.