Legal

This website is operated by Artefact S.A, a company registered under the Trade and Companies Registry of Paris under number 418 267 704, located 19 rue Richer, 75009 Paris, France (hereinafter “Artefact” or “we” or “us”).

For the purpose of applicable data protection laws, including but not limited to the European Union General Data Protection Regulation 2016/679 of 27 April 2016 (hereinafter the “GDPR”), Artefact is the controller of the Personal Data you provide to us (“Data Controller”).

This privacy policy (hereinafter the “Privacy Policy” or the “Policy”), together with our Terms & Conditions and any other documents referred to on it, describes the ways in which we collect and process information about individuals who visit this website (hereinafter the “Personal Data”). We invite you to carefully read the following to understand in which context we are processing your Personal Data.

As a Data Controller, we process your Personal Data in accordance with this Privacy Policy and the provisions of applicable data protection laws, including the French Act No. 78-17 of 6 January 1978 on information technology, data files and civil liberties and the GDPR.

By using and visiting the website “artefact.com” (hereafter the “Website”) and/or by submitting your personal information to us, and/or by registering as a user of the services that we provide, you agree to us using your Personal Data as set out in this Privacy Policy.

Any dispute which may arise over privacy will be subject to this Privacy Policy, the data protection notice (if any) incorporated into this Website and the provisions of French laws.

We may change our Privacy Policy from time to time. Any modification will be effective as of its publication on the Website. We will notify you of any significant changes.

We attach great importance to the protection of your Personal Data and safeguarding your privacy. To ensure that you are fully informed about the collection and use of Personal Data on our Website, please note the following information.

Our Website may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any Personal Data to these websites.

1. How we collect your Personal Data

You can visit our Website without telling us who you are. We do not save the name of your Internet service provider, or the website from which you visit us, or the name of the requested file.

We only collect and maintain information that you enter on our Website.

2. Collection and processing of personal data

We collect information about you when you fill in any of the forms on our Website.

• Subscribing to our newsletter

When you subscribe to our newsletter, we collect and process your first name, last name and email address to be able to send you our newsletter by email. In the event that you have agreed to receive newsletter from other companies of the Artefact Group, we will share your Personal Data within the Artefact Group only for those purposes.

This processing is based on your consent. This means that you can withdraw your permission at any time, by using the unsubscribe link included in every newsletter you will receive.

We will retain your Personal Data as long as we have an ongoing relationship with you, i.e. three years since your subscription or your last interaction with Artefact. At the end of that period, or once you withdraw your consent, your Personal Data may be stored for evidentiary purposes for the legal prescription periods.

• Sending us a message

When you are sending us a message through the contact form, we collect and process your first name, last name, your company and your job title, your email address, your phone number and the object and content of the message you are sending.

This processing is based on our legitimate interest to identify the persons who are contacting us. If you do not provide your Personal Data, we may not be able to process your message properly or at all.

We will retain your Personal Data only for as long as is necessary to answer your message. At the end of that period, your Personal Data may be stored for evidentiary purposes for the legal prescription periods.

• Applying for a job

When you are applying for a job through the career form, we may collect and process, depending on what information you deliver: your first name, last name, your email address, your phone number (optional), your LinkedIn profile (optional), the office and position you are applying for, your resume and your motivation.

The legal basis for this processing is its necessity in order to take steps prior to entering into a contract at your request, in this case an employment contract. This processing is also justified on the basis of our legitimate interest for ensuring that we recruit the appropriate employees.

If your application is unsuccessful, we will delete or destroy your Personal Data, unless you allow us to keep it for consideration for future employment opportunities. When you have given your consent, we will store your Personal Data for two years. At the end of that period, or once you withdraw your consent, your Personal Data may be stored for evidentiary purposes for the legal prescription periods.

If your application for employment is successful, Personal Data gathered during the recruitment process will be transferred to your personal file and retained during your employment. The periods for which your data will be held will be provided to you in a HR privacy notice.

3. Sharing of Personal Data

Any Personal Data collected in that manner is intended exclusively for Artefact or its subsidiaries (hereinafter the “Artefact Group”).

We do not sell or rent your Personal Data to any other parties.

Please note that the transmission of the data is not encrypted and therefore no confidential information should be sent via the contact form.

4. Your rights

As a data subject, and in accordance with the French Data Protection Act of 6 January 1978 and the GDPR, you have the right to access, interrogate, limit, port, erasing, modifying and correcting information about you. You also have a right to object to the processing of your personal data, as well as a right to object to this data being used for commercial prospecting purposes. Finally, you have the right to define general and specific guidelines defining the manner in which you intend to exercise these rights after your death.

You may exercise these rights with the Data Protection Officer at the following address: privacy@artefact.com or by post to ARTEFACT, Legal Department, Data Protection Officer, 19 rue Richer – 75009 Paris, France, accompanied by a copy of a signed identity document and specifying the return postal address. Artefact has a period of one month from the receipt of your request to communicate, complete or delete the information, as the case may be.

Internet users who consent on forms to receive e-mails containing information and requests from the Artefact Group may revoke this consent at any time, either by clicking on the hyperlink provided for this purpose at the bottom of the e-mails they receive, or sending an e-mail with unsubscribe on the subject line: privacy@artefact.com.

Finally, you have the right to lodge a complaint with the competent data protection supervisory authority, as for instance with the ”Commission Nationale de l’Informatique et des Libertés” (CNIL), the French supervisory authority responsible for compliance with obligations regarding the protection of personal data.

5. Where we store your Personal Data

Your Personal Data may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”). For example, some companies of the Artefact Group are located outside the EEA. When this is the case, we will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy. Any transfer of your Personal Data outside the EEA will be based on an adequacy decision or are governed by the standard contractual clauses adopted by the European Commission.

6. Cookies

Our Website uses 3 types of cookies. A cookie is a small file of letters and numbers that we put on your computer if you agree. It is sent to your web browser and stored on your computer’s hard drive. These cookies:

• allow us to distinguish you from other users of our Website, which helps us to provide you with a good experience when you browse our Website; and also allows us to improve our site;
• allow us to track your progress through the site and to understand and save your preferences for future visits; and
• enable us to measure the frequency of page views and general navigation.

You may set your web browser to notify you of cookie placement requests or to decline cookies completely. You can delete the files that contain cookies; those files are stored on your hard drive.

You can block cookies by activating the setting on your browser that allows you to refuse all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our Website.

Cookies come in many forms. We have set out below the 3 types and categories of cookies that are used. This section refers to all types of categories of cookies and not just those we use on our Website(s).

• First and third-party cookies

Whether a cookie is first-party or third-party refers to the domain placing the cookie. First-party cookies are those set by a website that is being visited by the user, the website displayed in the URL window e.g. https://staging.artefact.com/. Third-Party cookies are cookies that are set by a domain other than that of the website being visited by the user. If a user visits a website and another entity sets a cookie through that Website this would be a third-party cookie. For more information please visit https:..www.artefact.com/cookies.

• Persistent cookies

These cookies remain on a user’s device for the period of time specified in the cookie. They are activated each time that the user visits the website that created that particular cookie.

• Session cookie

These cookies allow website operators to link the actions of a user during a browser session. A browser session starts when a user opens the browser window and finishes when they close the browser window. Session cookies are created temporarily. Once you close the browser, all session cookies are deleted.

By agreeing to the opt-in following the display of the Cookies Box at the beginning of your navigation on our Website you agree to the use of such cookies. We inform you that you can refuse cookies at any time, if your browser so permits.

• Storage of browsing information

When you browse through the Website, information is stored in your computer through the “DOM Storage” process. Such information does not permit the publisher or web hosting service to identify the internet users: however, the DOM Storage process records information on how you browse our Website on your computer (the pages you have viewed, date and time of viewing, etc.) that we can read during your subsequent visits. You can delete that information manually by performing the following steps:

In the case of Microsoft Internet Explorer 9.0:

1. From the “Tools” menu, select “Delete Browsing History”; select the “Cookies” checkbox and click “OK”.
2. Click on the “Confidentiality” tab.
3. Use the cursor to select the desired setting.

To delete all the storage areas irrespective of the source, clear the checkbox “Store data from favorite websites”.

For Firefox:

1. From the “Tools” menu, “Options” and then “Privacy”
2. Click on “Clear my history now

For Opera 6.0:

1. Choose the “File” menu > “Preferences”
2. Privacy

For Chrome:

1. Choose “Tools” menu > “Options”
2. Click on “Privacy” option
3. Section “Cookies”

For Safari:

1. Choose “Tools” menu >”Options”
2. Click on “Privacy” option
3. Section “Cookies”
4. Use of Facebook plug-ins

• Opting out of cookies

Opt-in: By agreeing to the opt-in following the display of the Cookies Box at the start of your navigation to our Website, you agree to the use of such cookies.

Opt-out: However, if you would like to opt-out of the Artefact cookie use, please refer to the opt out section of this page.

7. Plugins and options

• Facebook Plug-in

We have incorporated into our Website the social network, facebook.com (hereinafter “Facebook”) plug-ins. Facebook is the company Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. In the European Economic Area (EEA) the company responsible is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Facebook has certified to the EU-U.S. Privacy Shield Framework https://www.facebook.com/about/privacyshield.

If you access one of our Website pages from our own Website containing this plug-in, your browser will build a direct connection to the servers of Facebook. The content of the plug-in is transferred by Facebook directly to your browser and integrated by the latter to the Website.

When accessed, Facebook receives the information that someone has accessed the corresponding page of our Website. If at this moment you are logged into Facebook, Facebook can associate the visit to your Facebook account, even if you have not clicked on, for example the “Like” button. If you click on the “Like-Button”, the corresponding information is sent from your browser directly to Facebook and saved there. In addition, the information that you have visited our Website will be sent to Facebook, regardless of whether one of the plug-ins is operated or not.

Information about the purpose and extent of the data collected and the further processing and use of the data by Facebook, as well as your setting options to protect your private sphere can be found in the http://www.facebook.com/about/privacy/.

To prevent the transmission and storage of personal data about you and your surfing behaviour by Facebook, through our Website, please log off Facebook before you visit our Website.

• Use of Google Analytics

Our Website uses Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, California, 94043 USA, (hereinafter referred to as “Google”). In the European Economic Area (EEA) the company responsible is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google has certified to the EU-U.S. Privacy Shield Framework https://policies.google.com/privacy/frameworks?hl=en-US.

Google Analytics uses so-called “cookies” – text files that are stored on your computer – to help analyse how users use this Website. The information generated by the cookie about your use of the Website (including your IP address) will be transmitted to a Google server in the US and stored there. If the IP anonymisation on this Website is activated, your IP address will, however, first be shortened by Google in countries of the European Union or in other Contracting States to the Agreement on the European Economic Area (EEA). Only in exceptional cases is the full IP address sent to a server of Google in the USA and shortened there. On behalf of the operator of this Website Google will use this information to evaluate your use of the Website, compiling reports on Website activity for website operators and providing other use of this Website activity and internet related services Google will not associate your IP address with any other data held by Google.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however, we must point out that you may not be able to use all the features of this Website to the full extent. By using this Website you agree to the processing of data about you by Google in the manner described above and for the purposes set out above. The data collection and storage can be revoked at any time with effect for the future. Alternatively, you can use the opt-out add-on from http://tools.google.com/dlpage/gaoptout?hl=en, if it is available for your browser.

Moreover you can prevent the collection of the data created by the cookie and connected to your use of the Website (incl. your IP address) being sent to Google and the processing of this data through Google, if you download and install the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

It should be noted that this Website uses Google Analytics with the extension of the IP anonymisation, meaning that the last octet of IPv4 user IP addresses and the last 80 bits of IPv6 addresses are deleted and thus made anonymous. More information on IP anonymisation can be found under the following link: https://support.google.com/analytics/answer/2763052?hl=en.

• Use of Twitter (“Tweet” Button)

Functions of the Twitter service are integrated on our Website. These functions are offered by Twitter Inc., Twitter, Inc. 1355 Market St, Suite 900, San Francisco, CA 94103, USA (hereinafter referred to as “Twitter”). In the European Economic Area (EEA) the company responsible is Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland. Twitter has certified to the EU-U.S. Privacy Shield Framework https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO. Through the use of Twitter and the “Re-Tweet” the web pages you visit are linked to your Twitter account and made ​​known to other users. This data is also transmitted to Twitter.

We must point out that we provide these pages without knowledge of the content of the data provided by Twitter or its potential use. Further information on Twitter’s data protection and privacy policies can be found on https://twitter.com/privacy?lang=en.

Your privacy settings on Twitter, you can change the account settings under http://twitter.com/account/settings.

• Use of XING plugins (XING Share Button)

On this Website the “XING Share Button” is used. These functions are used by Xing SE, Dammtorstrasse 30, 20354 Hamburg, Germany (hereinafter referred to as “XING”. If you access one of our web pages from our own Website containing this button, your browser will build a direct connection to the servers of XING SE (“XING”), with which the “XING Share Button” functions (the calculation / display of the counter value in particular) are provided.

XING does not collect personally identifiable information (Non-PII) from you when you visit our Website. XING stores no particular IP addresses. There is no analysis of your usage behaviour over the use of cookies in connection with the “XING Share Button”.

We must point out that we provide these pages without knowledge of the content of the data provided by XING or its potential use. Further information on the “XING Share Button” and XING’s data protection and privacy policies can be found on https://www.xing.com/app/share?op=data_protection and https://privacy.xing.com/en/privacy-policy/printable-version.

• Use of LinkedIn plugins (LinkedIn Share Button)

On our web pages, plugins of the social network, LinkedIn is integrated. LinkedIn is a company, LinkedIn Corporation of 2029 Stierlin Court, Mountain View, CA 94043, USA (hereinafter “LinkedIn”). In the European Economic Area (EEA) the company responsible is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn has certified to the EU-U.S. Privacy Shield Framework https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active.

The LinkedIn plugin you can see in the LinkedIn logo or the “Recommend” button (“Share”) on the side of our Website. If you access one of our Website pages from our own Website containing this plug-in, your browser will build a direct connection to the servers of LinkedIn. The content of the plug-in is transferred by LinkedIn directly to your browser and integrated by the latter to the Website.

When you visit our pages, the plugin establishes a connection between your browser and the LinkedIn server is established. LinkedIn receives the information that you have with your IP address visited our site. If you click on the LinkedIn “Recommend” button while you are logged into your LinkedIn account, you can link the content of our pages to your LinkedIn profile. As a result, LinkedIn associate the visit of our pages to your account.

We must point out that we provide these pages without knowledge of the content of the data provided by LinkedIn or its potential use. Further details of data collection (purpose, scope, process, use) as well as your rights and options available, refer to the privacy policies of LinkedIn. This guidance can be found on https://www.linkedin.com/legal/privacy-policy.

• Use of Vimeo

We have embedded videos on this Website using the Vimeo service. The video platform is offered by Vimeo, LLC 555 West 18th Street New York, NY 10011, USA (hereafter “Vimeo”). Vimeo has certified to the EU-U.S. Privacy Shield Framework https://www.privacyshield.gov/participant?id=a2zt00000008V77AAE&status=Active. By clicking on an embedded Vimeo video on our Website, a connection is made to the servers of Vimeo in the USA. Vimeo then is informed and stores certain types of information about you, such as which pages you have visited and including your IP address. This applies regardless of whether you have an account with Vimeo. For more information on how Vimeo handles data, please see the https://vimeo.com/privacy and https://vimeo.com/cookie_policy.

• Use of YouTube

We have embedded YouTube videos on our Website. The video platform is operated by YouTube LLC, a subsidiary of Google Inc. (hereafter “Google”). In the European Economic Area (EEA) the company responsible is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When a user is clicking on a YouTube embedded video on our Website, a connection is made to the servers of YouTube. If you are signed in on your YouTube account, YouTube may be able to directly associate your user behaviour to your personal profile. This may be prevented if the user logs out of his/her personal YouTube account before clicking on our embedded videos on this Website. For more information please visit https://www.youtube.com/t/terms?preview=20190122.

• Use of Instagram (Instagram Share Button)

On our Website, we have integrated plugins of the social network, Instagram. The Instagram function is one of the Facebook products, provided by Facebook Ireland Limited. Facebook is the company Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. In the European Economic Area (EEA) the company responsible is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. “Facebook” has certified to the EU-U.S. Privacy Shield Framework https://www.facebook.com/about/privacyshield. For more information on terms of use and data policy, please visit https://help.instagram.com/581066165581870 and https://help.instagram.com/519522125107875.

• Use of ShareThis

On our Website we use the social plugins bookmarking service ShareThis Inc. (hereafter “ShareThis”), 4009 Miranda Avenue, Suite 200, Palo Alto, CA 94304-1227, USA. ShareThis has certified to the EU-U.S. Privacy Shield Framework https://www.privacyshield.gov/participant?id=a2zt0000000L1HMAA0&status=Active. These plugins allow users to set bookmarks (hereafter “bookmarks”) and to post or to share their contents in social networks (such as Twitter, Facebook or Google+). If a user elects to use any of these features and at that moment the user is logged into one or more of the appropriate service (e.g., Twitter, Facebook or Google+) online at the same time, the user’s visit can be associated. ShareThis receives from us any personal information, but leads an anonymous usage statistics about the shared content. This data is deleted there regularly. For more information on data collection, analysis and processing of your data by ShareThis Inc. and your rights related thereto, see the privacy policy of ShareThis, Inc. under http://www.sharethis.com/legal/privacy/” l “sthash.0uXFfbOr.dpbs. If you do not want your visit to our Website to be associated with your user accounts in the relevant social networks and social bookmarking services, we recommend you do not use the appropriate button on ShareThis on our Website or using ShareThis via the link “Do not Track” to disagree.

• The use of other tracking tools

It may happen that third-party content, such as videos from YouTube, maps from Google Maps and Snazzy Maps, RSS feeds or graphics from other websites are integrated into our Website. These third-party tracking tools on our Website, enable us to collect and process data for marketing and optimisation purposes of our online services. These data can be used to create pseudonymous user profiles. Without explicit consent of the data subject, however, there is no personal identifying and no data collected and combined to form a personal profile. Our web server collects information about each visitor to our Website (the name of the Internet service provider, the website from where he/she visited us, the websites he/she visited along with the date and the duration of the visit). We make every effort to use only those third-party contents whose respective providers only use the IP address to deliver the third-party content. However, we have no influence on whether the third party providers store the IP address for other purposes, as for example for statistical purposes. As far as this is known to us, we will inform the users about it.

The data collection and storage can be revoked at any time with effect for the future.

Opt-out: If you would like to opt-out of the Google tracking tools cookie use, please refer to the opt-out section of this page.

8. Data Security

We value the protection of your Personal Data. On our Website wherever you can input data in an active manner, we use encryption systems, such as SSL (Secure Socket Layer) so keep your personal data safe. We secure our Website and other systems through technical and organisational measures against loss, destruction, access, modification or distribution of your data by unauthorised persons.

Access to your account or to certain parts of our Website that are access-protected is only possible after entering your personal user name and password. Please do not forget to keep your password confidential and do not share your password with anyone. When you have finished your communication with us on our Website, please do not forget to log off and close the browser window, especially if you share your computer with others.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our Website; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised data access, destruction or alteration. As technology advances we are regularly updating and enhancing the security and organisational measures.

9. Updates

We may change this policy from time to time by updating this page. Please check this page every once in a while to ensure that you are aware of any changes. This policy was last updated on 12 April 2019.

10. Further information and contacts

If you have further questions about this Policy, please contact us:

Artefact S.A.

Data Protection Officer

19 Rue Richer

75009 Paris

FRANCE

Tel: + 33 1 79 72 45 45

privacy@artefact.com