BLOSSOM TALENTS PRIVACY POLICY.

CONFIDENTIALITY.

The company BLOSSOM TALENTS (hereinafter referred to as the “Data Controller”), publisher of the website www.blossomtalents.com (hereinafter the “Website”), undertakes to maintain the strictest confidentiality and not to disclose to any third party, directly or indirectly, either the existence or the characteristics of the information provided by the users of the Website (hereinafter the “Users”), except for the processing contemplated by this Privacy Policy.

To this end, the Data Controller implements all technical and organisational measures to protect the data but cannot guarantee their absolute security.

Confidentiality may be partially or fully waived in the following cases:

The information has entered the public domain prior to its disclosure by the User or by a third party.

Upon the User’s express, written, and prior authorisation.

Upon injunction pursuant to a legal or regulatory provision or within the framework of judicial, administrative, or arbitral proceedings.

By using the Website, the User consents to and accepts the use of their personal data by the Data Controller, in accordance with this Privacy Policy.

PERSONAL DATA.

Data collected.

As part of its activity, the Data Controller may process information concerning Users, some of which may allow them to be identified (hereinafter “Personal Data”).

The processing of this data is carried out in accordance with the provisions of Regulation (EU) of the European Parliament and of the Council of 27 April 2016 (hereinafter “GDPR”) and French Law No. 78-17 of 6 January 1978 (hereinafter the “Data Protection Act”).

The processing of this data is based on the User’s consent, in accordance with Article 6(1) of the GDPR.

The Personal Data collected by the Data Controller includes:

Last name, first name, date of birth;
Email address, telephone number, postal address;
Bank details;
Any other information voluntarily provided on the Website or through communications between the User and the Data Controller.

Toute autre information volontairement portée sur le site ou au travers les communications entre l’Utilisateur et le Responsable du traitement.

Information collected automatically (cookies):

IP address and identifiers of the computer equipment;
Operating system used by the device;
Type and version of the browser used;
Date and time of connection to the Website;
Browsing data on the Website, content viewed.

The Data Controller does not collect or process any sensitive data. Any sensitive information or data voluntarily communicated by a User on the Website is the sole responsibility of the User.

Purposes of processing.

The processing of this Personal Data by the Data Controller enables the operation, provision, and improvement of the services offered to the User. These purposes include:

Providing, troubleshooting, and improving the Website;
Performance of the contract;
Sending of emails;
Statistics and audience measurement;
Personalisation of advertising (“Retargeting” or “advertising retargeting”);
Fraud prevention.

Recipients of the data collected.

The Personal Data collected is primarily intended for processing by the Data Controller (internal services) as well as the following processors:

Hosting provider: SCALEWAY SAS, 8 rue de la Ville l’Evêque, 75008 Paris, with share capital of €214,410.50, RCS No. 433 115 904;
Payment provider: Stripe Payments Europe, Ltd. (SPEL), 1 Grand Canal Street Lower, Grand Canal Dock, DUBLIN D02 H210 (IRELAND).

Details of how these providers process this data can be found at the following links:

SCALEWAY: https://security.scaleway.com/
Stripe: https://stripe.com/fr/privacy

Where applicable, the Data Controller may disclose the data collected in order to comply with legal, regulatory, judicial, or administrative obligations.

Data retention period.

Data is retained for as long as necessary to fulfil the purposes stated above, and for no longer than two (2) years from the last interaction with the Website. The Data Controller takes reasonable steps to ensure confidentiality.

However, the Data Controller may retain certain data for a longer period where necessary to comply with legal, regulatory, judicial, or administrative obligations.

Rights of the data subject.

In accordance with the French Data Protection Act and the GDPR, the User has the right to:

Access, rectify, update, and erase their personal information;
Object to the processing of their personal data for legitimate reasons, and without justification and at no cost, to the use of such data for commercial prospecting purposes;
Request information from the Data Controller about the processing of their data;
Define instructions regarding the fate of their Personal Data after their death;
Port their data from one automated system to another, without the Data Controller being able to object;
Be informed by notification in the event of a security breach and unauthorised access to their information;
Withdraw their consent at any time to the processing of their data;
Lodge a complaint with a supervisory authority in the event of a breach by the Data Controller of these rights.

The User may exercise the rights described above by contacting the Data Controller:

By email: formation@blossomtalents.com; or
By post: 20 grande rue, 91260 Juvisy-sur-Orge, enclosing a copy of an identity document with the request.

The Data Controller hosts the website with a specialised provider (OVH), whose details are included in the Legal Notice.

Security of Personal Data.

The Data Controller undertakes to take all technical and organisational measures to ensure the protection and security of personal data, in particular against any loss, alteration, disclosure, or unlawful use.

The Data Controller ensures that such measures are implemented across all operations carried out as part of its processing activities, notably during the collection, storage, and hosting of personal data.

The Data Controller also ensures that any third parties it may call upon (technical service providers, suppliers) comply with this requirement to protect the User’s personal data by implementing appropriate measures, in accordance with the Applicable Regulations. The technical and organisational measures implemented may include the use of secure registration forms, encryption of certain data (such as banking data), and restricted access to personal data.

The Data Controller advises the User to exercise the utmost caution when disclosing their personal data to third parties, as well as their personal login credentials and passwords that allow access to the Website.

Some messages or requests received may come from malicious individuals seeking to obtain the User’s personal information for fraudulent purposes (a practice known as phishing). If the User receives a message that appears to be a phishing attempt, they are advised not to reply to it and not to open any attachments, images, or links contained in the message. The User may report it by email to formation@blossomtalents.com and on www.signal-spam.fr.

Access to and communication of Personal Data.

Communication of Users’ personal data to the Data Controller’s employees:

The User’s personal data is accessible to the Data Controller’s employees if these individuals need such access to perform the purposes set out in the “Purposes of processing” section, namely, primarily, to provide the Services to Users appropriately. The Data Controller’s internal departments that may have access to Users’ personal data include the IT department, technical support department, and marketing/sales department.

Communication of Users’ personal data to third parties:

Communication to service providers:

The Data Controller may grant access to Users’ personal data to third-party service providers, acting as subcontractors within the meaning of the Applicable Regulations, to perform services relating to the Website or the processing of data, including hosting, storage, analytics, marketing, communication, data processing, database management, or IT maintenance. These service providers act solely on the Data Controller’s instructions and will have access to Users’ personal data only to perform these services. They will be bound by the same security and confidentiality obligations as the Data Controller.

Communication to Partners for commercial prospecting purposes:

Users’ personal data is not communicated or transferred to third parties for commercial or promotional purposes, unless the User has given their prior express consent.

The User’s choice to receive offers or commercial prospecting messages from and/or its Partners is subject to their prior and express agreement by means of a corresponding checkbox available when they are invited to provide personal data.

If the User no longer wishes to receive them, they may unsubscribe at any time via the link located at the bottom of each message received or by contacting the Data Controller by email at: formation@blossomtalents.com

Other types of communication:

Furthermore, the User’s personal data may be shared with third parties for the following reasons:

in the event of a transfer or contribution of a business, a merger, acquisition, absorption, spin-off, consolidation of assets, and more generally, any acquisition or sale of all or part of the assets, in any form whatsoever, of the Data Controller, with the purchaser being required to comply with all obligations arising from the Applicable Regulations, which the User acknowledges having been informed of;
in response to legal or administrative proceedings of any kind or to law enforcement measures requested by the competent authorities;
to comply with legal obligations, to protect the rights and/or safety of an individual, to protect the rights and property of , including the necessity of enforcing the General Terms and Conditions of Sale, and to prevent issues of fraud, security, or technical problems.

Transfer of Personal Data.

However, in certain cases, the Data Controller may transfer Users’ personal data to countries outside the European Union, provided that such countries offer an adequate level of protection within the meaning of the Applicable Regulations, or where appropriate safeguards have been implemented in accordance with said Regulations.

In the event of a transfer of personal data to a country whose level of protection is not recognised as adequate by the European Commission, the Data Controller undertakes to put in place appropriate guarantees to protect such data, such as the signing of standard contractual clauses adopted by the European Commission.

COOKIES.

Définition.

A cookie (or “tracker”) is a small computer file, placed and read when visiting a website. The term cookie includes, for example, HTTP cookies, flash cookies, fingerprinting results, invisible pixels, or any other identifier generated by software or an operating system.

Cookies placed on the Site.

Technical cookies (including audience measurement cookies): These allow, among other things, to determine whether or not you are logged into your client or reserved space, or to manage your selection of products or services. The Site may also use statistical and audience measurement cookies intended to determine the number of visitors and the sections visited.
Third-party application cookies: Used in accordance with the previous articles by Google, Facebook, and Instagram.
Optional cookies: Intended to improve the user experience and facilitate searches by offering products and offers related to the user’s interests.

Bloquer ou supprimer les cookies.

L’Utilisateur peut décider, à tout moment d’accepter ou de refuser tout ou partie des cookies.

Cependant, le refus de tout ou partie des cookies pourrait empêcher l’Utilisateur d’accéder à certaines fonctionnalités du Site.

Le cas échéant, le Responsable du traitement ne pourra pas être tenu pour responsable pour les conséquences liées au fonctionnement dégradé du Site résultant de l’impossibilité pour le responsable du traitement d’enregistrer ou de consulter les cookies nécessaires à son fonctionnement.

Blocking or deleting cookies.

The User may decide at any time to accept or refuse all or part of the cookies.

However, refusing all or part of the cookies may prevent the User from accessing certain functionalities of the Site.

In such cases, the Data Controller cannot be held responsible for the consequences related to the degraded operation of the Site resulting from the inability to record or access cookies necessary for its operation.

The User may:

Accept cookies: all cookies are accepted (default option).
Accept only cookies from the visited site: cookies from third parties, from a domain other than the one visited, are refused.
Never accept cookies: all cookies are refused.

To manage cookies, the User must refer to the relevant sections of their Internet browser:

Safari

Chrome

Firefox

Edge / Internet Explorer

The User may configure their browser to send a code indicating to websites that they do not wish to be tracked (the “Do not track” option).

Microsoft Internet Explorer.

http://windows.microsoft.com/fr-fr/internet-explorer/use-tracking-protection#ie = ie-11

Microsoft Edge

https://privacy.microsoft.com/fr-fr/windows-10-microsoft-edge-and-privacy

Apple Safari

https://support.apple.com/fr-fr/HT212025

Google Chrome

https://support.google.com/chrome/answer/2790761

Mozilla Firefox

https ://support.mozilla.org/fr/kb/comment-activer-option-ne-pas-pister

Opera
https://help.opera.com/en/latest/security-and-privacy/#tracking

Audience measurement and analytics cookies.

Analytics cookies make it possible to obtain anonymous visitor statistics to optimise the site and detect possible malfunctions.

If the User does not wish the site to store cookies in their browser for audience measurement purposes, they may click on the following links to obtain further information:

Cookies Google Analytics.

https ://tools.google.com/dlpage/gaoptout

Social media cookies :

The site may include social media features. These features may generate cookies to enable them to function and to collect the User’s IP address and browsing data. These features are governed by the privacy policy of the company providing them.

To manage data on Facebook and Instagram:

https ://www.facebook.com/help/cookies/

To manage data on Google:

https://policies.google.com/technologies/cookies?hl=en

The User is advised that if they decide to block or disable all or part of the cookies placed by the Data Controller through the Site, the Site may not function properly and the User may not be able to benefit from all the services and functionalities provided through the use of cookies.

If you have any questions or comments about how the Data Controller uses cookies and other trackers, you can contact the Data Controller by email: formation@blossomtalents.com

CHANGES TO THE PRIVACY POLICY.

This Policy may be modified by the Data Controller at any time. In this case, the update date of the Policy will be changed to indicate the day the modifications were made.

If the Data Controller makes significant changes, Users will be informed by email. In the event of a change to the Policy, the new version in force will apply to the User from the moment they log in to the Site.

In the event of a dispute between the User and the Data Controller, the applicable Policy will be the one in effect at the time of the facts giving rise to the dispute.

CONTACT.

In general, if the User has any questions or comments regarding this Policy or about how the Data Controller uses their data, they may contact the Data Controller at the following address: formation@blossomtalents.com