Detailed Terms Related to Personal Data Protection
1. Introduction
2-M is committed to protecting the personal data of its customers and data subjects. This policy describes how we collect, use, retain, and protect personal data and how data subjects can exercise their rights over this data in accordance with the requirements of the General Data Protection Regulation (GDPR).
2. Data Protection Responsibility
2-M is responsible for protecting the personal data of its customers and data subjects. We have appointed a Data Protection Officer (DPO) who is responsible for ensuring that our personal data protection practices comply with GDPR requirements. Data subjects can contact our DPO at the following address: rgpd@2-m.fr.
3. Data Collection
2-M only collects personal data necessary to provide our IT services. We do not collect sensitive data unless expressly authorized by law or with the explicit consent of the data subject. We may collect personal data in various ways, including through our websites, applications, by phone, or in person. The personal data we collect may include, but is not limited to:
- Personal identifiers such as name, address, phone number, email address, date of birth, etc.
- Connection and browsing information such as IP address, cookies, visited web pages, etc.
- Payment information such as credit card numbers and billing information.
4. Data Usage
2-M uses its customers' personal data only in the context of providing our IT services. We do not share this data with third parties unless necessary to provide the requested service or if required by law. We may use personal data to:
- Provide our IT services and respond to customer requests.
- Improve our services and customer experience.
- Provide information about our products and services.
- Comply with legal and regulatory requirements.
5. Data Retention
2-M retains its customers' personal data for the duration necessary to provide the requested services and to comply with legal and regulatory requirements. We implement data retention policies to ensure that personal data is stored securely and is appropriately deleted when retention is no longer necessary.
6. Data Subject Rights
2-M recognizes the rights of data subjects regarding their personal data, such as the right of access, rectification, opposition, deletion, and data portability. We are committed to responding to data subject requests as promptly as possible. Data subjects can exercise their rights by contacting our DPO at the following address: rgpd@2-m.fr. We will review data subject requests and take appropriate measures to respond in accordance with applicable legal and regulatory requirements.
7. Data Security
2-M implements appropriate security measures to protect personal data against unauthorized access, disclosure, modification, or destruction. We have established information security policies to ensure that personal data is processed securely. These measures include, but are not limited to:
- Limiting access to personal data only to authorized persons who need it to perform their work.
- Using security software to protect personal data against malicious attacks.
- Regular training of our staff on information security practices.
8. Data Breaches
In case of a personal data breach, 2-M commits to notifying the competent authorities and data subjects in accordance with applicable legal and regulatory requirements. We have established procedures to handle data breaches and will take appropriate measures to minimize the effects of any data breach.
9. Training and Awareness
2-M is committed to training and raising awareness among its staff about GDPR requirements and measures to protect personal data. We also commit to raising awareness among our customers about personal data protection and informing them about their rights.
10. Data Protection Policy Review
2-M will regularly review this personal data protection policy to ensure it remains compliant with applicable legal and regulatory requirements. Updates to this policy will be published on our website and communicated to data subjects if necessary.
Contact
If you have any questions or concerns about our personal data protection policy or if you wish to exercise your data protection rights, you can contact our DPO at the following address: rgpd@2-m.fr.