Privacy Policy

Latest changes: Jun 21, 2022

The hereby privacy policy (hereinafter referred to as the "Privacy Policy") sets forth the legal framework for the collection, use and processing by REUSSIR (hereinafter referred to as "COMMOPRICES") of personal data on behalf of its customer (hereinafter referred to as the "Subscriber") in connection with the use of the SaaS services offered via the "Commoprices" platform designed, developed, and operated by COMMOPRICES (hereinafter referred to as the "Platform").

Under the Privacy Policy, the data controller is the Subscriber. As the data controller, the Subscriber retains full control over the personal data and determines the purpose, nature, goals, means and duration of the processing of personal data by COMMOPRICES under the subcontracts between COMMOPRICES and the Subscriber.

COMMOPRICES acts as a subcontractor and as such, collects, uses and processes on behalf of the Subscriber the data entrusted to it by and on the instructions of the Subscriber.

The personal data (hereinafter referred to as the "Personal Data") that COMMOPRICES collects on behalf of the Subscriber relates to the authorized persons of the Subscriber's staff using the Platform (hereinafter referred to as the "Users").

COMMOPRICES also acts as a data controller and as such, collect, use and process data on its own behalf, in particular to provide a service adapted to the Subscriber and ensure the proper functioning of the Platform.

The information of the Personal Data collected in the framework of the Privacy Policy is mandatory and necessary for the processing and for the provision of the services offered by COMMOPRICES via the Platform (hereinafter referred to as the "Services"). Failure to provide such information will prevent the proper functioning of the Services.

COMMOPRICES undertakes to comply with the applicable regulations on the protection of Personal Data and in particular the obligations arising from the European Regulation No. 2016/679 on the Protection of Personal Data (hereinafter referred to as the "GDPR").

COMMOPRICES collects Personal Data only in accordance with the terms of this Privacy Policy and any reasonable and legal instructions given by the Subscriber at any time.

ARTICLE 1: INFORMATION COLLECTED

The communication of the Personal Data is mandatory and strictly necessary for the proper functioning of the Platform and the Services. Otherwise, the Services cannot be provided.

1.1 Throughout the use of the Platform and the Services, COMMOPRICES may collect on behalf of the Subscriber and according to his/her instructions, any information, directly or indirectly identifying the Users.

1.2 Personal Data can be collected directly when the User communicates them to COMMOPRICES through the User account creation forms on the Platform. When connecting at the first time, the User expressly consents to the processing of his/her Personal Data within the limits of a processing strictly necessary for the proper functioning of the Platform and the Services. The communication of nominative information is mandatory in order to provide the User with an identifier and password for access to the Platform.

This includes Personal Data relating to the identity of the User and in particular: surname, first name, email address, telephone number.

COMMOPRICES (including its technical service providers) may also automatically collect:

  • Data related to the User's activity,
  • Data related to the User's browsing, in particular the anonymized IP address, the browser used, the browsing time, the operating system used, the language and the pages viewed,
  • Data relating to the use of the Platform by the User, in particular traffic data, the number of notifications, the number of visits, the number of data updates, the number of launches of the Platform and all other data or communication resources used by the User when accessing the Platform.

ARTICLE 2: USE OF PERSONAL DATA COLLECTED (PURPOSES OF PROCESSING)

COMMOPRICES uses, stores and processes Personal Data for the following purposes:

Purpose Controller Legal basis of the processing
Creation and management of an account on the Platform Subscriber The processing is necessary for the execution of the contract between the User and the Subscriber and the contract between the Subscriber and COMMOPRICES.
Access and use of the Services on the Platform by the User Subscriber The processing is necessary for the performance of the contract between the User and the Subscriber and the contract between the Subscriber and COMMOPRICES.
Answer to possible questions/complaints from Users - Assistance Subscriber The processing is necessary for the performance of the contract between the User and the Subscriber and the contract between the Subscriber and COMMOPRICES.
Management of requests for access, portability, deletion, rectification and opposition rights Subscriber and COMMOPRICES User Data: The processing is necessary for the performance of the contract between the User and the Subscriber and the contract between the Subscriber and COMMOPRICES.
Dispute Management COMMOPRICES The processing is necessary for the performance of the contract between the User and the Subscriber and the contract between the Subscriber and COMMOPRICES.
Development, improvement of the Platform, creation of an environment of trust COMMOPRICES The processing is necessary for the legitimate interests pursued by COMMOPRICES.
Commercial prospecting COMMOPRICES The processing is carried out on the basis of the User's
Audience rating COMMOPRICES The processing is necessary for the purposes of the legitimate interests pursued by COMMOPRICES.

Lastly, COMMOPRICES reserves the right to review, browse or analyze Personal Data, including communications exchanged between COMMOPRICES and Users through the Platform, to comply with its legal obligations and in particular for fraud prevention, risk assessment, regulatory compliance and investigation purposes.

ARTICLE 3: STORAGE OF PERSONAL DATA

Personal Data is kept only as long as necessary to fulfill the purpose for which COMMOPRICES holds the data, to meet the Subscriber's needs or to fulfill its legal obligations.

At the end of the applicable periods and no later than six (6) months after the end of the use of the Services by the User or after the end of the commercial relationship between the Subscriber and COMMOPRICES, the Personal Data will be destroyed or COMMOPRICES will proceed to their anonymization.

However, COMMOPRICES may keep certain Personal Data collected on separate storage spaces in order to comply with its legal or regulatory obligations. The data stored in this way will be limited to what is strictly necessary.

ARTICLE 4: SHARING AND DISCLOSURE OF PERSONAL DATA

4.1 COMMOPRICES may disclose Personal Data to administrative and judicial authorities, or to authorized third parties, if required or permitted by law, or if such disclosure is reasonably deemed necessary: (i) to comply with COMMOPRICES' legal obligations, (ii) to comply with legal procedure and in response to claims against COMMOPRICES or the Subscriber, (iii) to respond to verified requests in connection with a legal investigation or alleged or suspected illegal activity or any other activity that may expose COMMOPRICES or Subscriber to legal liability.

4.2 Subject to the Subscriber's authorization, COMMOPRICES may subcontract all or part of the execution of the Services in accordance with the legal provisions in force.

In this context, COMMOPRICES will not transfer Personal Data to third parties established outside the European Union that do not offer an adequate level of protection with regard to legal requirements for the protection of Personal Data.

This includes COMMOPRICES' service providers that support COMMOPRICES' business such as:

  • The host of the Personal Data, acting as a subcontractor: COMMOPRICES uses the services of OVH and Digital Ocean as host of the Personal Data.
  • COMMOPRICES' technical service providers or its various suppliers such as payment solution providers, who will process Personal Data for the sole purpose of the proper execution of the Services.
  • COMMOPRICES' partners so that they can propose their offers and services adapted to the professional activities of the Subscribers and/or Users, subject to the consent of the latter.

Any subcontractor of COMMOPRICES (hereinafter referred to as the "Subsequent Subcontractor") will be permitted to process on behalf of COMMOPRICES the Personal Data necessary to provide the Services to the Subscriber.

COMMOPRICES affirms to:

  • Have provided in writing any instructions regarding the processing of Personal Data by the Subsequent Subcontractor.
  • To ensure, in advance and throughout the processing, that the obligations set forth in the European regulation on the protection of Personal Data are respected by the Subsequent Subcontractor.
  • Supervise the processing, including audits and inspections of the Subsequent Subcontractor.

COMMOPRICES undertakes to ensure that the Subcontractor will:

  • Process Personal Data only for the sole purpose(s) of the subcontract.
  • Process the Personal Data in accordance with COMMOPRICES' instructions.
  • Guarantees the confidentiality of the Personal Data processed.
  • Has undergone the necessary training on the protection of Personal Data.
  • Takes into account, with regard to its tools, products, applications or services, the principles of Privacy by design and Privacy by default.
  • Informs COMMOPRICES immediately if it considers that an instruction constitutes a violation of the European Regulation on the protection of Personal Data or of any other provision of the law of the European Union or of the Member States relating to the protection of Personal Data.

Personal Data may also be transmitted to commercial partners that allow COMMOPRICES to properly execute subscriptions, their management, processing and payment under the contractual conditions signed between the partner and COMMOPRICES that cannot derogate from the conditions of this Privacy Policy.

Only with the express consent of the Subscriber, COMMOPRICES may reuse Personal Information or transmit it to partner companies for the purpose of sending commercial information by e-mail.

COMMOPRICES affirms that it will receive from the Subsequent Contractor all documentation necessary to demonstrate compliance with its obligations and to allow for audits, including inspections, by COMMOPRICES or another auditor it has appointed, and to contribute to such audits.

COMMOPRICES shall remain solely responsible for the provision of the Services entrusted to a Subsequent Contractor.

ARTICLE 5: PROTECTION OF PERSONAL DATA - USERS' RIGHTS

5.1 REUSSIR ensures that Personal Data is adequately and appropriately secured and has taken all necessary precautions to preserve the security and confidentiality of the data and in particular to prevent it from being distorted, damaged or communicated to unauthorized persons.

The Personal Data collected is captured and processed in computer systems under the responsibility of REUSSIR. REUSSIR's concern is to preserve the confidentiality, quality and integrity of the data. The technical means implemented respect the best security practices in force. The technologies and security policies used protect Personal Data from unauthorized access or improper use.

Only authorized REUSSIR employees have access to data and are subject to confidentiality obligations imposed by our internal policy. REUSSIR only transfers Personal Data to authorized subcontractors.

When REUSSIR becomes aware of a breach of rights in the processing of Personal Data, it will notify the CNIL within a period of no more than seventy-two (72) hours after becoming aware of the breach.

Any violation relating to the processing of Personal Data will be notified by e-mail, within one (1) month, by COMMOPRICES to the Subscriber and the User involved.

5.2 In all cases, the persons involved have the right to access, rectify, modify, oppose, portability and delete Personal Data. These rights must be exercised directly by the Subscriber who will contact COMMOPRICES by email at contact@commoprices.com, or by post at 1 rue Léopold Sédar Senghor 14460 Colombelles, France, for the attention of the Data Protection Officer (DPO), indicating the surname, first name and/or company name, home address or registered office, email address and telephone number of the person concerned.

In accordance with the regulations in force, all requests must be signed and accompanied by a photocopy of an identity document bearing the User's signature, upon request by COMMOPRICES.

The person involved will be able to retrieve his/her Personal Data in an open and readable format. The right to portability is limited to the data provided by the Subscriber. It applies on the basis of the prior consent of the person involved. COMMOPRICES undertakes to transfer, upon request, within one (1) month, any document collecting Personal Data to the Subscriber in order to implement the right to portability. The costs related to the recovery of the data are the responsibility of the Subscriber.

ARTICLE 6 : COOKIES

6.1 In the context of the use of the Services on the Platform by the Users, COMMOPRICES may use cookies.

6.2 Some cookies are essential for the User to take advantage of all the features of the Platform and do not collect confidential information about the Users.

In accordance with the CNIL deliberation n° 2013-378 of December 5, 2013, COMMOPRICES informs Users that cookies record certain information that is stored in the memory of their computer hardware/equipment. This information is used to improve the use and operation of the Platform, but also to understand how the Platform is used by Users, as well as the tools and Services that COMMOPRICES makes available to them. An alert message informs each person visiting the Platform of the presence of these essential cookies.

6.3 The Platform also uses third party cookies for non-essential purposes to understand how the Platform works and how the User interacts with the Platform, to provide advertisements that are relevant to the User and overall to provide a better and improved User experience and to speed up future User interactions with the Platform.

6.4 To ensure the User's free, informed, and unequivocal consent, the User visiting the home page or another page of the Platform directly from a search engine will be informed of:

  • The precise purposes of the cookies used,
  • Of the possibility to oppose these cookies and to change the settings by clicking on a link in the banner,
  • And of the fact that the continuation of his/her navigation does not mean that he/she agrees to the deposit of cookies on his/her terminal.

Unless the User gives his/her prior consent, cookies will not be deposited or read.

6.5 The User may at any time choose to deactivate cookies and other tracers. The User's browser can be configured to notify him/her of cookies that are deposited in his/her terminal and to ask him/her to accept them or not.

The configuration of each browser is different. It is described in the browser's help menu, which will allow the User to know how to modify his/her wishes regarding cookies.

  • Firefox: https://support.mozilla.org/fr/kb/cookies-informations-sites-enregistrent
    • Click on the menu button and select "Options".
    • Select the "Privacy" panel.
    • Set the "Retention Policy" menu to "Use custom settings for history".
    • Uncheck the "Accept cookies" box.
    • Any changes you have made will be automatically saved.
  • Internet Explorer : https://support.microsoft.com/en-us/products/windows?os=windows-7
    • Click on the Tools button, then on "Internet Options".
    • Click on the "Privacy" tab, then under "Settings", move the slider up to block all cookies or down to allow all cookies, then click OK.
  • Google Chrome: https://support.google.com/chrome/answer/95647?hl=fr
    • Select the Chrome menu icon.
    • Sélectionnez "Paramètres".
    • Select "Settings."
    • At the bottom of the page, select "Show advanced settings."
    • Select "Block all sites from storing data."
    • Select OK.