Data protection

Protection of personal data

Data controller and purposes of processing:

The company Covr (hereinafter "Covr") is the controller of personal data processing carried out for the following purposes:

Purposes of processing	Legal bases
Management of contracts and orders	Performance of the contract between us and our legitimate interest
Management of relations with affiliates	Performance of the contract between us and our legitimate interest
Management of the loyalty programme	Performance of the contract between us and our legitimate interest
Carrying out surveys and polls	Our legitimate interest
Management of customer reviews	Our legitimate interest
Commercial prospecting	Our legitimate interest or your consent where required by regulations
Carrying out statistical processing	Our legitimate interest
Management of contact requests	Our legitimate interest
Management of complaints and any disputes	Performance of the contract between us and our legitimate interest

Categories of data collected and sources:

Covr processes the following categories of personal data: identification data (surnames, first names, date of birth, etc.), contact data (email address, postal address, telephone number, etc.), interests, payment and billing information, professional life information (job title, professional email address, etc.).

Your data is collected by Covr in particular where a request is made directly on the website. It may also have been transmitted to Covr by its commercial partners with whom it contracts (advertising agencies, etc.).

The information collected by Covr that is essential to fulfil the above-mentioned purposes is identified by an asterisk on the collection forms. If you do not complete these mandatory fields, Covr may not be able to provide the service concerned.

Recipients of the data:

Your personal data is mainly communicated to, or accessible by, the following Covr departments:

• Sales Department
• Communications Department
• Marketing Department
• Information Systems Department

Your personal data may also be communicated to third parties (for example for hosting and IT maintenance purposes) in connection with the above-mentioned purposes. Processors acting on Covr's instructions will be required to implement appropriate protection measures. If Covr has partners located in countries whose regulations do not offer an adequate level of protection in terms of personal data protection, Covr will ensure that such transfers are carried out in accordance with French regulatory requirements (for example, by putting in place contractual clauses adopted by the European Commission). You may contact our company to obtain further information on these matters as well as a copy of the relevant documents.

Retention period:

The personal data processed by Covr is retained for the time necessary to fulfil the above-mentioned purposes in accordance with applicable regulations. For example:

• - data relating to commercial prospecting is retained for three years from the last contact;
• - data relating to customers is retained for the duration of the contract plus the limitation period.

Your rights:

You have rights in accordance with the applicable regulations:

• You have the right to request access to and rectification of your personal data held by Covr that concerns you.
• You have the right to request the restriction of the processing of your personal data, (i) if you contest the accuracy of your data, for the period enabling us to verify its accuracy, (ii) if you consider that we are processing your data unlawfully and you require the restriction of its use rather than erasure, (iii) if we no longer need your data for the purposes set out above but it is still necessary for the establishment, exercise or defence of your legal claims, (iv) where you have exercised your right to object, for the period of verification as to whether the legitimate grounds we pursue override yours.
• You have the right to request the deletion of your personal data. In the event of a request for deletion of your data, Covr may nevertheless retain it in the form of intermediate archiving, for the period necessary to satisfy its legal, accounting and tax obligations.
• You have the right to request to exercise your right to object at any time on grounds relating to your particular situation.
• You also have the right to object to commercial prospecting, without having to give any reason.
• You have the right not to be subject to a decision based solely on automated processing and producing legal effects concerning you or significantly affecting you.
• You have the right to exercise your right to data portability, which entitles you to obtain a copy of your data or to transfer it to a third party in a structured, commonly used and machine-readable format.
• You have the right to withdraw your consent to the processing of data concerning you at any time, where the processing requires your consent.
• You also have the right to issue directives concerning the retention, erasure and communication of your personal data after your death. General directives (concerning all personal data relating to the data subject) may be registered with a digital trusted third party certified by the CNIL (Commission nationale de l'informatique et des libertés). Specific directives are to be sent to Covr.

These rights may be exercised at any time by sending an email via our contact form located in the Contact section of the website.

You may also, if you wish, lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL). Additional information is available on its website www.cnil.fr.