Privacy Policy
This privacy policy (the “ Privacy Policy ”) is published by ARCANCE EVENT, a simplified joint stock company with capital of 15,000.00 euros, headquartered at 15 rue de Moscou 75008 - PARIS, registered with the Paris Trade and Companies Register under number 479016479, with intercommunity VAT number FR75479016479. ARCANCE can be contacted by post at the above address and by e-mail at data@plateforme-expose.com.ARCANCE publishes a digital platform in SaaS mode called EXPOSE (the “ Platform ‘), enabling organizers of trade shows, conventions and meetings (the ’ Organizer(s)” and the “ Event(s)”) to centrally manage all orders required to hold Events. These orders are collected via the deployment of online stores (the “ Marketplace(s)”) created specifically by ARCANCE, on behalf of the Organizers, for each Event and made available to exhibiting customers (the “ Exhibitor ”). To this end, ARCANCE is the publisher and owner of databases including, in particular, the catalogs of specialist suppliers (the “ Catalogues ” and the “ Suppliers ”). Organizers, Exhibitors and Suppliers (collectively, the “ Users ”) therefore have a user account on the Platform (collectively, the “ User Account ”), via which ARCANCE collects and processes personal data.
ARCANCE indeed pays particular attention to the respectful treatment of its Users' data and complies in this sense with Law No. 2018-493 of June 20, 2018 on the protection of personal data, which amended Law No. 78-17 of January 6, 1978 on data processing, files and freedoms, as well as Regulation (EU) 2016/679 (the “ RGPD ‘) on the protection of individuals with regard to the processing of personal data and on the free movement of such data (collectively, the ’ Regulation ”).
For the purposes hereof, the terms “ Processing ”, “ Data Controller ”, “ Subcontractor ”, “ Supervisory Authority ”, “ Data ”, shall have the meaning indicated in the RGPD.
ARTICLE 1. PURPOSE OF THE PRIVACY POLICY
1.1 The purpose of the Privacy Policy is to inform Users (i) of the methods used to collect and process their personal data, as defined by the Regulations (the “ Data ”) via the Platform, as well as (ii) of the means implemented by ARCANCE to ensure the security of the collection and processing of their personal data carried out via the Platform. The Privacy Policy may be modified at any time by ARCANCE, in particular for the purpose of updating it to reflect changes in current legislation and regulations, subject to informing Users. In case of doubt, the latest version is the one appearing on the Platform. Users are reminded that the Privacy Policy applies in addition to the General Terms and Conditions of Use of the Platform (the “ GTCU ”), available when Users register and on their User Account, and the various contracts binding Users to ARCANCE, namely : the license agreement between ARCANCE and the Organizer (the “ License Agreement ”), the general terms and conditions of sale and rental between ARCANCE and the Exhibitor (the “ GTCR ”) and the general terms and conditions of purchase between ARCANCE and the Supplier (the “ GTCP ”). Users undertake to read them before browsing the Platform and before communicating any Data. They also undertake to inform their employees, where applicable, of the Data collection procedures.
ARTICLE 2. ARCANCE'S ROLE IN DATA PROCESSING
2.1 As part of the provision of the Platform to Organizers: the Organizer is solely responsible for the processing actually carried out via the Platform, in that it determines the purposes and means of the processing. In this specific case, ARCANCE acts as the Organizer's subcontractor, in that it collects and processes the Data on the Organizer's behalf and on the Organizer's instructions, on the basis of the performance of the License Agreement.
2.2 As part of the provision of the Platform for Exhibitors and Suppliers: ARCANCE is the data controller, in that it determines the purposes and means of the processing, on the basis of the contractual performance of the GTCL and GTC.
ARTICLE 3. DATA COLLECTED
3.1 General. ARCANCE collects and processes the following User Data: company name, surname, first name, e-mail address, position and telephone number of the person in charge, bank and billing details of the Organizers.
3.2 Browsing data. ARCANCE collects data through the placement of cookies (see article 9 of the Privacy Policy), enabling the study of Users' behavior on the Platform, their preferences, connection data, logs, pages and Services visited.
3.3 Rights management. ARCANCE collects the Identity Data, and where applicable, proof of identity, of the person concerned (see article 8 of the Privacy Policy).
3.4 Modification of Data. At any time, Users may modify their information directly from their User Account or by e-mail, by writing to ARCANCE at data@plateforme-expose.com.
ARTICLE 4. PURPOSES OF DATA PROCESSING
4.1 Data is collected for the following purposes: (i) to enable Users to create a User Account, (ii) to benefit from the Services and functionalities offered by the Platform, (iii) to analyze Users' preferences in order to provide them with Services tailored to their needs, (iv) to ensure the security of the Platform and its proper operation, (v) to create a customer and prospecting file, where applicable, (vi) prepare billing documents for User customers, (vii) enable Users to pay for Services offered by the Platform - it being specified that ARCANCE never retains Users' bank details, (viii) manage and respond to requests to exercise rights.
4.2 ARCANCE only collects and processes Data for the purposes indicated in this article.
ARTICLE 5. LEGAL BASIS FOR DATA PROCESSING
5.1 Data is collected on the basis of User Contracts, as indicated above, but also on (i) the basis of ARCANCE's legitimate interest in contacting its customers and prospects to offer them Services, (ii) the taking of pre-contractual measures at the request of Users, (iii) for the placement of cookies, their consent, (iv) the legitimate interest of ARCANCE to bill its Users and to ensure the security of the Platform and (v) to meet legal obligations, including accounting, tax, and responding to requests to exercise the rights of data subjects.
5.2 Users are free to withdraw their consent whenever it is required. To do so, they are invited to indicate this to ARCANCE by e-mail at the following address: data@plateforme-expose.com or by post at the following address: Service RGPD de ARCANCE, 15 rue de Moscou, 75008 - PARIS. However, they are informed that withdrawing their consent could prevent them from accessing certain features offered by ARCANCE and the Platform.
ARTICLE 6. RETENTION PERIOD
6.1 ARCANCE only retains Data for periods that (i) do not exceed the purposes for which they were collected and (ii) in accordance with the obligations imposed by the Regulations.
6.2 Data relating to the identification of the User and his/her company are kept for the duration of the contractual relationship with ARCANCE and, in particular, throughout their registration on the Platform.
6.3 In accordance with current legislation, Data relating to invoicing is kept for 5 years and tax documents are kept for 10 years.
6.4 In the case of canvassing, ARCANCE keeps the Data for 2 years from the last contact with the User.
6.5 All Data relating to the contractual relationship with the User is kept for 5 years to protect against any litigation.
6.6 Data relating to the placement of cookies is kept for a maximum of 24 months.
ARTICLE 7. RECIPIENTS OF DATA
7.1 The Data is communicated to: (i) ARCANCE's internal teams, duly authorized for this purpose, including, in particular, operational accounting and IT teams; (ii) our consultants, including, in particular, accounting and legal experts; (iii) our subcontractors, for hosting and online payment services; and (iv) any competent authority, insofar as this is required by current legislation, or when ARCANCE considers it necessary for the prevention, detection or prosecution of criminal acts and/or fraud.
7.2 Exhibitor Data is communicated to Suppliers for logistical services and in the event of litigation.
ARTICLE 8. OBLIGATIONS OF ARCANCE AS DATA CONTROLLER
8.1 As data controller, ARCANCE undertakes to (i) respect and comply with the Regulations; (ii) implement all appropriate technical and organizational measures to ensure the security of processing carried out via the Platform and guarantee the protection of rights and meet the requirements of the Regulations; (iii) restrict access to Data to persons duly authorized for this purpose; (iv) have made its staff aware of and trained them in Data processing, the provisions of the Regulations in force, and its consequences; (v) never transfer Data in any way whatsoever to third parties without having duly informed Users in advance; (vi) guarantee all rights of access, portability, deletion, rectification, opposition, limitation to Data collected in the context of the use of the Platform; (vii) notify the competent supervisory authority and Users, where applicable, of the security breach presenting a high risk to their rights and freedoms within seventy-two (72) hours of the discovery of the breach, if required by the Regulations; (viii) proceed with the deletion of Users' Data within the deadlines indicated in Article 5 of the Privacy Policy.
8.2 ARCANCE pays particular attention to the security of Data and informs Users to implement all appropriate technical and organizational measures to guarantee their confidentiality, integrity and security, including protection against their loss, destruction or damage of accidental origin, as well as the constant resilience of the systems and services of the processing carried out in respect of their rights.
ARTICLE 9. USERS' RIGHTS
9.1 In accordance with Articles 15, 16, 17, 18, 20 and 21 of the RGPD, Users have, depending on the legal basis for the collection of their Data, a right of access, rectification, deletion, limitation, portability and opposition on their Data.
9.2 Users may exercise these rights at any time by contacting ARCANCE at the following addresses: (i) by post, at the address: ARCANCE, Service RGPD, 15, rue de Moscou - 75008 - PARIS, (ii) by e-mail at the address data@plateforme-expose.com.
9.3 To exercise their rights, Users must communicate to ARCANCE (i) the origin of the collection of their Data; (ii) their identity and contact details. (iii) Where applicable, in case of reasonable doubt, ARCANCE may request proof of identity.
9.4 ARCANCE has a period of one (1) month from receipt of the request to respond, subject to the request being well-founded and not manifestly excessive.
9.5 Users are informed that if they consider that their rights have not been respected, they may file a complaint with the Commission Nationale de l'Informatique et des Libertés (” CNIL ”). ARCANCE invites the User to visit the following link for further information: https: //www.cnil.fr/fr/les-droits-pour-maitriser-vos-donnees-personnelles.
ARTICLE 10. COOKIES
10.1 A “cookie” is a text file placed by ARCANCE on the User's terminal when browsing the Platform. The cookie records information relating to the User's browsing on the Platform, and stores information that Users have entered during their visit. Users will therefore not need to re-enter this information on their next visit.
10.2 ARCANCE informs Users to place the following cookies on the Platform for the following functions: (i) session cookie: to enable Users to retain their login details; (ii) Google Analytics: to identify the path taken by Users, their actions on the Platform, the Services consulted, the number of visits, content display levels, event levels (clicks on tabs), to enable them to access content suited to their tastes, choices and preferences.
10.3 If Users consent to the placement of these cookies on their terminal, they are invited to express their consent in the information banner appearing when browsing the Platform.
10.4 Users may (i) refuse any placement of cookies, but are duly informed that such a global refusal may result in the impossibility of browsing and/or using the Services offered by the Platform; (ii) set the parameters of the cookies, choosing those they accept and those they refuse.
10.5 Notwithstanding the operating cookies, which cannot be set as they are essential to the proper functioning of the Platform, Users may also set their cookies from their browser as follows: (i) for Mozilla Firefox, see this link ; for Google Chrome, see this link ; for Microsoft, see this link ; for Safari, see this link.
10.6 More information on the CNIL website.
ARTICLE 11. CONTACT
11.1 For any information on the processing of Data, Users are invited to contact ARCANCE, (i) by post, at the address ARCANCE - Service RGPD - 15, rue de Moscou - 75008 PARIS ; (ii) by e-mail, at the address data@plateforme-expose.com .
11.2 Any questions will always be kindly received.