Privacy Policy

PERSONAL DATA USAGE POLICY

Last updated on 15/07/2023

This personal data usage policy is made in accordance with the provisions of Law No. 78-17 of January 6, 1978 (known as the "Data Protection Act" or "LIL") and the General Data Protection Regulation ("GDPR") No. 2016/679.

Identity of the data controller: Vivien HENRY / SAS Inductive Brain

Contact details of the person in charge of the personal data usage policy: Mr. Vivien HENRY

Email address: contact (at) microforge.fr

Persons concerned by the processing

The persons concerned by the processing are the users of the website, www.microforge.fr and ateliers.microforge.fr (hereinafter the "Site"), the customers, the suppliers, the prospects, and members of business networks (hereinafter the "Data Subjects").

Purpose of the processing

The company Inductive Brain, headquartered in Grenoble (38100), 30 rue des Trembles, has an online reservation website. This site allows us to receive orders from our customers, and the data collected on this occasion is recorded and processed in a customer file.

This file allows:

• Managing orders, payment, and delivery.

Legal basis for processing

• Management of orders: the legal basis for processing is the performance of a contract (Cf. article 6.1.b) of the European Regulation on Data Protection).
• Sending commercial solicitations by email for products similar to those ordered by customers: the legal basis for processing is the legitimate interest of the company (Cf. article 6.1.f) of the European Regulation on Data Protection), namely promoting our products to our customers.
• Sending commercial solicitations by email for other products offered by the company Inductive Brain: the legal basis for processing is consent (Cf. article 6.1.a) of the European Regulation on Data Protection), as required by article L. 34-5 of the Postal and Electronic Communications Code.
• Transmission of the email address to commercial partners: the legal basis for processing is consent (Cf. article 6.1.a) of the European Regulation on Data Protection). Keeping accounts involving the retention of data for a period of 10 years: the legal basis for processing is legal obligation (Cf. article 6.1.c of the European Regulation on Data Protection).

Categories of data

• Identity: title, name, first name, address, delivery address, telephone number, email address, date of birth, internal processing code allowing the identification of the customer, data relating to registration on opt-out lists.
• Data relating to orders: transaction number, details of purchases, amount of purchases, data relating to the settlement of invoices (payments, unpaid bills, discounts), product returns.
• Data relating to payment methods: credit card number, credit card expiration date, visual cryptogram (which is immediately erased).
• Data necessary for the implementation of loyalty and prospecting actions: purchase history.

Recipients of the data

The customer service and billing departments of the company Inductive Brain are recipients of all categories of data.

Its subcontractors, responsible for the delivery of its orders, are recipients of the identity, address, and telephone number of our customers. The email addresses and payment information of customers who have accepted this are transmitted to our payment partners:

• Paypal
• Crédit Mutuel

Data retention period

• Data necessary for the management of orders and billing: throughout the commercial relationship and for ten (10) years for accounting obligations.
• Data necessary for the implementation of loyalty and prospecting actions: throughout the commercial relationship and for three (3) years from the last purchase.
• Data relating to payment methods: this data is not retained by the company Inductive Brain; it is collected during the transaction and is immediately deleted upon payment of the purchase.
• Data concerning opt-out lists for prospecting: three (3) years.

Fate of personal data after death

The Data Subject may define directives relating to the storage, erasure, and communication of their personal data after their death. These directives may be general or specific. The Data Subject may transmit their specific directives concerning their personal data collected on the Site by contacting contact@microforge.fr.

Rights of Data Subjects

The Data Subject has the right to access, object, rectify, erase, limit, and port their personal data. The Data Subject has the right to withdraw their consent at any time if consent constitutes the legal basis for processing. They can exercise these rights by contacting the data controller at the following address: contact@microforge.fr.

The request must indicate the first and last name, email or postal address, of the data subject, and be signed and accompanied by a valid ID.

Complaint

The Data Subject has the right to lodge a complaint with the supervisory authority (CNIL).