English version:
Updated May 04, 2021
"The Company; we" or "us" means Ace Up Media FZCO, a service provider, a corporation organized under the laws of the United Arab Emirates, with its principal place of business at Dubai Silicon Oasis, DDP, Building A2, Dubai, United Arab Emirates, registered under identification number 12357
The Company is responsible for processing the data of its customers and more generally of Internet users (hereinafter "you") browsing the websites it operates in the context of its activities, such as https://www.raphaelgnn.com, https://training.raphaelgnn.com, https://go.raphaelgnn.com, and their sub-sites, including the online training platform and/or private group on a social network offered to its customers (hereinafter indifferently referred to as the "Site").
We undertake to collect and process personal data in a lawful, fair and transparent manner, in accordance with the General Data Protection Regulation ("GDPR").
If you do not provide the mandatory information, the request related to this data collection (for example: online registration or order, request for information, ...) may not be processed or its processing may be delayed.
For any clarification or complaint, please contact us by email at contact@raphaelgnn.com.
I. DEFINITIONS - PREAMBLE
For the proper understanding of this Privacy Policy, the following terms should be specified:
- Personal data" means any information relating to an identified or identifiable natural person (the "data subject"), in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or one or more specific elements relating to his or her identity.
- Processing" means any operation with personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
- A "controller" is the person who, alone or jointly with others, determines the purposes and means of the processing and a "processor" is the person who processes personal data on behalf of the controller.
- A "recipient" is the natural or legal person, public authority, department or any other body that receives communication of personal data, whether or not it is a third party.
Warnings. We invite you to be careful about what you decide to make public on the Internet. Regarding personal data, including data relating to your private life or sensitive data (political and philosophical opinions, trade union membership, information on your health, sexual orientation, religious beliefs, etc.) made public at your initiative or deduced from your contributions, comments and positions of any kind on social networks (Facebook, Youtube, etc.), we remind you that the processing of personal data made public by the person concerned is not subject to the prohibition of principle on the processing of sensitive data.
In case of capitalization of a word, the Customer may refer to the general terms of sale applicable on the Site.
II. MANAGEMENT OF THE CUSTOMER-PROSPECTS FILE
Via the Site, you transmit the following categories of information to us by filling in the information form(s) and by communicating with us:
- Identity data (title, surname, first name), contact data (e-mail address, postal address (address, zip code, city, country), telephone number)
- The information of connection to your user account: identifier, password
In the event of an order, we will also have to process information relating to the contractual and commercial relationship that you could establish, and in particular to the good correspondence of the information relating to the order of a Training,. The order is paying, we will also process payment and transactional information (date of the transaction, amount, means of payment, order number).
We also collect information when you fill out a satisfaction form or when you subscribe to a free product or service (name, email). Subscribing to a free service implies the acceptance to receive commercial information, the User being able to unsubscribe at any time thereafter.
Finally, we collect data on account connection and use of tools made available to people on the virtual space dedicated to them (IP address, connection time, duration of connection, account settings, management of tools, videos viewed, progress indicators).
Accuracy of the information you provide: You must not provide any false personal information or create an account for another person without their permission. The contact information you provide must always be accurate and up to date.
Personal identifiers - Any account holder who has access to a virtual space (training, viewing...) has access rights that are strictly personal, confidential and non-transferable. All account holders must take the necessary security measures to preserve the integrity of their access rights (login, password) to prevent a third party from connecting to their account. The holder of access rights will be liable for any fraudulent or abusive use of his access codes, when this results from his own negligence. In any case, the holder of access rights must inform us without delay of the loss or theft of his identifiers.
III. PROVISION OF A VIRTUAL SPACE FOR ACCESS TO SERVICES
The contents of the training are delivered on a dematerialized platform accessible via a URL link provided to the Customer when ordering.
Email Notifications - The "Please notify me of updates to my products. "Please notify me when a response to one of my posts or comments is created. The "Please notify me when a reply to one of my posts or comments is created" boxes that may be provided to Customers on a virtual space to receive email notifications (product updates, replies to one of my posts or comments) can be unchecked at any time.
IV. SOCIAL NETWORKS AND THIRD PARTY SITES
Groups, Accounts and Pages. We may also contact you or answer your questions via social networks, if you have contacted us in the first place via this means. Finally, we have various public pages and accounts that you can subscribe to.
Regarding any information you may provide to the social network Facebook (liking a video, viewing a video, messages sent to coaches), Instagram (commenting, liking, sharing...) and any other social network, we indicate that we are not responsible for the processing of personal data carried out by this third party site, and you are invited to consult the personal data protection policies for more information.
Outside of the Training Provided:
Public information: The information about you, which you have transmitted to us, may possibly be enriched for commercial, prospecting, communication, solicitation or marketing purposes, by means of other sources of information such as social networks (information known as "public" or to which we may have access as page administrator.
Linking to Third Party Sites. The Site may provide links to sites, applications and services other than its own, which may be operated by third party companies. Clicking on these links may allow third parties to collect or share data about you. In this case, we are not responsible for the processing of personal data by these third-party sites, and users should consult their privacy policies for more information.
Link to the Site. Conversely, if one of the third party sites links to our Site (URL link), this does not mean that the privacy policy of that third party site is applicable to our business, nor does it mean that we guarantee compliance by that third party with its obligations regarding the protection of personal data.
V. COOKIES
Technical data is collected for advertising, marketing and statistical purposes. Technical data from your device is automatically collected and recorded by the Site for advertising, marketing and statistical purposes. This information helps us personalize and continually improve your experience on our Site. We do not collect or store any personal data (name, first name, address...) that may be attached to technical data. This collected data may be resold to third parties by the suppliers of the cookies used to collect them.
The cookies / pixels provided by third parties such as Facebook and Google allow retargeting, more information on :
- https://www.facebook.com/business/learn/facebook-ads-pixel
- https://policies.google.com/technologies/cookies?hl=fr
Duration of the conservation of cookies. In accordance with European recommendations, the maximum duration of conservation of cookies is 13 months after their first deposit in the User's terminal, as well as the duration of the validity of the User's consent to the use of these cookies. The lifetime of cookies is not extended with each visit. The User's consent must therefore be renewed at the end of this period.
Purpose of cookies. Cookies may be used for statistical purposes, in particular to optimize the services rendered to the User, based on the processing of information concerning the frequency of access, the personalization of the pages as well as the operations carried out and the information consulted. You are informed that the supplier of cookies is likely to deposit cookies on your terminal. The cookie records information relating to navigation on the service (the pages you consulted, the date and time of the consultation...) that we can read during your subsequent visits. Some features of the site such as video players or interactive content are likely to use services offered by third parties and to deposit cookies allowing them to identify your consultation of the content.
User's right to object to cookies. If you do not want cookies to be used on your terminal, most browsers allow you to disable cookies through the setting options:
- Chrome: https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DAndroid&hl=fr
- Safari: https://support.apple.com/fr-fr/guide/safari/sfri11471/mac
- Firefox: https://support.mozilla.org/fr/kb/protection-renforcee-contre-pistage-firefox-ordinateur
- Internet Explorer: https://support.microsoft.com/fr-fr/help/17442/windows-internet-explorer-delete-manage-cookies
VI. EXERCISE OF RIGHTS
You have the right to access your personal data, to rectify or delete them, to ask questions, to limit the processing of your data, to portability and to erase them (more information here), within the limits set by the regulations and in particular the RGPD.
You also have the right to object at any time, for reasons relating to your particular situation, to the processing of personal data based on our legitimate interests, as well as the right to object to commercial prospecting by clicking on the unsubscribe link in the newsletter.
Requests to exercise your rights should be sent electronically to the following address: contact@raphaelgnn.com. If you are not satisfied with our response, you may lodge a complaint with the personal data protection and control authority to which you belong (for example, in France, the CNIL).
For all intents and purposes, it is specified that as of the exercise of the right to erasure, to object to processing, or to withdraw consent, the proper functioning of the site and/or the training services (including the e-learning platform) may be disrupted or interrupted. For example, if these rights are exercised at the time of ordering services, then the said order cannot be carried out.
VII. RETENTION PERIOD OF PERSONAL DATA
The data used for the management of commercial prospecting are kept for a maximum of three years from the last contact from the prospect or the end of the contract with the customer. If you have not logged in to the Site or have not engaged in active behavior (e.g., clicking on a link) for a period of three years, you may receive an e-mail inviting you to log in as soon as possible, otherwise your data will be deleted from our databases.
Means of effective deletion of data are put in place as soon as the retention or archiving period necessary for the fulfillment of the determined or imposed purposes is reached, in particular after deletion of your account with our company.
In accordance with our legal obligations, certain documents relating to our internal operations and containing personal information (purchase orders, contracts, invoices, etc.) will be archived. Similarly, we can archive until the expiration of the limitation periods / foreclosure applicable to legal actions, and this for the good defense of our interests before the courts in case of subsequent litigation.
In any case, the personal data subject to processing are not kept beyond the time necessary for the execution of the obligations defined at the time of the conclusion of the contract, or as required by the legislation in force. Beyond that, they may be anonymized and kept exclusively for statistical purposes.
VIII. DESTINY
We do not sell any personal data files. The information you provide is for internal use by authorized persons, it is strictly confidential and may not be disclosed to third parties, except with your express consent or if you have decided to make it public.
Our external service providers may, in the context of the processing described above, receive personal data in order to carry out the processing. This is the case of the tools provided under the names Clickfunnels (orders), Google Domains (website hosting), Kajabi (training platform, access management including password), G Suite (customer support).
As such, we verify that (i) any subcontractor presents sufficient and appropriate contractual guarantees to respect your rights, so that the processing meets the requirements of the RGPD and (ii) to respect the provisions of the RGPD applicable to data transfers.
Based on our legal obligations, your personal data may be disclosed pursuant to a law, regulation or decision of a competent regulatory or judicial authority.
Transfer outside the EU. We are committed to complying with applicable regulations regarding the transfer of data to countries outside the European Union, including the following:
- We will transfer visitors', prospects' and customers' data to countries recognized as offering an adequate level of protection. In case of transfer to the United States, to organizations that have adhered to the Privacy Shield;
- When the country of destination does not benefit from an adequate level of protection, we will use transfer tools that comply with the regulations (standard contractual clause of the European Commission, in particular).
IX. COMPUTER SECURITY
We undertake to implement all appropriate technical and organizational measures through physical and logistical security means in order to guarantee a level of security adapted to the risks of accidental, unauthorized or illegal access, disclosure, alteration, loss or destruction of personal data concerning you.
Secure payment
All transactions made on our site are secure. Payments by credit card are ensured by our partner STRIPE, which is a trusted payment service provider. We thus have an SSL encryption system to protect your personal data and the means of payment used. At no time do we have direct access to your bank details through this process.
The address of the payment page begins with "https" and is accompanied by a closed padlock or a key that appears in the bottom right corner of your browser. This allows you to verify that you are in a secure payment area when you are asked for your credit card number. Stripe automatically verifies that this connection is secure before sending your banking and transactional data.
General - Data Breach
We are committed to implementing all appropriate technical and organizational measures through physical and logistical security measures to ensure a level of security appropriate to the risks of accidental, unauthorized or unlawful access, disclosure, alteration, loss or destruction of your personal data.
In the event that we become aware of unlawful access to your personal data stored on our servers or those of our service providers, or of unauthorized access resulting in the risks identified above, we undertake to
- Notify you of the incident as soon as possible if this is required by law;
- Examine the causes of the incident;
- To take the necessary measures within the limits of reasonableness in order to mitigate the negative effects and prejudices that may result from the said incident.
In no case shall the commitments defined in the above point be considered as an admission of fault or responsibility for the occurrence of the incident in question.
If you observe any security breach or any incident that may affect the integrity of your personal data or those of other people, we thank you in advance for informing us immediately by email at contact@raphaelgnn.com.
X. APPLICABLE LAW AND LANGUAGE
This Privacy Policy is written in French. In the event that it is translated into one or more languages, only the French text will be deemed authentic in the event of a dispute. The temporary or permanent inapplication of one or more clauses of the present policy shall not constitute a waiver of the other clauses of the present policy, which shall continue to have effect.
We reserve the right to change this Privacy Policy. Data subjects will be notified when required by the GDPR or other regulations. The date of the update is indicated in the header and we invite you to consult it regularly.