.svg)
The GDPR (General Data Protection Regulation) is a law on data protection and privacy for all individuals within the European Union (EU). The GDPR aims primarily to give control back to individuals over their personal data and to simplify the regulatory environment. Being a regulation, not a directive, it forces all countries within the EU to implement GDPR by May 25, 2018.
The regulation builds on many of the requirements from the 1995 directive for data privacy and security (EU Data Protection Directive or DPD) in addition to new provisions that strengthened the rights of data subjects, the individuals whose personal data is processed. Companies that fail to comply with the regulation face harsher penalties.
To read more about your rights on the internet, please visit Regulation (EU) 2016/679 (General Data Protection Regulation)
The Indegenous is a company based in France, headquartered in Montpellier and strives to be fully compliant with GDPR. Our lead supervisory authority is CNIL. Your privacy is of utmost importance to us and transparency about our data practices is a pillar of our corporate culture.
Under the GDPR, you have certain rights related to the processing of your personal data. These are listed below.
The Indegenous is in its capacity as data controller responsible for ensuring that your personal data is processed in accordance with applicable law and that your rights are taken into account when we process your personal data.
If you want to use your rights, please contact us at iwantin@theindegenous.org.
You have the right to request access to personal data
You have the right to request an abstract from our data record regarding our use of your personal data. You also have the right to request a copy of the personal information being processed at no cost. However, we may charge you a reasonable administrative fee to provide you with additional copies of the personal data. If you make your access request by electronic means such as email, we will provide you with the information in a commonly used electronic format.
You have the right to request rectification of your personal data
We will at your request, or at our own initiative, rectify, anonymize, erase or complement personal data that you or we discover is inaccurate, incomplete or misleading. You also have the right to complement the personal data with additional data if relevant information is missing.
You have the right to request erasure of your personal data
You have the right to request that we erase your personal data if we no longer have an acceptable reason for processing the data. Given this, personal data will be erased by us if:
the personal data is no longer necessary for the purposes for which it was collected,
you object to the processing of your personal data based on our legitimate interest and there is no overriding legitimate ground for the processing,
the personal data has not been lawfully processed,
we are required to erase the personal data due to a legal obligation.
However, there may be requirements under applicable law, or other reasons, which will prevent us from being able to immediately erase your personal data. In such a case, we will stop using your personal data for any other reasons than to comply with the applicable law, or the relevant reason.
You have the right to restrict processing
This means that we temporarily restrict the processing of your personal data. You have the right to request restriction of processing when:
- you have requested rectification of your personal data in accordance with the section “You have the right to request rectification of your personal data” above during the time period we are verifying the accuracy of the data,
- the processing is unlawful, and you do not want the personal data to be erased
The Indegenous, in its capacity as data controller, does no longer need the personal data for the purposes for which it was processed, but you require us to retain the information for the establishment, exercise or defense of legal claims, or you have objected to our legitimate interest for the processing in accordance with the section “You have the right to object to the processing” below during the time period we determine whether the legitimate interest overrides your privacy rights.
You have the right to object to processing of your personal data based upon our legitimate interest. If you object to such processing, we will only continue with the processing if we have a compelling legitimate reason for the processing that outweighs your interest, rights or freedoms, or unless continued processing is necessary for the establishment, exercise or defense of a legal claim.
You have the right to lodge a complaint with the data protection authority
You have the right to lodge any complaints regarding our processing of your personal data with the data protection authority. The supervisory authority for The Indegenous is CNIL, France. Should you experience that The Indegenous does not live up to GDPR and the data subject rights, read more about how to report to CNIL.
The Indegenous has always made information security and customer privacy a top priority. On May 25, 2018, the General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR”) replaces the 1995 EU Data Protection Directive (DPD) which significantly enhances the protection of the personal data of EU citizens and increases The Indegenous’s obligations regarding lawful collection and processing of personal data.
We apply the principles of “Privacy by Design” and “Privacy by Default” and process just enough data to serve our customers, visitors to our website and individuals participating in our events in the best way possible. We process all personal data lawfully, fairly and in a transparent manner. All our employees receive education in how to handle data in order to comply with the GDPR and other regulations and applicable laws.
This Privacy Statement describes The Indegenous’s information practices, data collection and usage practices with respect to personal data, in compliance with the GDPR and other regulations and applicable laws. This Privacy Statement describes The Indegenous in the role as a data controller of personal data. When The Indegenous is the data controller, The Indegenous decides the purpose and method of processing personal data. The Indegenous is responsible for the data processed.
You can at any time opt in to receive information from us as well as opt out when you desire. The possibility to opt out is presented in every communication you receive from us.
This Privacy Statement applies to contact persons at companies who are our customers, individuals who use our products, visitors on our web site, individuals participating in our events, individuals who are in contact with us for any other reason, and individuals who are contact persons at companies that we have flagged as potential customers, i.e. for anyone whose personal information we are the data controller.
We collect personal data about our customers, in particular designated contact persons at our customers, in order to deliver our services. The personal data include contact information such as name, phone number, and email address.
We also collect personal data when you request information about The Indegenous´s services, when you participate in events or sign up to receive newsletters, white papers and other material. We collect personal data such as name, phone number, email address, company name, title, country, and type of industry.
You may visit our web site without registering or actively submitting personal data to us. If you do not register, we only collect information that your computer or other devices send to us in connection with access requests and via cookies and other technologies that we use to analyze and enhance your use of our Site.
The type of personal data we collect by means of cookies and other technologies is described in Cookies Policy.
Below are the purposes for which we process personal data:
If you are a contact person for one of our customers, we process personal data to identify you and to handle and deliver the service according to our agreement. For example, we process personal data to ensure a secure operation of the service and to be able to provide adequate support and incident management. Also, we process personal data in order to handle invoicing and payments.
Lawful basis for processing: Legitimate interest, i.e. we process personal data since we assess that our interest in fulfilling our obligations in accordance with the agreement that we have entered into with our customers overrides your interest of protection of your privacy.
We process personal data in order to send our customers information about disturbances in our service. We also process personal data when sending information about, for example, new releases, changes in functionality in our service or when releasing new functionality.
Lawful basis for processing: Legitimate interest, i.e. we process personal data since we assess that our interest in fulfilling our obligations in accordance with the agreement that we have entered into with our customers and communicating with our customers about our service and any information that pertains to our customers overrides your interest of protection of your privacy, and/or Consent, i.e. we process personal data as you have given and not withdrawn your consent or not chosen to opt-out to our processing.
We process personal data in order to further develop our service and operations. For this purpose, we might aggregate statistics for analytic needs. All personal data is anonymized.
Lawful basis for processing: Legitimate interest, i.e. we process personal data since we assess that our interest in fulfilling our obligations in accordance with the agreements we have entered into with our customers and developing our service and operations overrides your interest of protection of your privacy.
The Indegenous processes personal data for marketing purposes. This might include processing of personal data for direct marketing purposes. This might entail that we have flagged your company as a potential customer that matches the target group of The Indegenous. Please note that you always have the right to opt-out of any marketing by way of email.
Lawful basis for processing: Consent, i.e. we process personal data as you have given and not withdrawn your consent or not chosen to opt-out to our processing, and
Legitimate interest, i.e. we process personal data since we assess that our interest in marketing our products and services to you overrides your interest in protection of your privacy.
Information securityWe process data for the purpose of providing security for our service and systems. To detect or prevent different types of unlawful usage that violates our agreements. The data is also used to prevent abuse of the service and systems and to detect fraud, virus attacks etc.
Lawful basis for processing:
Legitimate interest, i.e. we process personal data since we assess that our interest of fulfilling our obligations in accordance with the agreements we have entered into with our customers and providing security for our service and systems overrides your interest of protection of your privacy.
Compliance with the law
We process personal data in order to comply with the law. We process your personal data to comply with our legal obligations under applicable law, e.g. when invoicing according to French law, (insert French law for invoicing).
Lawful basis for processing:
Fulfillment of legal obligation, i.e. we process personal data in order to comply with our legal obligations.
Cookies
For more information please see our Cookies Policy.
Safeguard our legal interests
We process your personal data in order to defend, establish or exercise any claims in case of a dispute regarding e.g. payment.
Lawful basis for processing: Legitimate interest, i.e. we process personal data since we assess that our interest in safeguarding our legal interests overrides your interest in protection of your privacy.
Fulfilment of service delivery
If you are a contact person for one of our customers, we will retain your personal data during the entire contract period between us and your employer.
Communication about our service
If you are a contact person for one of our customers, we will retain your personal data during the entire contract period between us and your employer.
Development of our service
If you are a contact person for one of our customers, we will retain your personal data during the entire contract period between us and your employer and 12 months thereafter. We only use anonymized and aggregated data for service development.
Marketing
If you are a contact person for one of our customers, we will retain your personal data during the entire contract period between us and your employer. This is on the condition that you have not previously objected to direct marketing.
If you are a contact person for a company that has been flagged as a prospective customer and you have not given consent, we will retain your personal data for no longer than 24 months. This is on the condition that you have not previously objected to direct marketing.
If you have consented to us processing your personal data for marketing purposes when e.g. attending one of our events, we will retain your personal data for as long as you have not withdrawn your consent or objected to direct marketing.
Compliance with the law
We retain your personal data for as long as we are required in accordance with applicable law. In regards of e.g. invoicing we are required to retain personal data for seven years.
Cookies
For more information please refer to Cookies Policy, section 4.
Safeguard our legal interest
In case of a dispute regarding e.g. payment, we retain your personal data as long as necessary for us to defend, establish or exercise any claims.
Some data will be anonymized and used for service development. When you choose to opt out from any type of communication from us, your personal data will be erased.
We may share your personal data with: companies supplying technique, storage services, administrative tools, CRM tools, financial services, authorities that request personal data, any third party with which we arrange an event or conference. The Indegenous has carried out a detailed mapping study of how personal data is shared with aforementioned parties to ensure that we comply with GDPR.
We may process personal data and share it with recipients globally that help us deliver our service and run our business.
In a reorganization or sale of our company or assets, your data may be transferred, subject to the acquirer accepting the commitments made in this Statement and compliance with applicable law.
We take appropriate technical and organizational security measures, consistent with GDPR and industry standards to ensure that all personal data we treat is protected from unauthorized access. Access to personal data is provided only to those who need it to perform their duties.
We are constantly working to protect our customers’ integrity. Our security measures include protection of personal data, information, IT infrastructure, internal and public networks, as well as office buildings and technical facilities. Processing of data is logged and checked systematically. Encryption of equipment and data is done with generally recognized and secure methods.
We may update this Privacy Statement periodically and without prior notice to you to reflect changes in our personal information practices. If we make material changes to this statement, we will notify you here, by email, or by means of a notice on our home page prior to the change becoming effective.
The Indegenous uses cookies on www.The Indegenous.com. By browsing the website, you consent to the use of cookies.
Cookies are small pieces of text sent by your web browser by a website you visit. A cookie file is stored in your web browser and allows a website, service or a third party to recognize you and make your next visit easier and more useful to you. Cookies can be "persistent" or "session" cookies.
When you use and access the website, we may place a number of cookies files in your web browser.
We use cookies for the following purposes:
We use both session and persistent cookies on www.The Indegenous.com
In addition to our own cookies, we may also use various third party cookies to report usage statistics of the website and deliver advertisements.
If you'd like to delete cookies or instruct your web browser to delete or refuse cookies, please visit the help pages of your web browser.
Please note, however, that if you delete cookies or refuse to accept them, you might not be able to use all of the features we offer, you may not be able to store your preferences, and some of our pages might not display properly.
How The Indegenous uses Google Analytics Cookies
We use Google Analytics for aggregated, anonymized website traffic analysis. In order to track your session usage, Google drops a cookie (_ga) with a randomly-generated ClientID in your browser. This ID is anonymized and contains no identifiable information like email, phone number, name, etc. We also send Google your IP Address. We use GA to track aggregated website behavior, such as what pages you looked at, for how long, and so on. This information is important to us for improving the user experience and determining site effectiveness.