General Data Protection Regulation (GDPR)

Information Notice on the Protection of Personal Data 


QUINZE MAI Company (SASU with a capital of 3 070 884,00 Euros - RCS NANTERRE 302 382 858 - 1, Rue Augustine Variot - 92 240 MALAKOFF) hereinafter referred to as "QUINZE MAI". 

QUINZE MAI is particularly concerned with respecting the privacy of individuals and ensures that their personal data is processed in accordance with best practices in privacy and applicable data protection legislation, notably the General Data Protection Regulation No.2016/679 (hereinafter referred to as "GDPR" and Law No. 78-17 of January 6, 1978, relating to information technology, files, and freedoms in its latest version in force (hereinafter referred to as the "Data Protection Act"). 

This Privacy Notice (hereinafter referred to as te "Notice") aims to communicate the commitments made by QUINZE MAI for the protection of processed personal data and to inform you about your rights in this regard. 

 WHAT IS THE ROLE OF QUINZE MAI? 

As a reminder, the GDPR and the Data Protection Act define: 
• The data controller as the person who determines the means and purposes of the processing, 
• The data processor as the person who processes personal data on behalf of the data controller, 
• Joint controllers as two or more controllers who jointly determine the purposes and means of the processing. 

In the context of processing the collected personal data, QUINZE MAI operates as the data controller.. 

 WHAT PERSONAL DATA IS PROCESSED BY QUINZE MAI AND FOR WHAT PRUPOSES? 

 QUINZE MAI processed or may process the following categories of personal data:  
• Personal identification data: title, last name, first name, email address, phone number;
• Personal data related to professional life: employer's business name, professional postal address, type of structure, industry sector, position, department, involvement in the purchasing process, objective in the context of event participation; 
• Personal data related to personal or professional life;
• Personal data related to the event: date and time of participation, information collected when scanning the participant's badge by the organizer or exhibitor, including information obtained at booths.

QUINZE MAI processes these personal data to persue the following purposes: 
• Management of participant relations during the event;
• Communication of personalized content related to professional activity or profile via newsletters and satisfaction surveys. 
 WHAT IS THE LEGAL BASIS FOR THE COLLECTION OF PERSONAL DATA BY QUINZE MAI? 

The processing is necessary for the performance of a contract with you (acceptance of the Terms of Service to access the congress); 
The processing is necessary for the purpose of our legitimate interests (customer relationship management, prospecting, fraud prevention, network and information system security, conducting statistical studies); 
The processing is based on your consent (sharing your personal data with partners or exhibitors).

DOES QUINZE MAI SHARE YOUR PERSONAL DATA? 

Internal recipients: your personal data may be processed by internal collaborators of QUINZE MAI whoo are bound y a confidentiality agreement: 
External recipients: your personal data may also e disclosed by QUINZE MAI to the following external recipients:   

RECIPIENT COMPANYPURPOSES
LEGAL BASIS OF TRANFER
Administrative authorithyLegal obligation or procedure.Legal obligation.
Accounting, legal, consulting firmsAccounting, legal, consulting services.Legitimate interest.
Exhibitors at the event (list of exhibitors available on the event's website)Emailing of information/news.Consent of participants who have scanned their badge at the exhibitor's booth. *
Client: Paris International Shoulder CourseEmailing / news updates.Consent (opt-in during event registration).
Partners of QUINZE MAI(**)Emailing / news updates.Consent (opt-in during event registration).
INWINKHosting personal registration data for the event.Execution of the contract (Terms and Conditions).
OVHHosting of websites.Execution of the contract (Terms and Conditions).
SarbacaneEmailing activity management tool.Execution of the contract (Terms and Conditions).
On-site registration service provider - INWINKTool for creating badges before and during the event.Execution of the contract (Terms and Conditions).
(*) In the case of dissemination to a list of partners, the updated list of these partners will be available online on the event's website. 
(**) QUINZE MAI draws your attention to the following point: during the Congress when you visit an exhiitor's booth, you have the option to present your badge for scanning by the exhibitor. By doing so, you consent to the transfer of your personal data (title, last name, first name, institution, position, email, phone) to the exhibitor so that they can send you their updates.   

In order to provide its products and services, QUINZE MAI may use service providers located outside the European Union. If the transfer takes place to a third country where the legislation has not been recognized as providing an adequate level of personal data protection, QUINZE MAI ensures that necessary measures are implemented in accordance with the French Data Protection Act and GDPR.
HOW QUINZE MAI PROTECTS YOUR PERSONAL DATA? 

QUINZE MAI employs appropriate technical and organizational measures designed to protect the processed personal data. 
As the data controller, QUINZE MAI takes the necessary steps to ensure the confidentiality and security of the processed personal data, following best privacy practices and applicable data protection legislation. 

HOW LONG ARE YOUR PERSONAL DATA RETAINED BY QUINZE MAI? 

Your personal data is retained for a period of three years from the date of collection or the last contact initiated by you. For example, a visit to an event, a request for documentation, or a click on a hyperlink in an email sent by QUINZE MAI (simply opening an email is not considered by QUINZE MAI as contact initiated by you). 

DOES QUINZE MAI USE PROFILING TECHNIQUES? 

When QUINZE MAI sends personalized content, it may use certain techniques referred to as 'profiling' (defined as any form of automated processing of personal data consisting of using this data to evaluate certain personal aspects relating to a natural person, in particular to analyze ot predict elements concerning personal preferences, interests, financial situation, behavior, location, health, reliability, or movements of that natural person). We centralize certain personal data about you, then analyze it to assess and predict your personal preferences and/ot interests. Based on this analysis, we send or display communicatioons and/or content tailored to your interests/needs. 
You have the right to object to the use of your data for 'profiling' purposes (see below).
WHAT ARE YOUR RIGHTS REGARDING YOUR PERSONAL DATA? 

According to the Data Protection Act and GDPR, you can exercise your right to: 
• Right of access : you can request information from QUINZE MAI regarding the processing of Data concerning you and a copy of said Data. 
• Right of rectification: you can request the correction of inaccurate Data concerning you when those held by QUINZE MAI are incorrect or incomplete. 
• Right to erasure : you have the right to obtain from QUINZE MAI the erasure of your Data when one of the reasons provided by the regulations exists (inutility of the Data, withdrawal of your consent for processing based on it, etc.). 
• Right of objection : you have the right to object at any time, for reasons related to your particular situation, to the processing of your Data, including for commercial prospecting purposes. You can unsubscribe or object to receiving commercial prospecting messages from QUINZE MAI at any time. Simply click on the "unsubscribe" link in any email or communication sent to you by QUINZE MAI. 
• Right to data portability : you have the right to receive the Data in a usable format. This right only applies when the Data is provided to QUINZE MAI by yourself or results from your use of these services. This data is processed based on your consent or the performance of a contract. 
• Right to limitation : you can request QUINZE MAI to suspend the processing of your Data when one of the reasons provided by the regulations exists (contestation of the accuracy of the Data, etc.). 
• Right to object to profiling: you can object to profiling by contacting QUINZE MAI at the contact details below. 

You are informed of the possibility to address any request related to your rights and your personal data, and to decide on the location of your personal data after your death, to the Data Protection Officer at the following address: data@15-mai.com, copying the DPO (Data Protection Officer) at data-privacy@groupe-nehs.com 

Finally, you have the right to inform a competent supervisory authority, particularly in the member state of your habitual residence, your place of work, or the place where you believe an alleged violation of your rights has occurred, of any concerns regarding the processing of your personal data. 

In France, the authority responsible for personal data protection is the Commission Nationale de l'Informatique et des Libertés, or "CNIL" - 3 Place de Fontenoy - TSA 80715 - 75 334 Paris Cedex 07.