Contact : contactrgpd@nextpool.com
Contact : contactrgpd@nextpool.com
Regardful of your privacy and the protection of the personal data you provide it, ASPOOL undertakes to comply with applicable legislation covering privacy and personal data protection, in particular the European general data protection regulation. The purpose of this privacy policy (hereinafter “Privacy policy”) is:
ASPOOL, of which the registered office is located at ZAC de la Rouvellière, 72700 Spay, has several web sites (hereinafter “Web sites”) of which the list is below:
ASPOOL also has 3 mobile applications available for download on the Google (Android platform) and Apple (iOS platform), download platforms. These 3 applications (hereinafter “Applications”) have specific general terms and conditions of use:
ASPOOL therefore collects and processes your personal data, namely the information used to directly or indirectly identify you, in the following cases:
Some of the personal data you may be asked for is compulsory. The compulsory nature of the data you are asked for is indicated by an asterisk, the remaining data being optional. When applicable, the failure to provide compulsory personal data leads to it being impossible to access all the services on the Web site in question.
When the data is required by law or to fulfil the contract between us, and the data is not provided, it has an impact on our capacity to fulfil the contract. In that case, we may terminate your contract after having informed you.
Depending on the processing, your personal data that may be collected and processed is the following:
Below are the purposes and legal basis for our personal data processing:
| Purpose of the processing | Legal basis for the processing | Personal data processed | Retention periods |
|---|---|---|---|
| Customer account and prospect management (account opening, order tracking, delivery management) | Contract fulfilment (or pre-contractual fulfilment for account creations) | Identification data Economic and financial information |
Duration of the contractual relationship and 5 years maximum from its end on intermediate archiving |
| Campaign and communication operations Management on customer accounts (loyalty, special offers, catalogue management, miscellaneous information) | The legitimate interest of ASPOOL in developing its activity and communicate important information | Identification data Connection data |
Duration of the contractual relationship and 5 years maximum from its end for customers or 3 years from the last contact for prospective accounts |
| Emailing campaign management for prospects | Consent of the person in question | Identification data Professional life |
Until withdrawal of consent or 3 years after the last contact |
| Incoming request from professionals management | Consent of the person in question | Identification data Professional life |
Until withdrawal of consent or 3 years after the last contact |
| Email distribution list subscription management | Consent of the person in question | Identification data | Until withdrawal of consent or 3 years after the last contact |
| Incoming requests from private individuals management | Consent of the person in question | Identification data | Until withdrawal of consent or 3 years after the last contact |
| Creation of statistics | Legitimate interests | Identification data Connection data |
10 years from the last purchase date |
| Improvement of proposed services, service development, Web site operation and security | Legitimate interests | Identification data Connection data |
10 years from the last purchase date |
| Invoicing and accounts management | The requirement to fulfil our legal obligations | Identification data Economic and financial information |
10 years from the end of the fiscal year |
| Rights management for the people in question | The requirement to fulfil our legal obligations | Identification data | 10 years from the registration date in our systems |
| Team recruitment process management and monitoring | Consent of the person in question | Identification data Professional life |
Until withdrawal of consent or 2 years after the last contact |
| Send data for our customers or prospects who have opened accounts to other Nextpool Group consulting companies (see list below) | Legitimate interest of the Group as part of its single information system management |
Identification data |
For customers: Duration of the contractual relationship and 5 years maximum from its end or until consent is withdrawn. For prospects: Until withdrawal of consent or 3 years after the last contact |
| Send contact details of users who have contacted us to ASPOOL local dealers to take charge of their request | Consent of the person in question | Identification data | Until withdrawal of consent or 3 years after the last contact |
The personal data collected by ASPOOL is not sold to third parties. However, ASPOOL may share collected personal data with other entities, namely:
ASPOOL reserves the right to disclose your personal data to other parties when an applicable law or regulation, a court order or a regulation imposes or authorises it to do so, or if the disclosure is necessary as part of an investigation or a procedure on the national territory or in a foreign country.
As a rule, the collected personal data is not intended to be transferred outside the European Union. However, these transfers occur in compliance with applicable regulations and we have made sure that these transfers comply with the transfer mechanisms provided for by the GDPR. Below is the list of applications and subcontractors (outside the European Union) we use to provide you our services. These services are operated by Nextpool Services on behalf of ASPOOL, its sister company:
| Supplier name | Reason for the transfer | Supplier country of origin |
|---|---|---|
| Salesforce CRM | Customer relationship management and mass and/or automatic emailing | United States, Privacy Shield Certification |
| Hubspot CRM | Customer relationship management and mass and/or automatic emailing | United States, Privacy Shield Certification |
| Zapier | Data automation | United States, Privacy Shield Certification |
| Services Google | Audience measurement, Sterilor XP application user account management | United States, Privacy Shield Certification |
ASPOOL takes reasonable precautions to protect your personal data and applies the best industry practices to make sure it is not lost, misused, browsed, disclosed, modified or destroyed inappropriately.
If your personal data is breached resulting in a risk for the rights and freedoms of the persons in question, be aware that ASPOOL has a duty to notify the relevant controlling authority and to inform you of any breaches of personal data likely to result in a high risk for your rights and freedoms as quickly as possible, so that you can take the necessary measures.
We use cookies and tracers to provide you our services and measure our web site use. All the details of how we use cookies and how you can oppose their use are to be found on the pages of our web sites covering cookies.
If you no longer wish to receive communications from ASPOOL (exercise of the right to oppose or the withdrawal of an existing consent), you can inform us of the fact by clicking on the unsubscribe link featured in every communication or by sending us an email to the following address: contactrgpd@nextpool.com.
Similarly, if, after having given your consent to the transfer of your data to Nextpool Group companies, you wish to reverse your decision and no longer receive communications from them, you can withdraw your consent by sending us an email to the following address: contactrgpd@nextpool.com. An incident declaration form is also available for you to use: https://nextpool.lpages.co/incident-rgpd/
Furthermore, you can access your data, correct it or have it erased. In certain circumstances, you also have a right to portability and a right to limit the processing of your data or to oppose the processing, as well as a right to be forgotten and a right to define post mortem directives (Consult the cnil.fr web site for more information about your rights). When the processing is based on your consent, you also have the right to withdraw such consent.
To exercise these rights, or for any questions about how your data is processed in this system, you can contact our Data Protection Officer using one of these means made available to you:
To allow ASPOOL to answer quickly, please indicate your surname, first name and email and postal addresses. You will then be sent an answer within one month of receipt of the request, except in special cases.
If, after having contacted ASPOOL, you consider that your data privacy rights have not been respected, you can make an online complaint to the CNIL (French data privacy watchdog).
ASPOOL reserves the right to modify or more generally update this privacy policy at all times without notice. Any substantial changes will be notified on the Web site and/or by email when applicable. We suggest you read this page regularly to stay informed of any changes made to the Privacy Policy.