Data Protection Policy - Partnerships IP Paris

For the purposes of IP Paris Partnerships direct marketing activity

In accordance with Articles 5, 12, 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, known as the General Data Protection Regulation (hereinafter "GDPR"), the purpose of this data protection policy is to explain important information about how your data is processed by the Business Development and Partnerships Department of Institut Polytechnique de Paris (hereinafter also referred to as "IP Paris") and how you can exercise your rights in this regard.

The parties involved in processing

Data controller

In the context of the data processing undertaken, the data controller, pursuant to Article 4 of the GDPR, is: 
Corporate name: Institut polytechnique de Paris 
Registered address: Route de Saclay, 91128 Palaiseau 
SIRET no.: 130 025 620 00019 
Tel: +33 (0)1 69 33 33 33 
Email address: partnership@ip-paris.fr 
Data supplier (responsible for indirect collection): In the context of this processing, the personal data is gathered by IP Paris.

Processors

In the context of this processing, the data controller relies on the services of a subcontractor for data storage. 
This is:

Corporate name: SALESFORCE 
Registered address: 3 Avenue Octave Greard, 75007 Paris 
SIREN no.: 483993226 
Email address: legal@salesforce.com

Information about the processing

Legal basis and purposes

The legal basis for the processing of your personal data is your prior consent.
In particular, your data will be processed to:

• Send occasional emails about IP Paris partnerships
• Send invitations to events related to IP Paris partnerships,
• Share news about IP Paris partnerships,
• Gather statistics.

The purpose of all these actions is to keep you informed about IP Paris partnership activity.

Categories of processed data

The categories of data processed by IP Paris are:

• Identity data (title, first and last names), 
• Professional data (such as profession, an establishment's geographic area, and company name), 
• Professional contact data (named email addresses, professional telephone numbers), 
• Data collected by one or more contact forms by post, telephone or contact platform
• The data collected through the registration form for partnership newsletters.

Data recipients

The data collected is intended solely for IP Paris and, more specifically, the people who need it to carry out their partnership development activities.

Data retention periods

The data is retained for a period that shall not exceed three years following the last action on your part. Once this period has expired, the data will be either deleted or fully anonymized.

Your processing rights

The extent of your rights

In accordance with the GDPR and in the context of this processing, you have a right to access, rectify and definitively erase your data. For this, you can contact the data controller directly at the following email address: partnership@ip-paris.fr.

Claims about processing

If you have any claims about exercising your rights and about any processing for which IP Paris is responsible, you can refer the matters to its data protection officer at the following: 
Email address: gdpr@ip-paris.fr

Referring matters to the supervisory authority

In case of dispute, you can also refer the matter to the supervisory authority at the following address:

• Postal address : CNIL - 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07 ;
• Online dispute form : https://www.cnil.fr/fr/plaintes