Privacy Policy

Mindful of protecting the privacy of internet users, HBMDM (hereinafter "the Company" or "we") undertakes that the collection and processing of personal data will be carried out in accordance with EU Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data ("GDPR") and with the applicable provisions of French law.

1. DATA CONTROLLER

HBMDM, registered office: 2 avenue de Paris - 94300 Vincennes - France. Registered with the Paris Trade and Companies Register (RCS).

2. PERSONAL DATA COLLECTED

Your personal data are collected and processed on one or more of the following legal bases:

  • in the context of the performance of a contract
  • for purposes of legitimate interest
  • on the basis of your consent
  • in order to ensure compliance with our legal and regulatory obligations

2.1 Data concerning you

In general, your data are collected directly from you on the occasion of:

  • your subscription to one of the Company's newsletters and/or communications
  • your navigation on the Site
  • certain partnerships providing services via the Site
  • your distance purchases

We may collect and process the following categories of personal data:

  • identification data (for example: name, first name, date of birth, e-mail address, postal address, telephone number)
  • connection data (for example: IP address, connection logs)
  • billing data (for example: payment methods and history, transaction data, invoices)
  • commercial data (for example: data necessary for loyalty actions, prospecting, satisfaction surveys, statistics and promotion, promotional operations)

Cookies and other tracers or similar technologies (hereinafter "cookies") may be set and/or read in your browser when you visit the Site.

When your personal data are collected via a form, you will be informed that certain fields are mandatory by an asterisk (*) next to the relevant fields. The absence of an asterisk indicates that the information requested is not mandatory.

Only the personal data strictly necessary for the purposes described below, notably for creating an account and for producing statistics on Site traffic, are collected.

We may also process personal data concerning you that we receive from our commercial partners, in particular regarding your use of our services on the Site.

3. PURPOSES OF PROCESSING

We use the data referred to above for the following principal purposes:

3.1 Operations necessary to provide products or services

  • taking into account and fulfilling your order for products or services
  • management of subscriptions to our newsletters and/or e-mail alerts
  • invoicing
  • payment collection
  • management of deliveries and order tracking
  • address normalization, updating your personal information in a dedicated database
  • customer relations: providing a customer service reachable by post, telephone, e-mail or instant messaging chat for any question or complaint
  • conducting satisfaction surveys
  • sending information about changes or developments to our services
  • management of unpaid debts and disputes
  • managing the exercise of your rights over your personal data
  • verifying compliance with applicable law, our contracts and general terms and conditions

3.2 Marketing and commercial prospecting operations relating to publications, products and services

  • address standardization, updating and enriching your personal information in a dedicated database
  • sending marketing, advertising and promotional offers relating to our products and services by postal mail, e-mail, on social networks or any other medium
  • personalized loyalty or prospecting actions, a process which may, via cookies, identify your visits to our Site so that we can contact you to offer our offers through different communication channels (email, telephone…)
  • implementation of contests or other promotional operations
  • collection of customer reviews
  • elaboration of commercial statistics

3.3 Operations related to commercial partnerships

  • sending marketing, advertising and promotional messages relating to the products and services of partners by postal mail, e-mails, on social networks or any other medium
  • display of targeted advertisements
  • display of targeted editorial content
  • implementation of contests or other promotional or event operations with commercial partners

4. DATA RETENTION PERIOD

Your personal data are kept for a period in accordance with the legal provisions or proportionate to the purposes for which they were collected. However, your personal data may be retained for a longer period where legal and regulatory obligations require it.

Retention periods vary depending on whether we have an ongoing contractual relationship with you (you are an active customer), whether we have had a contractual relationship with you in the past (you are an inactive customer), or whether we have never had such a relationship with you (you are a prospect).

5. RECIPIENTS OF YOUR PERSONAL DATA

Your personal data are disclosed to the following recipients:

5.1 Internally, to the Company

Your data are disclosed to the Company's internal staff and legal announcement services.

In accordance with regulations, access to your data is governed by individual, limited and controlled access authorizations.

5.2 To our commercial partners

They promote products or services on their own behalf or on behalf of advertisers.

6. TRANSFER OF DATA OUTSIDE THE EUROPEAN UNION

We store your personal data within the European Union. However, should we need to transfer your data to subprocessors or commercial partners outside the Union, we will ensure that such processing is governed by the European Commission's standard contractual clauses which provide an adequate level of protection for privacy and the fundamental rights of individuals.

7. YOUR RIGHTS

Under the aforementioned legal and regulatory provisions, you have the right to:

  • ask questions
  • access your data
  • rectify your data
  • erase your data
  • restrict the processing of your data
  • receive, to a certain extent, the portability of your data, i.e. the right to receive the personal data you have provided to us in a structured, commonly used format and to transmit those data to another data controller
  • object to the processing of personal data concerning you
  • object to your data being used for prospecting purposes, including commercial purposes (see section 8)
  • object to marketing profiling, which means that you may continue to receive marketing solicitations but these will be less relevant and will no longer be targeted according to your interests
  • set general and/or specific directives concerning the fate of your personal data and how you wish your rights to be exercised after your death. In this respect, in the event of a death brought to our attention, your data will be deleted unless retention is necessary for a determined period due to our legal or regulatory obligations and/or legal limitation periods, and after, where appropriate, having been communicated to a third party you may have designated.

You may exercise your rights by contacting the Data Protection Officer:

HBMDM
2 avenue de Paris - 94300 Vincennes - France

by sending an e-mail to: contact@hbmdm.com

For confidentiality and data protection reasons, the Company must ensure your identity before responding to such a request. Any request to exercise these rights must therefore be accompanied by a copy of a signed identity document.

If you are not satisfied with the response, you may file a complaint with the French Data Protection Authority (CNIL): https://www.cnil.fr/fr/plaintes.

8. OPPOSITION TO COMMERCIAL OFFERS

You may object at any time to commercial solicitations, according to the procedures provided by the communication medium in question.

9. SECURITY OF PERSONAL DATA

As data controller, we take all appropriate measures to preserve the security and confidentiality of data and in particular to prevent them from being damaged or accessed by unauthorized third parties. To this end, we endeavour to ensure the physical security of the buildings housing our IT systems, as well as the security of the IT system by implementing, in particular, encryption measures. In addition, we ensure that our processors comply with data protection rules.

10. UPDATING THE PERSONAL DATA PROTECTION POLICY

This personal data protection policy may be modified or adjusted at any time.

In the event of substantial changes, HBMDM will inform you of the updated policy.