effective date: 30/06/19
The protection of your personal data is very important to us. We treat this topic with a great deal of care and therefore inform you in the following about the handling of your personal data when visiting our website. If you need a Data Processing Agreement with us, please see below the “Data Processing Agreement” section.
Any collection, processing and use (hereinafter “processing” or “use”) of data is solely for the purpose of providing our services. The services of Tableur.com (Valmetrics Sarl) have been designed to use as little personal information as possible. For that matter, “personal data” is understood as all individual details about a person or factual circumstances of an identifiable natural person (so-called “affected person” or “data subject”). The following statements on data protection describe what types of data are collected when accessing our website, what happens with these data and how you may object to data usage.
1 General information on data processing
1.1 Person Responsible (Controller)
Responsible within the meaning of the EU General Data Protection Regulation (GDPR) and the new Federal Data Protection Act (BDSG) is:
Valmetrics Sarl chemin de Précossy 21 CH-1260 Nyon Email: [email protected]
1.2 Name and address of the Data Privacy Officer
The data privacy officer is: Patrice Bendjouya of Valmetrics Sarl If you have questions about data protection you can contact Valmetrics via the following email address: [email protected]
Or by mail:
Chemin de Précossy 21
1.3 Protection of your data
We have taken technical and organizational measures to ensure that we and our external service providers meet the requirements of the EU General Data Protection Regulation (GDPR). If we work with other companies to provide our services, such as email and hosting providers, this will only be done after an extensive selection process. In this selection process, each individual service provider is carefully selected for its suitability in terms of technical and organizational data protection skills. This selection procedure will be documented in writing and an agreement on the order processing of data (order processing contract) will only be concluded if the third party complies with the requirements of Art. 28 GDPR. Your information will be stored on protected servers. Only the minimal number of authorized Valmetrics employees have access to your information. Our website is SSL/TLS encrypted, as can be seen by the https:// at the start of our URL.
1.4 Erasure of personal data
Valmetrics processes personal data only if necessary. As soon as the purpose of the data processing is fulfilled, we erase the data according to the standards of our deletion concept, unless legal or contractual regulations oppose this.
2 Our website
2.1 Description and scope of data processing
When visiting our website, our web servers temporarily store every access in a log file. The following data is collected and stored until automated deletion:
- IP address of requesting server
- Date and time of access
- Name and URL of the retrieved file
- Message if the retrieval was successful
- Other data may be retrieved by our partners. See further information below.
2.2 Legal basis for processing personal data
The legal basis for the temporary storage of log files is art. 6 para. 1 s.1 lit. f) GDPR. Our legitimate interests are to make our website accessible for you.
2.3 Purpose of data processing
The processing of this data serves: the purpose of enabling the use of the website (connection establishment), system security, the technical administration of the network infrastructure, as well as to optimize the website. The IP address is evaluated only in case of attacks on our network infrastructure or the network infrastructure of our internet provider.
2.4 Duration of storage
As soon as the purpose of the data processing is fulfilled, we delete the data. This happens as soon as you close your browser. Our hosting service might use your personal data for statistical purposes. For this your personal data will by anonymized. A final deletion of this data is carried out after a period of 6 weeks.
2.5 Right to objection and deletion
The collection of data is necessary in order to display and operate this website. Therefore, objecting to processing your personal data is impossible.
3.1 Description and scope of data processing
We store cookies on your computer and process the stored information when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you use. The stored information can be processed by Valmetrics or the party that sets the cookie. Cookies cannot run programs or transmit computer viruses. Cookies are used to analyze the use of www.tableur.com in anonymized or pseudonymized form and to enable personalized advertisements on this website.
Cookies process the following personal data:
- Which functions of the website are used
- Used search terms
The following cookies are used:
- GCLB: This is a cookie, we use to manage load balancing.
- ga/gat/gid: These cookies are necessary for google analytics.
- Dd-cross-session: This is a session cookie.
3.2 Legal basis for data processing
This processing is legally based on art. 6 para. 1 s. 1 lit. f) GDPR.
3.3 Purpose of data processing
Our legitimate interests are to provide a working connection with our website and to ensure a comfortable use of this website. Also, we need to process your personal data to solve occurring safety and security issues, as well as to ensure system stability. Our tracking service also provides us with statistics about the use of our website.
3.4 Duration of storage
This website uses the following types of cookies. The extent and function of each are explained below:
- Transient cookies (see a)
- Persistent cookies (see b)
a) Transient cookies are automatically deleted when you close the browser. These include session cookies. Transient cookies store your session ID, with which various requests from your browser can be assigned to the common session. This will allow your computer to be recognized when you return to our website. The session cookies are deleted when you log out or closes the browser. b) Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie.
3.5 Right to objection and deletion
4.1 Description and scope of data processing
On our website www.tableur.com visitors can subscribe to our waitlist. When signing-up to our waitlist, the following information is mandatory:
- First name,
- Last name,
- Email address,
We contact you via email only after you completed the sign-up process. Therefore, the email address is necessary to send the newsletter to its recipients. If you sign up for our waitlist, we will send a confirmation email to the address you provided us with. Following this procedure, the IP address, date and time of login are stored for documentation purposes. We won’t transfer the data to third parties. We may send you emails about major changes to our product and the waitlist to keep you informed. This communication will occur at most quarterly.
4.2 Legal basis for data processing
This processing is legally based on your consent, art. 6 para. 1 1 s.1 lit. a) GDPR. Existing customers may also receive our newsletter without having given their explicit consent. This is carried out only in accordance with art. 95 GDPR. This equals the legal basis of art. 6 para. 1 s.1 lit. f) GDPR. Our legitimate interests are to provide information about our product through promotional emails to our existing customers and thereby keep in contact with these customers.
4.3 Purpose of data processing
The waitlist informs our customers about major product news from Valmetrics on a regular basis. We also send our customers their account credentials to enable them to access our software.
4.4 Duration of storage
We process personal data only if necessary. As soon as the purpose of the data processing is fulfilled, deletion of the data is carried out according to the standards of the deletion concept, unless legal or contractual regulations oppose this.
4.5 Right to objection and deletion
You can withdraw your consent to this data processing at any time. If you want to unsubscribe from the waitlist you can do so by clicking the integrated link on the bottom of each email. This will enable you to send us an email to stop the processing by unsubscribing your email address from our mailing list. It is also possible to inform Valmetrics about the revocation of the consent in any other way, e.g. via post or email.
4.6.1 Description and scope of data processing
4.6.2 Legal basis for data processing
This data processing is legally based on our legitimate interests in efficiently and safely sending our newsletter, Art 6 Abs. 1 S.1 lit. F) GDPR.
4.6.3 Purpose of data processing
We use Mailchimp as our subprocessor to ensure an efficient management of our mailing list and to send newsletters to stay in touch with you.
4.6.4 Duration of storage
Mailchimp claims to keep your personal data only if we use it for sending newsletters. When we delete you from our mailing list, Mailchimp will delete this data as well.
4.6.5 Right to objection and deletion
You can object to the processing of your data by Mailchimp. Your objection will be considered, and we will notify you if and why we continue the processing. You are also free to use the “opt out“ link in the footer of each email. If you do so, we will delete your email address from our mailing list which in turn will prompt Mailchimp to stop processing your personal data. This will not have any effect on other mailing lists (e.g. by other companies) managed through Mailchimp.
5 Tracking and analytics – Google Analytics
For the continuous improvement of our website we use the following tracking and analysis tools and give you details about our service provider and about how we process your data.
5.1 Description and scope of data processing
The website www.tableur.com uses Google Analytics. This is a service for analyzing access to websites of Google LLC. (“Google”) and allows us to improve our website. The processor is: Google LLC., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA. Cookies enable us to analyze your use of our website. The information collected by a cookie are:
- IP address
- access time
- access duration
5.2 Legal basis of data processing
Legal basis is the art. 6 para 1 s. 1 lit. f) GDPR. Our interest is to provide a website which is tailored to its audience and to optimize our online services accordingly.
5.3 Purpose of data processing
By processing the data, we can analyze how our website is used, so we can improve it for our users. We protect your data by using only anonymized IP addresses.
5.4 Duration of storage
The data will be deleted after a set period of time, which varies from 14 to 50 months.
5.5 Right to objection and deletion
You can prevent the installation of cookies by Google Analytics in your browser settings. However, this might cause that you cannot fully use all features of our website. Also, through browsers extensions, e.g. http://tools.google.com/dlpage/gaoptout?hl=de, Google Analytics can be disabled and controlled. You can prevent tracking by using the following link: https://tools.google.com/dlpage/gaoptout
6 Your rights
You have the following rights with respect to your personal data:
6.1 Right to revoke a given consent (Art. 7 GDPR)
If you have given your consent to the processing of your data, you can withdraw your consent at any time. Such withdrawal will only affect future processing. You can withdraw your consent verbally or in writing by post or email.
6.2 Right of access (Art. 15 GDPR)
In the case of a request for information, you must provide enough information about your identity and provide proof that it is your personal data. The information relates to:
- data that has been stored regarding your person
- the categories of personal data concerned
- the right to lodge a complaint with a supervisory authority
- the origin of the data
- the recipient or the categories of recipients to which data has been transmitted
- the purpose of the storage
- the right of rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
- all available information on the source of the data
- the existence of automated decision-making, including profiling, referred to in Art 22 Abs. 1 and 4 GDPR and, in those cases, meaningful information about logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
6.3 Right to rectification and erasure (Art. 16, 17 GDPR)
You have the right to request a correction and / or completion, if your personal data is incorrect or incomplete. We will make the correction without delay. You may also request the erasure of your personal data if any of the following applies to you:
- The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
- You withdraw consent on which the processing is based according to art. 6 para. 1 s.1 lit. a) or art. 9 para. 2 lit. a) GDPR, and where there is no other legal ground of processing.
- You object to the processing pursuant to art. 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to art. 21 para. 2 GDPR.
- The personal data have been unlawfully processed.
- The personal data have to be erased for compliance with a legal obligation in Union or Member State law to which we are subject.
- The personal data have been collected in relation to the offer of information society services referred to in art. 8 para. 1 GDPR.
Where we have made the personal data public and are obliged to erase the personal data pursuant to art. 17 para. 1 GDPR, we, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform other controllers which are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data. The right to object shall not apply to the extent that processing is necessary:
- for exercising the right of freedom of expression and information;
- for compliance with a legal obligation which requires processing by Union or Member State law to which we are subject or for the performance of a task carried out in the public interest or in the exercise of official authority;
- for reasons of public interest in the area of public health in accordance of art. 9 para. 2 lit. h) and i) as well as art. 9 para. 3 GDPR;
- for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with art. 89 para. 1 GDPR, in so far as the right referred to in paragraph a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
- for the establishment, exercise or defence of legal claims.
6.4 Right to restriction of processing (Art. 18 GDPR)
You shall have the right to obtain from us restriction of processing where one of the following applies:
6.5 Right to information (Art. 19 GDPR)
If you have asserted us your right to rectification, deletion or restriction of data processing, we have to inform all recipients of your personal data to correct, delete or restrict the processing of data. This applies only as this notification is not impossible. You also have the right to know which recipients have received your data.
6.6 Right to data portability (Art. 20 GDPR)
You have the right to receive the personal data, which you provided to a controller, in a structured, commonly used and machine-readable format. Also, you have the right to transmit those data to another controller, where
- The processing is based on consent pursuant of art. 6 para. 1 s.1 lit. a) GDPR or of art. 9 para. 2 lit. a) GDPR or is based on a contract pursuant of art. 6 para. 1 s. 1 lit. b) GDPR; and
- the processing is carried out by automated means.
In exercising your right to data portability, you have the right to obtain that personal data transmitted directly from us to another controller, as far as technically feasible. The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority that has been delegated to us.
6.7 Right to object (Art. 21 GDPR)
As we based the processing of your personal data on a legitimate interest (art. 6 para. 1 s. 1 lit. f) GDPR), you may object to the processing. The same applies if the data processing based on art. 6 para. 1 s. 1 lit. e). In this case, we ask you to explain the reasons why we should not process your personal data as we have done. We will terminate or adapt the data processing or show you our legitimate reasons why we continue the data processing.
6.8 Right to lodge a complaint with supervisory authority (Art. 77 GDPR)
Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of your residence, place of work or place of alleged infringement, if you believe that the processing of the personal data concerning you is against the infringes. The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy according to Article 78 GDPR.
6.9 How you perceive these rights
To exercise these rights, please contact our data privacy officer: Patrice Bendjouya from Valmetrics Sarl [email protected] or by mail:
Chemin de Précossy 21
7 Subject to change
DATA PROCESSING AGREEMENT
If you need a Data Processing Agreement with Valmetrics as a Processor as per Art. 28 GDPR, we will be happy to provide you with an agreement. Please send an email to [email protected]