Privacy Policy | Data privacy policy and GDPR compliance documentation

Last modified: November 27, 2021

‍

Since the European « General Data Protection Regulation » entry into force, TEMPR informs in a transparent way about processing of handled personal data in accordance with the articles 12 and 13 and 14 of the GDPR legislation.

ISO27001 SECURE INFORMATION ARCHITECTURE

Our apps are hosted in France by the ISO27001 certified outsourced datacenter OVH®. Our apps strictly use anonymized statistical data in particular by means of randomized UDID or IDFA. Our administrative and commercial data are hosted :

• in our secure building located in France;

• or legally - via Standard Contractual Clauses (SCCs) - and securely in our ISO27001 certified outsourced datacenters outside EU, in particular Google Workplace® and Hubspot®.

PROSPECTS DATA, REQUESTS FOR DEMO, PRICING OR INFORMATION

Data processing controller	TEMPR
Processing purposes	• Potential clients relationship management • Precontractual relationship management
Processed data	Identities, contact details, professional function
Recipients and possible source personal data originate	Only commercial division or marketing division or customer sales division or partnerships division and company management may access communicated or stored data. We point out that we could possibly feed our potential clients database from public information or business partners.
Data retention and erasure	The maximum period for which the personal data will be stored is settled to 3 years.
Processing legal basis	The legal basis for data handling and processing is based on the consent of the persons concerned or our legitimate interests in absence of.

CLIENTS DATA AND APPS USERS AND SALE ASSOCIETED INTERLOCUTORS DATA

Data processing controller	TEMPR
Processing purposes	• Clients relationship management • Invoicing management • Accounting management • Apps management • Customer service management
Processed data	Identities, contact details, professional function
Recipients and possible source personal data originate	Only commercial division or marketing division or customer sales division or customer service division or accounting division and company management may access communicated or stored data. We point out that we could possibly feed our potential clients database from public information.
Data retention and erasure	The maximum period for which the personal data will be stored is settled to 5 years after the end of the client relationship. Data retention is settled to 10 years after publication concerning nominative accounting documents.
Processing legal basis	The legal basis for data handling and processing is based on the contractual relationship performance or our legitimate interests in absence of or French legal obligations in absence of.

‍SOFTWARE LOGS DATA

Data processing controller	TEMPR. In case of outsourced maintenance, TEMPR is the processor of the client, wich is the Data processing controller.
Processing purposes	• Logs management ; • Security risks management
Processed data	Identities, contact details, professional function
Recipients and possible source personal data originate	Only commercial division or marketing division or customer sales division or customer service division or accounting division and company management may access communicated or stored data. We point out that we could possibly feed our potential clients database from public information.
Data retention and erasure	The maximum period for which the personal data will be stored is settled to 5 years after the end of the client relationship. Data retention is settled to 10 years after publication concerning nominative accounting documents.
Processing legal basis	The legal basis for data handling and processing is based on the contractual relationship performance or our legitimate interests in absence of or French legal obligations in absence of.

NEWSLETTERS AND EMAILINGS AND INVITATIONS AND SIGN-OFF SHEETS

Data processing controller	Ours clients and professional contacts may receive our communications by email, text message or letter mail. In this context, a newsletters or events invitations or events sign-off sheets system can be implemented by TEMPR which is the data processing controller. You can point out to dpo@tempr.ai that you no longer wish to receive our messages.
Processing purposes	• Newsletters and emailings management • Events management
Processed data	Identities, contact details, professional function
Recipients and possible source personal data originate	Only concerned internal or outsourced operational staff may access data. We point out that we could possibly feed our data from public information or from event co-organisation partners. We also point out that data can be transferred to partners in charge of technical processing or event management or event co-organisation.
Data retention and erasure	The maximum period for which the personal data will be stored is settled to 3 years after relationship inactivity with messages recipient.
Processing legal basis	The legal basis for data handling and processing is based on the contractual relationship performance or our legitimate interests in absence of or French legal obligations in absence of.

APPLYING FOR UNSOLICITED APPLICATION OR JOB OFFERS DATA

Data processing controller	TEMPR
Processing purposes	• Application management • Job interviews management • CV database feeding
Processed data	CV and possible cover letters and all others documents or data provided for recruitment process
Recipients and possible source personal data originate	Only company management and personnel in charge of recruitment may access communicated data. We point out that we could possibly transfer data to partners, especially public organizations. We also point out that we could possibly feed our CV database from public information, jobboards or partners.
Data retention and erasure	The maximum period for which the personal data will be stored is settled to 2 years after relationship inactivity.
Processing legal basis	The legal basis for data handling and processing is based on the consent of the persons concerned or precontractual measures in absence of or our legitimate interests in absence of.

POTENTIAL OR CURRENT SUPPLIERS DATA

Data processing controller	TEMPR
Processing purposes	• Supplier relationship management • Accountancy management
Processed data	Identities, contact details, professional function
Recipients and possible source personal data originate	Only company management and personnel in charge of recruitment may access communicated data. We point out that we could possibly transfer data to partners, especially public organizations. We also point out that we could possibly feed our CV database from public information, jobboards or partners.
Data retention and erasure	The maximum period for which the personal data will be stored is settled to 2 years after relationship inactivity.
Processing legal basis	The legal basis for data handling and processing is based on the consent of the persons concerned or precontractual measures in absence of or our legitimate interests in absence of.

COMPANY PARTNERS CONTACTS DIRECTORY

Data processing controller	TEMPR
Processing purposes	• Contact directory management • Partnership management
Processed data	Identities, contact details, professional function
Recipients and possible source personal data originate	Only company management and concerned staff may access communicated data. We point out that we could possibly feed our company partners contact directory from public information.
Data retention and erasure	The maximum period for which the personal data will be stored is settled to the end of the need.
Processing legal basis	The legal basis for data handling and processing is based on the consent of the persons concerned or our legitimate interests in absence of.

YOUR RIGHTS

According to the European GDPR legislation, you have at any time the right of access to, rectification, erasure, restriction, portability, consents changes for your personal data. You may also oppose, for legitimate grounds, the processing of your personal data. If you wish to exercise these rights, please write to dpo@tempr.ai or by letter mail to DPO DIVISION, 83 Rue du Faubourg Saint-Denis, 75010 Paris. You may also initiate a claim to concerned the EU-GDPR supervisory authority - especially the CNIL for France.