Personal data protection policy

The user of the ANKA platform (hereinafter the "User" and the "Platform") is informed of the fact that MANSAART implements personal data processing for the purpose of operating the services made available on the Platform by virtue of which it endorses the quality of data controller with respect to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).

The User is informed of the following.

• Identity of the data controller
  
  

  MANSAART is a simplified joint stock company, registered in the Paris Trade and Companies Register under number 822 174 199, whose registered office is located at Les Tricolores, 47 boulevard de Courcelles - 75008 Paris, represented by Mr. Moulaye TABOURE, in his capacity as Chairman.

  MANSAART's Data Protection Officer:

  • Madam / Sir : Luc Perussault Diallo
  • Contact email address : [email protected]



• Data collected
  
  

  For the purposes of performing the services offered on the Platform, MANSAART may collect, in whole or in part, the following personal data of Users (hereinafter "Personal Data"):

  Categories of Personal Data	List of Personal Data processed
  Identification data	- Name - First name - Email address - Phone number - IP address
  Data related to billing and payment of services	- Data relating to means of payment

  They relate to:
  • to the individual User;
  • or, when the User is a legal entity, to the natural person representing the legal entity who provided the personal information for the purpose of registering and subscribing to MANSAART services.
  
  

  In application of the principle of data minimization or "Privacy by default", MANSAART ensures that it only collects data that is strictly necessary for the purpose for which it is processed.




• Purposes of the processing and grounds
  
  

  This Data is processed for the following purposes and has the following basis:

  Purpose(s)	Basis(s)
  - Registration on the Platform and creation of a user account - Subscription to services offered by MANSAART - Execution of the services offered by MANSAART - Billing and payment for services	Performance of the contract between MANSAART and the User
  - Management of claims and disputes (pre-litigation and litigation)	Performance of the contract between MANSAART and the User and compliance with legal obligations
  - Follow-up and management of the client/user relationship, including conducting optional satisfaction surveys on MANSAART services - To carry out commercial statistics and use of MANSAART services - Prospecting and commercial solicitation actions - Promotional and loyalty actions	Legitimate interest of MANSAART
  Purposes related to the deposit of cookies, namely: - To personalize and improve the User's experience on the Platform (personalization cookies) - To carry out statistics and audience measurements (statistical cookies) - Offer more relevant advertising (advertising cookies)	User Consent




• Recipients
  
  

  The processed Data are intended, according to the needs :

  • to authorized MANSAART services;
  • to the services res ponsible for the control (public accountant and auditor in particular);
  • to any subcontractors of MANSAART ;
  • to MANSAART's partners;
  • to public bodies, where required by law.



• Assignment and transfer
  
  

  The Personal Data collected may be transferred to a third country or an international organization. However, if necessary, MANSAART undertakes to ensure that these transfers are carried out in compliance with GDPR.




• Persons concerned’s rights exercising
  
  

  Right to access data	The person concerned has the right to obtain from MANSAART access to his/her Personal Data collected by it.
  Right to rectify data	The person concerned has the right to obtain from MANSAART, as soon as possible, the rectification of Personal Data that are inaccurate. In particular, he or she has the right to obtain that incomplete Personal Data be completed.
  Right to erase data	In exercising his or her right to be forgotten, the data subject has the right to request the erasure of his/her Personal Data. MANSAART has the obligation to proceed with the deletion of Personal Data in the following situations: - When Personal Data are no longer necessary for the purposes for which they were collected; - In case of withdrawal of the data subject's consent on which the processing is based (and where there is no other legal basis for the processing); - In case of opposition to the processing of Personal Data by the data subject (and where there is no compelling legitimate reason for the processing); - When Personal Data is processed unlawfully; - When Personal Data must be deleted in order to comply with a legal obligation.
  Right to limit processing	The person concerned may, in the following cases, request MANSAART to limit the processing of his or her Personal Data, i.e., to temporarily make the data inaccessible: - When he/she disputes the accuracy of one or more of his/her Personal Data; - Where the processing is unlawful and the data subject objects to the erasure of the data and demands, instead, a restriction on its use; - When the data subject needs his or her data for the establishment, exercise or defense of legal claims and MANSAART no longer needs it for processing purposes; - When the person concerned has objected to the processing: in this case, the limitation will be effective for the time necessary to determine whether the legitimate reasons pursued by MANSAART prevail over those of the person concerned. MANSAART undertakes to inform the person concerned before making his/her data accessible again.
  Right to object to the processing	The data subject has the right to object, at any time, to the processing of his/her Personal Data.
  Right to data portability	The data subject may request MANSAART (i) to retrieve the Personal Data concerning him or her that he or she has provided or (ii) to transfer it to another data controller, insofar as the processing of such data is carried out using automated processes. If the person concerned exercise this right, the delivery or transmission will be in a structured, commonly used and machine-readable format.
  Right to claim	The data subject may lodge a complaint with a supervisory or judicial authority.
  Right to give instructions in the event of death	The data subject has the right to give instructions regarding the fate of his or her data in the event of death.
  Right to withdraw consent	If the processing is based on the consent of the data subject, the data subject may withdraw his or her consent at any time, without affecting the lawfulness of the processing based on the consent carried out prior to the withdrawal of consent.

  To exercise these rights, the person concerned must send an email to MANSAART at the following address: [email protected]

  Each request must be accompanied by proof of identity. If there is reasonable doubt as to the identity of the applicant, additional information may be requested to confirm his/her identity.




• Duration of data retention
  
  

  The User's personal data is kept for the duration of the contractual relationship with MANSAART and for one (1) year thereafter.

  They are then archived for a period of five (5) years, for evidentiary purposes.

  Cookies are stored on the User's terminal for a maximum of thirteen (13) months, subject to the User's choices. For more information on this subject, the User is invited to read the cookie management policy.




• Data security
  
  

  MANSAART ensures the security of Users' personal data by implementing appropriate organizational and technical measures to guarantee a level of security adapted to the risk for the rights and freedoms of the persons concerned.