Last updated on 3 September 2020
|DIDACTIC is a simplified joint-stock company with a capital of 971,161.40 euros, registered with the RCS [Trade and Companies Register] of Le Havre under the number 370 500 142 and whose head office is located at 1800, route des bleuets – Le Mirlibut – 76 430 Etainhus.
The website www.didactic.care (the Website) is created, published and managed by the company DIDACTIC.
DIDACTIC is committed to ongoing compliance in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 applicable as from 25 May 2018 (GDPR) and amended Law No. 78-17 of 6 January 1978 relating to data protection (known as the ‘Data Protection Act’).
In this respect, DIDACTIC is a ‘data controller’ as it defines for what use and how personal data is collected, processed and stored. The GDPR places accountability on all stakeholders involved in the processing of personal data, including subcontractors.
|What personal data is collected, for what purpose and on what legal basis?
The personal data collected on the Website and filled in by users via the ‘contact’ form is as follows:
The same applies when users or customers contact DIDACTIC Customer Service by telephone.
IP addresses are collected for all forms. The IP address is also collected for technical purposes. Local technical cookies and third-party cookies are also used – see below.
The main purposes of the processing of this personal data and the corresponding legal basis are as follows:
Order management and customer relationship management
. communicating with customers about an order for products: the legal basis is the contractual necessity of DIDACTIC when it comes to delivering an ordered product.
. communicating with customers or users to respond to their request for quotes, samples or technical documentation for information purposes prior to purchase: the legal basis is the legitimate interest of DIDACTIC
. reviewing previous purchases and/or viewing browsing history on the DIDACTIC Website to personalise the online experience: the legal basis is the legitimate interest of DIDACTIC in providing a personalised user experience on the Website
. evaluating, developing and improving the products and services offered by DIDACTIC. For example, calls to the call centre may be monitored and/or recorded for quality control or training purposes. If a question is asked (e.g. about a product or service) and there is a recording of the call, DIDACTIC can refer to it if it allows the request to be examined or answered. This means that DIDACTIC can keep the recording until the request has been dealt with: the legal basis is the legitimate interest of DIDACTIC in being able to offer a better quality of service.
Personalisation of services and messages sent
. sending information on products, including special offers if applicable, by email to users who are not yet customers of the Website: the legal basis is the consent of users
As a result, no promotional or sales emails shall be sent by DIDACTIC to users who are not yet DIDACTIC customers until they have given their clear and positive consent to do so (opt-in).
Users who are already customers may receive promotional or sales emails from DIDACTIC for products similar to those they have already ordered. If they no longer wish to receive them, they can indicate this by clicking on the link provided for this purpose (opt-out).
. investigating a complaint: the legal basis is the legitimate interest of DIDACTIC.
Special case of the processing of the IP address by BDSA:
BDSA is a subcontracting company of DIDACTIC (see legal information).
During their first visit, visitors are asked to classify themselves by choosing one of the two categories (professional or private individual), and this choice determines their level of access to the Website. In order to prevent users from having to classify themselves on future visits, the IP address and category of users are collected in a file for a period of 12 months, at the end of which this information shall be deleted. This file is also stored on OVH’s servers in Europe.
|Who is personal data collected for?
The only persons with access to personal data are those who need to know it within DIDACTIC, DIDACTIC’s subcontractors (based in Europe) and persons working at a company (based in Europe) in its group, i.e. those who are responsible for dealing with customer relationships or its interfacing within the organisation (including customer service, sales, invoicing and sales administration), those responsible for interactions with user requests (including sales, technical and scientific services, materials vigilance and human resources in the context of the processing of applications received via the Website), those responsible for the proper functioning of the Website (site maintenance technicians and developers) and those responsible for logistics services (preparation of orders).
|Where is personal data stored?
Data collected through the Website and then processed by DIDACTIC is stored exclusively on servers located in the European Union. More specifically, personal data is stored in France at the premises of the service provider OVH: OVH GRAVELINES, located at Route DE LA FERME MASSON in GRAVELINES (59820).
|Is personal data shared with third parties?
Personal data concerning users collected on the Website is intended for the sole use of DIDACTIC in the exercise of its usual commercial activity.
Under no circumstances shall DIDACTIC sell, rent and/or give personal data collected, processed and stored to a third party for marketing or other purposes.
In the event that DIDACTIC uses a subcontractor, the processing of this personal data shall be supervised in accordance with the provisions of the GDPR. This is the case in particular for the company BDSA L’Agence, which carried out the technical production of the Website, as a subcontractor of DIDACTIC.
DIDACTIC does not disclose personal data to third parties except in cases provided for by a legal or regulatory provision.
|Security: how is personal data protected?
DIDACTIC takes all necessary measures to preserve and enforce the integrity and confidentiality, availability and resilience of personal data, as well as its encryption. In particular, DIDACTIC undertakes to put in place the technical and organisational measures to ensure, in view of the state of the art, a level of security and confidentiality appropriate to the risks presented by the processing and nature of the personal data processed.
The security of personal data also depends on users.
Users undertake in particular to keep their username and password confidential.
|How long is the personal data of users kept?
Personal data is kept for a limited period of time as required by law. Personal data provided by users shall only be kept by DIDACTIC for the time necessary to carry out the assignment, for the performance of DIDACTIC’s obligations and to perform the contract entered into between customers and DIDACTIC, or for the time necessary to comply with DIDACTIC’s legal obligations, keep commercial and financial records, settle disputes, and detect and prevent fraud and abuse. In addition, as mentioned above, the visitor’s IP address is retained for 12 months from the first visit.
The contact details of prospective customers who do not respond to any marketing messages shall be kept for 3 years in accordance with CNIL recommendations.
|Information rights of data subjects and exercise of this right
Users of the Website and/or customers of DIDACTIC benefit from rights of information, opposition, access, rectification, deletion, delisting, portability, human intervention and the limitation of processing in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 applicable as from 25 May 2018 (GDPR) and amended Law No. 78-17 of 6 January 1978 relating to data protection (known as the ‘Data Protection Act’).
These rights can be exercised:
1800 Route des Bleuets
76430 Etainhus – France
Requests shall be processed within 30 working days of receipt.
If there is reasonable doubt as to the identity of the data subject, DIDACTIC may request additional information necessary to confirm the identity of the user.
If users are not satisfied with DIDACTIC, after contacting it to no avail, they can file a complaint with the supervisory authority, which – in France – is the CNIL.
The CNIL’s contact details are as follows:
Commission Nationale de l’Informatique et des Libertés
CNIL website https://www.cnil.fr/
Furthermore, in the event of a personal data breach, DIDACTIC shall notify:
|Why are cookies used?
Definition and use of ‘cookies’.
A ‘cookie’ is a small file (less than 4 KB), stored by the Website on users’ hard drives, containing information relating to users’ browsing habits to facilitate navigation and improve the service for users’ convenience and also to enable statistics and information on Website traffic to be processed.
As part of satisfaction surveys, DIDACTIC may use a customer satisfaction measurement tool.
Types of cookies used. The following types of cookies are used on this Website:
‘Temporary’ cookies: this type of cookie is active in users’ browsers until they leave the Website and expire if there is no access to the Website for a certain period of time.
‘Permanent’ or ‘tracker’ cookies: this type of cookie remains in the cookie file of users’ browsers for a longer period of time, which depends on the settings of the web browser. Permanent cookies are also known as tracking cookies.
No personal data is contained therein. Cookies are also stored on users’ computers.
Users can disable cookies at any time by selecting the appropriate settings on their browser (the help section of the browser used will explain how to do this).
It is brought to users’ attention that disabling cookies may reduce or prevent access to all or part of certain features of the Website.