Privacy policy

Data protection policy applicable as of May 25, 2018

Sixtystones builds lasting relationships with its customers, based on mutual trust. Close to our customers and attentive to their needs, it is just as important for us to guarantee the protection of your personal data when we collect it.

Sixtystones complies with all the provisions of the new European Data Protection Regulation (RGPD) n°2016/679, of April 27, 2016, amending the Data Protection Act of January 6, 1978.

Sixtystones guarantees each of its customers total control over their data, and affirms that it will not be disposed of without their consent.

Sixtystones ensures that data is handled transparently, confidentially and securely.

Sixtystones is committed to a continuous and sustainable approach to the protection of personal data, and has a dedicated data protection team.

Purpose of this policy

Sixtystones wishes to inform you through this policy of how our firm handles personal data.

This policy describes how we handle personal data relating to our corporate customers.

This policy may be updated or modified in accordance with legal, regulatory, jurisprudential or technical developments. Personal data will always be processed in accordance with the current personal data protection policy.

Identity and contact details of data controllers and processors

Sixtystones members are defined as subcontractors of client companies. In effect, they manage personal data on behalf of the client company, which is vital to the life of the business and its smooth economic operation. Subcontractors act on behalf of the data controllers, who are the company managers. Data controllers provide the means and purposes for processing personal data.

As processors, Sixtystones acts under the authority of and on the instructions of the controller.

Subcontractor contact details Sixtystones: head office located at Avenue du Serpolet, Z I ATHELIA - 13600 La Ciotat, France , France. N°SIRET 47824458500038represented by Mr Attias Jerome as manager.

Data collection and origin

All customer data is collected directly from the customer.

Sixtystones undertakes to obtain the consent of each customer for any collection of their personal data and to allow them to oppose the use of their data for certain purposes, as soon as this is necessary.

Purpose of the data collected

Necessity of collection :
When contacting our team, and in order to establish a business relationship, it is necessary to collect certain personal data. If the person in question does not wish to provide this data, we may not be able to respond to their requests, and we may not be able to carry out our software development assignments.

We collect your data when you register or log on to our website, or when you purchase software, and this collection is necessary in order to be able to respond to you and issue the invoice(s) corresponding to your purchases.

Purpose of processing :
The legal basis for the collection of personal data is Sixtystones' legitimate interest in being able to maintain relations and guarantee the best possible follow-up, meet your individual needs, improve our website and contact you by e-mail.

Sixtystones customer data is collected primarily to: enable you to purchase software.

Alternatively, data may be collected in order to: carry out e-mailing campaigns with our various customers and collaborators, in order to inform them of news relating to our software development activity.

Types of data collected

Sixtystones is likely to process, as a subcontractor, and to allow an effective and regular follow-up of the companies, or to send you any information relating to our new software, all or part of the following data: Surname, first name, e-mail address, postal address, telephone number, bank details.

On its website https://sixtystones.fr, Sixtystones, as data controller, is likely to collect data in order to reply to you or to enable you to purchase software (e-mail address, surname, first name, telephone number; postal address, bank details) when you have requested this via the "contact" tab.

Non-disclosure of personal data

Sixtystones affirms that the data collected will under no circumstances be passed on to external organizations for communication or advertising purposes.

The persons likely to have access to personal data, apart from the case mentioned above, are exclusively members of the Sixtystones team.

Data retention period

Data is kept only for as long as is necessary for the purposes for which it was collected and for the smooth running of the contractual relationship. The retention period may be adapted in accordance with legal obligations relating to the retention of archives for evidentiary purposes within the company.

The rights of those concerned

Sixtystones undertakes to collect only the data strictly necessary for the ordering, development and invoicing of its software. For each collection, Sixtystones takes all possible measures to respect the rights of the persons concerned.

In accordance with the new Data Protection Regulation (RGPD), data subjects have the following rights:

Right of access (article 15): any person may at any time ask to see all the data concerning him or her.
Right of rectification (article 16): any person may at any time request to modify or rectify out-of-date data.
Right to erasure or blocking (article 17): each individual may request the erasure or blocking of data concerning him or her at any time, to the extent possible and if the maintenance of contractual relations so permits, when such data is inaccurate, outdated, ambiguous, incomplete or whose collection, use, communication or storage is prohibited.
Right to object (article 21): each individual may decide at any time to object to the collection of his or her personal data, or to withdraw consent.
Right to restrict processing (article 18): every individual has the right to request that data collected be deleted after a certain period of time, as far as possible.
Right to data portability (article 20): every individual must be able to access data concerning him or her, without limit and within a reasonable time, when such data is subject to automated processing based on consent or contract.
For any information on data processing or to assert their rights, data subjects may contact Sixtystones at the following address: [email protected] or at BP90032 - 13600 La Ciotat, France. In this case, the data subject must indicate the personal data he or she would like Sixtystones to correct, delete or update, identifying him or herself precisely with proof of identity. Requests for deletion will be subject to the obligations imposed on Sixtystones by law, in particular with regard to archiving and documentation.

Finally, data subjects may lodge a complaint with the supervisory authorities, in particular the CNIL (https://www.cnil.fr/fr/plaintes).

Security

Sixtystones implements all technical and organizational measures to ensure the security and confidentiality of personal data processing.

Sixtystones takes all precautions appropriate to the nature of the data and the risks presented by the processing in order to preserve the security of the data, and in particular to prevent it from being distorted, damaged or accessed by unauthorized third parties (authentication procedures, data encryption, ID and password, etc.).

Contact us - DPO contact details

For any questions or information concerning the processing of personal data, or for any recommendations aimed at improving this policy, data subjects may contact us at the following address: BP90032 - 13600 La Ciotat, France, or at the following e-mail address [email protected].