Information notice on the protection of personal data
Update September 2023

QUINZE MAI Company (SASU WITH A CAPITAL OF 3 070 884 Euros - RCS NANTERRE 302 382 858 - 1, rue Augustine Variot - 92240 MALAKOFF) hereinafter the Organizer»).

QUINZE MAI is particularly concerned about respecting the privacy of individuals and ensures that it processes their personal data in accordance with good confidentiality practices and the applicable legislation on the protection of personal data, in particular the General Data Protection Regulation No. 2016/679 (hereinafter the "GDPR") and Law No. 78-17 of January 6, 1978 relating to data processing, files and freedoms in its latest version in force (hereinafter the "Data Processing & Freedoms Law").

The purpose of the present Information notice relating to the processing of personal data (hereinafter the "Notice") is to communicate the commitments made by QUINZE MAI for the protection of the personal data processed and to inform you of your rights in this respect.

WHAT IS THE ROLE OF QUINZE MAI?

As a reminder, the GDPR and the Loi Informatique & Libertés define:

• The data controller as the person who determines the means and purposes of the processing,
• The processor as the person who processes personal data on behalf of the controller,
• Joint controllers as two or more controllers who jointly determine the purposes and means of processing. 
  In the context of the processing of personal data collected, QUINZE MAI acts as data controller.

WHAT PERSONAL DATA IS PROCESSED BY QUINZE MAI, AND FOR WHAT PURPOSES?

 QUINZE MAI processes or is likely to process the following categories of personal data:

• Personal identification data: title, surname, first name, e-mail address, telephone number.
• Personal data linked to professional life: employer's company name, professional postal address, type of structure, sector of activity, function, department, involvement in the purchasing process, objective in the context of participation in the event.
• Personal data relating to personal or professional life.
• Personal data relating to the event: date and time of participation, information collected when the visitor badge is scanned by the organizer or by the exhibitor, on stands, entertainment areas, speaking areas visited.
  This personal data is processed by QUINZE MAI for the following purposes:
• Management of visitor relations during the event.
• Communication of personalized content concerning professional activity or profile via newsletters, satisfaction surveys.

WHAT IS THE LEGAL BASIS FOR THE COLLECTION OF PERSONAL DATA BY QUINZE MAI?

• Processing is necessary for the performance of a contract with you (adherence to the GTCU in order to access the Congress or Trade Show).
• The processing is necessary for the purposes of our legitimate interests (customer relationship management, prospecting, fraud prevention or the implementation of network and information security for our IT systems, statistical studies).
• Processing is based on your consent (sharing your personal data with partners or exhibitors).

DOES QUINZE MAI SHARE YOUR PERSONAL DATA?

Internal recipients: your personal data may be processed by QUINZE MAI's internal employees, who are bound by a confidentiality agreement.
External recipients: your personal data may also be communicated by QUINZE MAI to the following external recipients:

HOW DOES QUINZE MAI PROTECT YOUR PERSONAL DATA?

QUINZE MAI uses appropriate technical and organizational measures designed to protect the personal data processed.
As the data controller, QUINZE MAI takes the necessary measures to ensure the confidentiality and security of the personal data processed, in accordance with good confidentiality practices and applicable personal data legislation.

HOW LONG DOES QUINZE MAI KEEP YOUR PERSONAL DATA?

Your personal data is kept for a period of three years from the date of collection or last contact with you. For example, a visit to an event, a request for documentation, a click on a hypertext link contained in an e-mail sent by QUINZE MAI (the simple opening of an e-mail is not considered by QUINZE MAI as a contact from you).
 

DOES QUINZE MAI USE PROFILING TECHNIQUES?

When QUINZE MAI sends personalized content, it is possible to use certain techniques qualified as "profiling" (defined as any form of automated processing of personal data consisting of using this data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict elements concerning the personal preferences, interests, financial situation, behavior, location, health, reliability, or movements of this natural person).
We centralize certain personal data about you, then analyze it to evaluate and predict your personal preferences and/or interests. Based on this analysis, we send or display communications and/or content tailored to your interests/needs.
You have the right to object to the use of your data for "profiling" purposes (see below).

WHAT ARE YOUR RIGHTS CONCERNING YOUR PERSONAL DATA?

 In accordance with the French Data Protection Act and the RGPD, you may at any time exercise your:

• Right of access: you may ask QUINZE MAI for information on the processing of your personal Data and for a copy of said Data.
• Right of rectification: you can ask for the rectification of inaccurate Data concerning you when those held by QUINZE MAI are erroneous or incomplete.
• Right to deletion: you have the right to obtain from QUINZE MAI the deletion of your Data when one of the reasons provided for by the regulations exists (uselessness of the Data, withdrawal of your consent for processing based on it, etc.).
• Right to object: you have the right to object at any time, for reasons relating to your situation, to the processing of your Data, including for the purposes of commercial prospecting. You can unsubscribe or object to receiving commercial prospecting messages from QUINZE MAI at any time. Simply click on the "unsubscribe" link in any email or communication that QUINZE MAI sends you.
• Right to portability: you have the right to receive Data in a usable format. This right only concerns the case where the Data is supplied to QUINZE MAI by yourself or results from your use of these services. This Data is processed based on your consent or the execution of a contract.
• Right to limitation: you can ask QUINZE MAI to suspend the processing of your Data when one of the reasons provided for by the regulations exists (contesting the accuracy of the Data, etc.).
• Right to object to profiling: you may object to profiling by contacting QUINZE MAI at the address below.

You are informed of the possibility of addressing any request relating to your rights and your personal data, and of deciding on the location of your personal data after your death, to the Data Protection Officer at the following address: data@15-mai.com, with a copy to the DPO (Délégué de la Protecion des Données) at data-privacy@groupe-nehs.com.

Finally, you have the right to notify a competent supervisory authority, in the Member State of your habitual residence, your place of work or the place where you believe that an alleged breach of your rights has occurred, of any concerns about the way in which your personal data is processed.
In France, the personal data protection authority is the Commission Nationale de l'Informatique et des Libertés, or "CNIL" - 3 place de Fontenoy - TSA 80715 - 75334 Paris Cedex 07.