Privacy policy
Doc No: CPA-SEC-004
Revision No. 001
Application date 19-March-2025
1. Why a privacy policy?
We place great importance on protecting your personal data. This privacy policy explains how we collect, use, share, and protect your information in accordance with the GDPR (General Data Protection Regulation 2016/679 of April 27, 2016). We encourage you to read this policy carefully to understand how we handle your personal data.
This policy applies to the entire website developed by CAREPROD, regardless of the medium used during your visit to the site.
We regularly update this privacy policy to reflect changes in our data processing practices or regulatory developments. We will inform you of any significant changes through our website or other appropriate communication channels. We encourage you to regularly review this policy to stay informed about our privacy practices.
This policy complements the legal notices.
2. Our key principles
Our goal is to ensure the security and confidentiality of your personal data. To achieve this:
Your personal data will not be sold to third parties by CAREPROD.
Your personal data will be shared with trusted third parties help us provide our services, such as:
Hosting service providers (Gandi)
Email service providers (Microsoft)
Service providers for the newsletter (MailChimp)
We require these third parties to respect the confidentiality of your information and to use it only within the scope of the services provided.
In accordance with the GDPR, we commit to collecting and processing only the data that is strictly necessary for its intended purpose. Similarly, the collected data is retained only for the duration necessary for its purpose.
3. Who is the data controller?
CAREPROD is the data controller within the meaning of Article 4 of the GDPR for all operations offered by the site careprod.com.
CAREPROD determines the means and purposes of data processing necessary for the proper functioning of the careprod.com website.
CAREPROD, 447 rue de la tour de Candelon, 34090 Montpellier.
MailChimp is a subcontractor within the meaning of Article 4 of the RGPD. It hosts and stores the personal data of people requesting support. More information: https://mailchimp.com/fr/about/security/
Our subcontractors are required to comply with contractual clauses to ensure the required levels of confidentiality and security.
4. I have a question, a complaint, or I want to exercise my rights
For any questions regarding security and personal data or to exercise your rights of access*, rectification*, deletion*, withdrawal*, restriction*, objection* to processing, or portability*
You can contact us:
Via the “Contact the DPO” contact form on the website
By email: dpo@careprod.com
By post: for the attention of the DPO
CAREPROD
447 rue de la tour de Candelon
34090 Montpellier
We’ll get back to you as soon as possible.
For more information, you can contact the CNIL (Commission Nationale Informatique et Liberté) on their website www.cnil.fr .
*Articles 15, 16,17,18,20,21, 23, 77 of GDPR
5. What data do we process?
As a visitor using the contact form, we collect the following data:
Surname, first name, e-mail address, to enable us to contact you and respond to your request;
The telephone number where you can be reached, in order to have a second possible means of communication and to discuss your project more effectively.
This mandatory data will be identified by a red asterisk (*).
These data will be retained for 2 years after the last contact. If the project does not materialize, the data will be deleted after one month.
When you request to receive the newsletter or any communication information about CAREPROD events, we collect your name, first name, email, and country in order to send you newsletters via Mailchimp and any communication elements in the appropriate language (English or French).
These data are kept until you unsubscribe from the newsletter.
Mailchimp has its own privacy policy that you can consult at the time of subscription to the newsletter.
As an information requester via the “Contact the DPO” form, we collect your name, first name, and email address to contact you and respond to your request for information or exercise of rights.
These data will be retained for 5 years from the end of the calendar year of the request (CNIL recommendations).
These data are collected based on your consent, which you can withdraw at any time by contacting us (see §4 above).
We do not use profiling techniques to analyze or predict your behavior, preferences or other personal aspects. If we decide to use profiling in the future, we will inform you and obtain your explicit consent before proceeding.
We are committed to handling your personal data in a transparent manner. All information concerning the collection, use, storage and sharing of your data is provided in a clear, concise and understandable manner. We avoid technical jargon and ensure that this information is easily accessible.
6. How are data protected?
We take appropriate security measures to protect your personal information against loss, misuse, unauthorized access, disclosure, alteration, or destruction. We comply with GDPR requirements for data protection and implement appropriate technical and organizational measures to ensure the security of your information.
7. Who has access to my data?
Only internal services at CAREPROD will have access to your data to fulfill the defined purposes. On the decision of a regulatory or judicial authority, in application of a law, data may be disclosed.
Your data are not sold for commercial purposes.
8. What about cookies?
CAREPROD uses functional cookies necessary for the use of the website. These cookies cannot be refused as they are necessary for the proper functioning of the platform:
Cookies | Description | Duration | Type |
_cf_bm | This cookie is used to distinguish between humans and robots. This is beneficial for the website, in order to produce valid reports on the use of their website. | 30 min. | Required |
There are optional cookies.
.cookies | Description | Duration | Type |
_pk_id.8.7402 | This cookie name is associated with the Piwik open source web analytics platform. It is used to help website owners track visitor behavior and measure site performance. This is a template cookie, where the _pk_id prefix is followed by a short series of numbers and letters, which is intended to be a reference code for the domain defining the cookie. | 1 year | Optional |
_pk_ses.8.7402 | This cookie name is associated with the Piwik open source web analytics platform. It is used to help website owners track visitor behavior and measure site performance. This is a template cookie, where the prefix _pk_ses is followed by a short series of numbers and letters, which is intended to be a reference code for the domain defining the cookie. | 30 min. | Optional |
_cfuvid | This cookie is used to track users during their sessions in order to optimize the user experience by maintaining session consistency and providing personalized services. | Session | Optional |
vuid | These cookies are used by the Vimeo video player on websites. | 13 months | Optional |
CAREPROD does not control the cookie policy of other sites to which CAREPROD may link.
Mailchimp has its own cookie management policy, which can be configured and consulted when subscribing to the newsletter.