Privacy policy
Who we are
This Privacy Policy is provided by eShot Labs, a French registered SAS with capital of 1000 euros, whose registered office is located at 11 Avenue de la République, 92500, Rueil-Malmaison, registered with the trade and companies register of Nanterre under number 910 539 642 (referred to as "we", "us"or "our"in this Privacy Policy).
We are the Data Controller of any Personal Data we collect about anyone that browses the Website (referred to as "you", or the "User"), and we are responsible for the eShot Labs Website (www.eshotlabs.com) (the "Website").
Your data
We collect, use and are responsible for that personal information. When we do so, we are subject to applicable directives, regulations and guidelines (together the "Data Protection Laws") which include the 1978 French Data Protection Act and the General Data Protection Regulation ("GDPR"). All capitalized terms in this Privacy Policy that are not defined herein have the meaning provided in the GDPR.
In order to comply with the Data Protection Laws, this Privacy Policy tells you about how and why we collect and use the Personal Data which you provide to us or which we collect about you when you interact with us, for example, when you use our website. It is likely to be updated from time to time.
What information we collection from you and how we use it
| The Personal Data we collect from you | Context of processing | How we use it - Purposes | Lawful Basis |
|---|---|---|---|
| Identification data (name, surname, email address) | You have contacted us by e-mail | We use this data to correspond with you and answer to your queries | Legitimate interest |
| Curriculum Vitae (studies, former job experience, contact data, photo, physical address etc.) | You have applied for a job in our team | We use this data to carry out your application process | Legitimate interest |
| Email address | You have subscribed to our newsletter | We use this data to provide us the latest news on our activities | Consent (which you may withdraw at any time) |
| IP Adress | You are browsing our Website | We use this data to allow you to browse our Website | Legitimate interest |
How long will we keep your personal data?
We will only keep your Personal Data for as long as we need to for the reason we collected it, as set out below:
| The Personal Data we collect from you | Conservation period |
|---|---|
| Identification data (name, surname, email address) | Duration of the correspondence + 3 years |
| Curriculum Vitae (studies, former job experience, contact data, photo, physical address etc.) | Duration of the application process + 2 years if the applicant has been informed of the data's conversation and has not opposed. |
| Email address (newsletter subscription) | Until you withdraw your consent. |
| IP Adress and connection information | 4 hours (subject to a 1 week extension in case of an issue) |
Sharing your data
We share your Personal Data with trusted third parties to allow us to provide you access to our Website. When we share your data with these third parties we only provide the information they need to perform the service. We have written contracts in place with them to ensure they only use your data for the purpose we specify to them and that your privacy is secure and respected.
These trusted third parties include the following professional service providers:
- Website hosting providers: Google Cloud France, located 8, rue de Londres, 75009, Paris, France
- DDos protection and cache services : Cloudflare Inc., located 101 Townsend St, San Francisco, CA 94107, USA
- Customer Relationship Management : Sendinblue, located 7 rue de Madrid, 75008, Paris, France
We may be required to share your Personal Data with the police, administrative authorities or other enforcement, regulatory or Government bodies, where we are legally obliged to do so.
International transfer of your personal data
Personal Data subject to this Privacy Policy are collected and processed in the European Economic Area territory only.
If any international transfer of your Personal Data were to happen, such transfer would only be carried out on the basis of an adequation decision of the European Commission, in accordance with Article 45 of the GDPR, acknowledging that the country where the Personal Data is transferred ensures an adequate level of protection.
If the destination country has not been acknowledge as having an adequate level of protection by the European Commission, the transfer will be based on an appropriate safeguard in accordance with Article 46 of the GDPR.
Third party links
Our Website may contain links to other websites of interest. However, we do not have any control over third party websites and they will be governed by their own privacy policies, not this Privacy Policy.
Your rights
You have the following rights in relation to the personal information we hold about you, to request:
-
access to the Personal Data we hold about you (commonly known as a "data subject access request") including a copy of it.
-
the correction of the personal information that we hold about you if it is incomplete or inaccurate;
-
the deletion or removal of Personal Data we hold about you where there is no good reason for us continuing to process it or where you have exercised your right to object to processing (see below);
-
for our processing of your personal information to be restricted in certain circumstances, for example if you want to establish its accuracy or the reason for processing it; and
-
to obtain a copy of the personal information you've provided us with and to reuse it elsewhere or to ask us to transfer it to a third party of your choice.
-
To object to the processing of your Personal Data when we are processing it on the basis of our legitimate interests, which we will do unless we believe we have an overriding legitimate reason to continue processing your Personal Data.
-
To define directives pertaining to the conservation, erasure and/or communication of your Personal Data after your death,
We may ask you for proof of your identity before dealing with your request, as a security measure to protect your data.
If you are dissatisfied with how we have handled your Personal Data, you have the right to make a complaint to your data protection regulator. In France, this is the Commission National de l'Informatique et des Libertés (CNIL), located 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07.
Contacting us
If you have any queries, comments or requests regarding this Privacy Policy, you have a complaint or you would like to exercise any of your rights set out above, you can contact us:
- by email at [email protected]
- By letter with acknowledgment of receiptat 11 Avenue de la République, 92500, Rueil-Malmaison