Data Protection Policy

OpportunIT is concerned about private life and personal data of its contacts. We have taken a strict data policy that guarantee our conformity with the current law. 
Which means, OpportunIT’s policy is conform with the European right regarding the “General Data Protection Regulation” or GDPR n°2016/679 of 27th of April, as well as our national right and subsidiaries taken under this article.  
This Data Protection Policy (“DPP”) purpose is to inform in a clarify, simple and complete way the concerned persons on how OpportunIT collect,manage and use personal data and the means at your disposal to manage and exert your rights on your personal data.
 
1. When do we collect your personal data ? 
OpportunIT may collect personal data in the context of professional meetings, cases, partnerships, applications, your visit to our offices, your visits to our website and your use of our online services. 
Declarative personal data are those that you provide via forms, whether they are dematerialised on websites, in paper format or in response to questions asked you by lawyers or members of the company
OpportunIT takes into account the principles of data minimisation, data protection from their conception onward and data protection by default. Consequently, are collected relevant and adequate information limited to the necessary purpose of the search.
Mandatory declarative personal data are indicated by an “*” sign on the collection medium. Apart from these cases, you are free to provide or not all or part of your personal data. However, such a decision could limit your access to certain services or products offered by OpportunIT, or other functionalities offered by its website.
 
2. In which cases your data are collected ?
Your personal data are run by OpportunIT in cases that are legally authorized, in particular under the following conditions : 
- When you give free, specific, informed and unequivocal consent to the processing of your personal data (e.g. subscription to thematic information, registration for an event, etc.),
- When this is necessary for the execution of a contract, or pre-contractual measures taken at your request (e.g. application, handling of a dossier, need for access to a dataroom, etc.),
- To comply with legal or regulatory obligations of OpportunIT (e.g.: fight against fraud),
- When the legitimate interests of OpportunIT may be such as to justify processing by the lawfirm (e.g. computer security measures).
Relative information that comply with the current law is provided in each cases. 
We mention here that for minors under the age of 18, such consent must be given or authorised by the holder of parental responsibility. If the guardian discovers that Personal Data of the minor concerned has been entrusted to OpportunIT without his consent, they may ask OpportunIT to delete such Personal Data by following the procedure described in point 7.2. of this Charter.
 
3. Why do we collect your data ?
Your personal data are collected for specific, explicit and legitimate purposes. 
Depending on the case, we may use your personal data for the purpose of :
- Dialogue with you in the context of partnerships, contracts, missions, etc…
- Participation in surveys, analyses and statistics in order to improve our products and services as well as the knowledge of our clients and leads. 
- Requesting, obtaining or receiving information about OpportunIT or one of its entities or affiliates, or on the products and services offered by them or their partners.
- Subscribing and receiving thematic information (legal training, documentation, invitations, activity reports, etc.) ;
- Processing your application for a position ;
- Improving your customer experience
OpportunIT may also use your personal data for administrative purposes or for any other purpose imposed by the current legislation.
 
4.    Who are the recipients of your personal data ? 
Because your personal data are viewed as confidential, only duly authorised persons by OpportunIT can access your data, except for the authorities in charge of control or inspection in accordance with the applicable regulations
 
5. How the safety of your personal data is preserved ? 
OpportunIT protect and secure your personal data in order to ensure their confidentiality and prevent them from being distorted, damaged, destroyed or disclosed to unauthorised third parties.
When disclosure of data to third parties is necessary and authorised, OpportunIT ensures that these third parties guarantee the same level of data protection as that offered to them by OpportunIT and requires contractual guarantees so that the data are exclusively processed for the purposes you have previously accepted, and with the required confidentiality and security.
OpportunIT implements technical and organisational measures to ensure that personal data are kept securely for the duration necessary for the exercise of the purposes pursued in accordance with applicable law.
Although OpportunIT takes reasonable steps to protect your personal data, no transmission or storage technology is foolproof.
In accordance with applicable European regulations and in the event of a proven breach of Personal Data likely to create a high risk for the rights and freedoms of the persons concerned, OpportunIT undertakes to communicate this breach to the competent supervisory authority and, where required by the said regulations, to the persons concerned (individually or generally as the case may be).
Notwithstanding the above, it is your responsibility to exercise caution to prevent unauthorized access to your personal data and terminals (computer, smartphone, tablet,…).
In addition, the Company’s websites may provide links to third-party websites that may be of interest to you. OpportunIT has no control over the content of these third party sites or over the personal data protection practices of these third parties. Consequently, OpportunIT declines any responsibility concerning the processing of your Personal Data by these third parties, not subject to the present Charter. It is your responsibility to inform yourself about the personal data protection policies of these third parties.
 
6. How long are your personal data kept ? 
OpportunIT keeps your personal data for the time necessary to fulfil the purposes pursued, respecting the legal possibilities of archiving, obligations to keep certain data, and/or anonymisation.
In particular, we apply the following retention periods for these few broad categories of personal data :
Personal data of customers/prospects/business partners: as long as the user is active and, at the latest, 3 years after the last contact with the user;
Personal login data (datarooms) : 1 year after last login
Personal data of candidates (recruitment): time needed to process the application and, in case of a negative outcome, 3 years after the last contact (unless the candidate agrees to a longer period)
 
7.  What are your rights regarding your personal data and how to exercise them?
7.1.    Your rights
Respecting the limits provided by the regulations in force, you have the following rights with regards to your personal data:
Right to information on the processing of your personal data. OpportunIT strives to provide you with concise, transparent, understandable and easily accessible information on the conditions for processing your personal data, in clear and simple terms
- Right of access, rectification and deletion (or “right to forget”) of your personal data
The right of access allows you to obtain from OpportunIT confirmation that your personal data have or have not been processed as well as the conditions of such processing, and to receive an electronic copy (for any additional copy, OpportunIT is entitled to demand payment of any reasonable fees based on the administrative costs incurred).
You also have the right to obtain from OpportunIT, as soon as possible (and by default within 30 days), the rectification of your personal data.
Finally, subject to the exceptions provided by applicable law (e.g.: retention necessary to comply with a legal obligation), you have the right to ask OpportunIT to delete, as soon as possible, your Personal Data, when one of the following grounds applies :
Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
•    You wish to withdraw your consent on which the processing of your personal data was based and there is no other basis justifying such processing;
•    You consider and can establish that your personal data has been unlawfully processed;
•    Your personal data must be deleted in accordance with a legal obligation
 
- Right to limit the processing of your personal data
The applicable regulations provide that this right may be invoked in certain cases, in particular the following:
•    when you dispute the accuracy of your personal data;
•    when you consider and can establish that the processing of personal data is unlawful but you oppose the deletion of personal data and demand instead that the processing be limited;
•    when OpportunIT no longer needs your personal data but they are still necessary for you to establish, exercise or defend your legal rights;
•    When you object to the processing that would be based on the legitimate interest of the controller, during the verification whether the legitimate grounds pursued by the controller prevail over those of the person in question.
 
- Right to the portability of personal data
When the processing is based on your consent or a contract, this right to portability allows you to receive the personal data you have provided OpportunIT with in a structured, commonly used format, and to transmit this personal data to another data controller without OpportunIT hindering it.
When technically possible, you may request that this personal data be transmitted directly to another controller by OpportunIT.
 
- Right to withdraw consent to the processing of personal data
When OpportunIT processes your personal data on the basis of your consent, this latter may be withdrawn at any time using the means provided for this purpose (procedure indicated in point 7.2 of this Policy). On the other hand, and in accordance with applicable law, the withdrawal of your consent is only valid for the future and cannot therefore call into question the lawfulness of the processing carried out before this withdrawal
 
- Right to lodge a complaint with a supervisory authority
If, despite OpportunIT’ efforts to preserve the confidentiality of your personal data, you feel that your rights are not respected, you have the right to lodge a complaint with a supervisory authority. A list of control authorities is available on the European Commission’s website.
 
- Right to decide the fate of your personal data after your death
Finally, you have the right to organize the fate of your personal post-mortem data through the adoption of general or specific guidelines. OpportunIT is committed to respecting these guidelines. In the absence of directives, OpportunIT recognises the possibility for heirs to exercise certain rights, in particular the right of access, if it is necessary for the settlement of the deceased’s estate; the right to object to the closure of the deceased’s user accounts ; and the right to object to the processing of their data.

7.2.    How to exercise your rights
For any question relating to this Policy and/or to exercise your rights as described above, you may contact OpportunIT, electronically or by post, by sending a letter accompanied by a copy of any identity document to :
as@opportunIT.biz
OpportunIT
229 chemin de la vallée Crespin 
78760 JOUARS-PONTCHARTRAIN
OpportunIT commits to reply as soon as possible, and at the latest within one month of receipt of your request.
If necessary, this deadline may be extended by two months, taking into account the complexity and number of requests addressed to OpportunIT. In this case, you will be informed of the extension and the reasons for the postponement.
If your request is submitted in electronic form, the information will also be provided to you electronically whenever possible, unless you expressly request otherwise.
If OpportunIT does not comply with your request, it will inform you of the reasons for its inaction and you have the possibility of lodging a complaint with a supervisory authority and/or filing a judicial appeal.
 
8.    Applicable law and competent court
This Policy is subject to French law. In the event of a dispute and if an amicable agreement cannot be reached, the competent courts shall be those of the Paris Court of Appeal, notwithstanding the defendants’ plurality or the introduction of third parties