Privacy Policy

Privacy Policy

Your privacy is important to IJO; This Privacy Policy is intended to explain what information we collect and how we use, disclose, transfer, and retain it.

 Identity of IJO

For any questions about this Privacy Policy, you can contact us using the following coordinates:
IJO
Tour Atlantique, 1 place de la pyramide
92800 PUTEAUX
France
Phone. : +33671658640
Mail : contact@ijo.tech

Simplified Joint Stock Company

Registration number in the Trade and Companies Register of Nanterre: 887 587 590

Nos clients peuvent envoyer leurs questions concernant les problèmes de protection des données personnelles, de confidentialité et de sécurité à notre Directrice Générale et directrice de publication Aurélie Gracia Victoria, IJO, aurelie.graciavictoria@ijo.tech

Hosting Company :

OVH
https://www.ovh.com/fr/
SAS with a capital of €10,069,020
RCS Lille Métropole 424 761 419 00045
APE Code 2620Z
VAT number: FR 22 424 761 419
Head office: 2 rue Kellermann - 59100 Roubaix - France

 What information do we collect?

You can visit our website anonymously.

If you sign up for IJO newsletters, you will receive an email from IJO informing you of any important changes to the Service, such as the implementation of new features.

The information collected on our website is recorded in a computer file by IJO to be able to respond to you and follow up on any exchanges we may have with you. This data will not be used for any other purpose or shared with third parties. It is only processed by authorized personnel within the company.

It is kept for 1 year and is intended only for customer service/partners/recruitment. In accordance with the "Data Protection Act" and GDPR, you have the right to access the data concerning you and have it rectified by contacting our DPO by email at ;aurelie.graciavictoria@ijo.tech

The information collected on IJO forms is recorded in a computer file by IJO in order to periodically send you our newsletter or any other marketing communication. This data will not be used for any other purpose or shared with third parties. It is only processed by the Marketing department and authorized personnel within the company. It is kept until your unsubscription request through a link at the bottom of each newsletter or on simple request to aurelie.graciavictoria@ijo.tech

In accordance with the "Data Protection Act" and GDPR, you have the right to access the data concerning you and have it rectified by contacting our DPO by email at  aurelie.graciavictoria@ijo.tech

What are these information used for?

Any information collected may be used for one or more of the following purposes:

3.1. To personalize your experience (the information will allow IJO to better meet your individual needs)

3.2. To improve our website (IJO continuously strives to improve the offerings of its website based on the information and feedback received from our customers)

3.3. To identify you as a contracting party

3.4. To establish a primary communication channel with you

3.5. To produce cookie statements and present them to End Users, and to record and display scan reports for you

3.6. To provide you with aggregated information about End User choices regarding accepted cookie types and generate a graphical representation of the Service Provider et/ou

To send periodic emails: The email address you provide may be used to send you information and, if you agree, occasional news regarding our company (updates, information about the Service or products, etc.)

If at any time you decide to unsubscribe from our email list, contact contact@ijo.tech

Legal basis

4.1. General Data Protection Regulation (GDPR)

The processing of your data will only be done after your consent or if this processing is necessary for the execution of a contract to which you are a party or in order to take measures at your request before engaging by contract (cf. GDPR, art. 6(1).(a)-(b)).

If this processing follows your consent, you may withdraw your consent at any time by contacting us using the contact information given in Article 1.

4.2. Compliance with Children's Online Privacy Protection Act

IJO complies with the requirements of the Children's Online Privacy Protection Act. We will not intentionally collect any information from individuals under the age of 13. Our website and services are intended for individuals who are at least 13 years old.

How do we protect our information?

IJO applies the following technical, physical and organizational measures to protect your personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorized use, disclosure or access and against any other unlawful form of processing.

5.1. Availability

Microsoft data centers follow standard industry standards such as ISO 27001 for physical security and availability (e.g. permanent security personnel, two-factor access control via card readers and biometrics, barriers, fences, surveillance cameras and other measures).

5.2. Integrity

To ensure their integrity, all data streams are encoded in accordance with best practices for privacy and data integrity. For data transmissions, the Service uses transport protocols in accordance with industry standards between devices and Microsoft data centers and within the data centers themselves.

Pour les envois de données, le Service utilise des protocoles de transport conformes aux normes sectorielles entre les appareils et les centres de données de Microsoft et au sein des centres de données eux-mêmes.

5.3. Confidentiality

All of our staff members are subject to complete confidentiality and are required to sign a confidentiality agreement in cases where full confidentiality is not covered by the main agreement between the parties. When personal data needs to be handled by authorized personnel, access to it is only possible via encrypted connection. When accessing data in a database

When personal data must be handled by authorized personnel, access to it is only possible through encoded connection. When accessing data in a database, the IP address of the person accessing the data must receive prior access authorization.

Any device used to access personal data is protected by connection through True Crypt, a Linux access and identity management service; When personal data is recorded on a device on a temporary basis, the storage unit on the device must also be strongly encoded.

The devices in our facilities that temporarily record personal data are at all times, except when they are not actively in use or being moved, locked in a safe. Personal data is never recorded on mobile disks such as USB keys or DVDs.

5.4. Transparency

IJO will keep you informed at all times of changes in our data security and privacy procedures, including our practices and policy. You can request information at any time about the location and mode of storage, protection and use of your data. IJO will also provide summaries of any independent audits of our Service.

5.5. Isolation

By default, all access to personal data is blocked by means of a zero privilege policy. Access to personal data is restricted to individually authorized personnel. Authorizations are granted by IJO's Security and Privacy Officer, who also manages a record of granted authorizations. Authorized personnel are granted minimal access on a case-by-case basis.

5.6. Intervention capacity

IJO guarantees your rights of access, rectification, deletion, blocking, and objection by providing integrated data processing functions in the Service Manager, and by offering the possibility of objection when IJO plans to implement changes to its practices and policy.

Overall responsibility for data security belongs to IJO's Data Protection Officer, who trains and informs staff about all data security measures detailed in IJO's security manual and in this Privacy Policy.

5.7. Monitoring

IJO uses security reports to track access plans and identify and reduce the risk of potential threats proactively. Administrative operations, including system access, are recorded to provide an audit trail in case of unauthorized or accidental changes.

System performance and availability are monitored by internal and external monitoring services.

5.8. Personal data breach notification

In case your data is at risk, IJO will notify you by email as well as the competent supervisory authorities within 72 hours. This email will contain information about the degree of intrusion, the data affected, the impact on the Service, as well as IJO's action plan and measures to secure the data and limit any potential negative effects for the affected parties.

By "personal data breach" we mean a security breach causing the destruction, loss, alteration or accidental, unlawful or unauthorized disclosure of personal data transmitted, stored or otherwise processed in connection with the provision of this Service, or any unauthorized access to such data.

How do we use cookies  ?

See IJO's Cookie Statement for more information about the cookies thank you for looking at this page https://blog.ijo.tech

Do we disclose information to outside parties ?

IJO does not sell, trade or otherwise transfer any identifiable personal information to outside parties.

This does not include third-party or subcontractors who assist us in operating our website, our business and our services. These third-parties may have access to identifiable personal information on a case-by-case basis and are contractually obligated to maintain the confidentiality of your information.

We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect the rights, property or safety of others. Furthermore, non-personally identifiable visitor information may be provided to other parties for marketing, advertising or other uses.

7.1. Legally Required Disclosure

IJO will not disclose customer data to authorities unless we receive an order from you or the law. In case of a legal request from authorities to obtain customer data from IJO, IJO will endeavor to limit this disclosure to the minimum required. IJO will only release the specific data required by this legal request.

In case it is forced to disclose your data, IJO will promptly notify you and provide you with a copy of the injunction, unless prohibited by law.

Where do we keep information ?

No stored data will be transferred, stored and/or retrieved by IJO outside of the European Union.

8.1. Location of Personal Data

All data will be stored in databases and file repositories hosted in an OVH data center by IJO's cloud provider. All data is automatically replicated in real-time in secondary hot-failover databases and file repositories in the data center.

Databases are continuously backed-up in order to restore them as they were at any point in time within a 35 day period. Backup files are stored in a file storage in the same geographical location as the database.

8.2. Software Installation in the customer's cloud system

No software installation is required to use the website.

Request for rectification, restriction or deletion of personal data

9.1. Rectification

You can request at any time without delay a rectification of inaccurate personal data concerning you (see Article 5.6).

9.2. Restriction of personal data processing

You can request at any time for IJO to restrict the processing of personal data when one of the following conditions applies:

a. if you contest the accuracy of the personal data, for a period that allows IJO to verify the accuracy of the personal data.

b. if the processing of your personal data is unlawful, you object to their deletion and instead prefer that their use be restricted or

c. if IJO no longer needs your personal data for processing purposes but you need it for the establishment, exercise or defense of legal claims.

9.3. Deletion

You can request the deletion of personal data concerning you, and Cybot will delete these personal data without delay when one of the following conditions applies:

a. if the personal data is no longer necessary for the purposes for which it was collected or processed

b. if you withdraw your consent to this processing and there is no other legal reason for this processing

c. if you object to their processing in case this processing is done for direct marketing purposes

d. if these personal data have been unlawfully processed or

e. if these personal data have to be deleted in order to comply with a legal requirement of European or national law.

Data Retention

10.1. Data Retention Policy

Data is immediately deleted when you cancel your email transfer.

10.2. Data Retention for Compliance with Legal Requirements

You cannot request IJO to change its default retention periods, except for the reasons detailed in Article 9.3 regarding data deletion; however, you can suggest changes for compliance with specific sectoral laws and regulations.

Cooperation

IJO will cooperate with you to ensure compliance with applicable data protection clauses, for example, to enable you to effectively exercise the rights of the data subjects (right of access, rectification, deletion, blocking or opposition) and to manage incidents, including technical analysis in case of security breaches.

Your Consent

By using our site, you consent to this Privacy Policy.

Amendments to our Privacy Policy

If we decide to amend our Privacy Policy, we will post those changes on this page and/or update the Privacy Policy version date below. This Privacy Policy was last amended on August 31, 2021.

Complaints

You can file a complaint at any time with a supervisory authority regarding the collection and processing of your personal data by IJO. In France, you can file a complaint with the Commission nationale de l'informatique et des libertés.