Privacy Policy

Summary

Last updated on 2023-03-30

This Privacy Policy doesn’t apply to personal data processed under the contract between AB Tasty and its customers. To consult the “Customer Personal Data Processing” page, click here.

The protection of your personal data is very important to AB Tasty.
By clicking on the Policy that applies to you, you will be informed of how AB Tasty handles the personal data that you agree to provide.

Visiting our website? Click here.

Are you interested in our services or are you already a client? Click here.

Interested in working at AB Tasty? Click here.

AB Tasty Websites Visitors

This Privacy Policy applies to visitors to our staging-abtasty.kinsta.cloud.

It is designed to help you understand how AB Tasty collects and processes your personal data, and what your rights are.

1. Who is responsible for processing your personal data?

The company and AB Tasty, a simplified joint stock company (société par actions simplifiée) registered under number 518 685 540 RCS Paris, whose registered office is located at 17-19 rue Michel Le Comte, 75003 Paris, France (“AB Tasty” or “we/us“) is responsible for processing your personal data.

2. What personal data do we collect and how?

We collect the following personal data:

Data you provide us: when you contact us (e.g. by phone, email or via our online contact form), request an online demo, or wish to access resources or download content available on our websites (ebooks, webinars, etc.), we collect the personal information you provide, such as your first and last name, business contact details, and the purpose of your request.

The data we request from you that is necessary to respond to your requests is identified by an asterisk or equivalent on the collection forms or is specified as such verbally at the time of collection. If you do not fill in the mandatory fields or do not provide the information marked as mandatory, we will not be able to respond to your requests.

You also undertake to provide information that is accurate and does not prejudice the interests or rights of third parties.

Browsing Information: AB Tasty uses cookies to collect information about how users browse its websites: information from the user’s browser (browser type and language), the Internet Protocol (IP) address of the user’s terminal, and information derived from that address such as the geographical location and identification numbers of the terminal, the user’s Internet service provider, the pages and files viewed by the user, the user’s operating system, and the date and time of the user’s browsing of the site. For more information, please read our Cookie Policy.

Our websites are not directed at minors. We do not solicit or deliberately collect personal data from minors. Visitors under the age of 18 may not do business with AB Tasty. We will delete any information about a minor that we discover we have collected. Please contact us via the contact information listed in Section 8 below if you believe you have provided us with information about a minor.

3. Why do we collect your personal data?

We only process your personal data in cases where we have a legal basis to do so:

Processing for which you have given your consent:

  • Communicating with you and notifying you about AB Tasty products, services and events.

Processing necessary for the purposes of our legitimate interest:

  • Responding to your requests.
  • Managing, protecting and optimising our websites.

Processing necessary to comply with our legal obligations: some of your data is also processed to comply with our legal obligations (e.g. our obligations to manage requests to exercise rights under the personal data protection rules) and to defend our interests in the event of a dispute or legal action.

4. With whom do we share your personal data?

We share your personal data only with:

  • our duly authorised staff, who need to access your data in the course of their duties in relation to the purposes described above;
  • our service providers who act as processors;
  • our external advisors (lawyers, auditors, etc.), whenever this is necessary for the purposes of our legitimate interest;
  • public or judicial authorities, whenever we are legally obliged to do so or to protect our rights or the rights of third parties.

We may also share your personal data with third parties in connection with a potential or actual sale or restructuring of our company or certain of our assets, in which case your data may become part of the transferred assets.

5. Where is your personal data processed?

Your processed personal data is hosted in the European Union.

Our processors may transfer your personal data outside the European Union. In the absence of an adequacy decision by the European Commission under Article 45 of the GDPR, any such transfer will be governed by appropriate transfer mechanisms under Article 46 et seq. of the GDPR (such as standard contractual clauses adopted by the European Commission). You may obtain a copy of these standard contractual clauses (excluding confidential provisions) by contacting us as set out in Section 8 “How to contact us”.

For clarification, the personal data of visitors to the clients’ websites are not transferred outside the European Union. For more information, click here.

6. How long will your data be kept?

We keep your personal data for the period strictly necessary for the purposes set out herein and in accordance with the applicable regulations.

Your data is stored as follows:

  • Data associated with a request: the time needed to respond to your request.
  • Email marketing options: If you have created a customer account, this data will be kept until you unsubscribe through your account or by using the unsubscribe link provided in the newsletter and promotional emails. If no customer account is associated with your email address, your data will be deleted 3 years after your last interaction (click) with an email we sent you.

Please note that your data may be kept for a longer period of time, for example in order to establish proof of a right or to comply with a legal obligation. In any event, your data will not be kept longer than is strictly necessary for the purposes for which it is processed. We will ensure that your data is deleted or anonymised whenever it is no longer required.

Customers and Prospects

This Privacy Policy applies to our customers and prospects, and to anyone who contacts us on their behalf. It applies to you as a customer when you have entered into a contract with AB Tasty for the provision of its customer experience services; or as a prospect when you (or your employer) may be interested in these services.

It is designed to help you understand how AB Tasty collects and processes your personal data, and what your rights are.

1. Who is responsible for processing your personal data?

The company and AB Tasty, a simplified joint stock company (société par actions simplifiée) registered under number 518 685 540 RCS Paris, whose registered office is located at 17-19 rue Michel Le Comte, 75003 Paris, France (“AB Tasty” or “we/us”) is responsible for processing your personal data.

2. What personal data do we collect and how?

We collect the following personal data:

Data you provide us: when you create an online account and subscribe to our services, contact us (e.g. by phone, email or via our online contact form), request an online demo, or wish to access resources or download content available on our websites (ebooks, webinars, etc.), we collect the personal information you provide us, such as your first name and surname, business contact details, and the purpose of your request.

The data we request from you that is essential to provide you with the services you have requested or to respond to your requests is identified by an asterisk or equivalent on the collection forms or specified as such verbally at the time of collection. If you do not fill in the mandatory fields or do not provide the information marked as mandatory, we will not be able to provide you with the requested services or respond to your requests.

You also undertake to provide information that is accurate and does not prejudice the interests or rights of third parties.

Data related to your contract with AB Tasty and to the services we provide: this is all the information needed to manage the contractual relationship with AB Tasty (contract, orders, transactions, invoices, etc.).

Data provided by our partners: we may receive your personal data when you register with one of our partners for an event that we co-organise or sponsor.

Data collected through the use of Google Sign-In: Customers who wish to do so and whose contract allows it can access the services provided by AB Tasty through Google Sign-In authentication. In this case, the following personal data is required for the use of the Google Sign-In feature: e-mail address and Google ID token.

By using Google Sign-In authentication, you acknowledge that you have been informed and have agreed that the above-mentioned personal data will be provided by Google to AB Tasty; it being understood that AB Tasty undertakes to use this data (i) solely for the purpose of implementing the authentication process and (ii) for the term of the contract. It is specified that the Google ID token is not stored by AB Tasty and that the email address is stored by AB Tasty through AWS in Dublin.

Our services are not designed for or intended for minors. We do not knowingly solicit or collect personal data from minors. Visitors under the age of 18 may not do business with AB Tasty. We will delete any information about a minor that we discover we have collected. Please contact us via the contact information listed in Section 8 below if you believe you have provided us with information about a minor.

3. Why do we collect your personal data?

We only process your personal data in cases where we have a legal basis to do so:

Processing necessary for the performance of the contract entered into with you: we use your data to manage the contracts and services subscribed to and to meet our contractual obligations, including, in particular:

  • Authentication and access to your online customer account
  • Managing your account online
  • Providing the services subscribed to
  • Activating and deactivating functions
  • Billing and payments
  • Managing complaints

Processing necessary for the purposes of our legitimate interest:

  • Customer relationship management
  • Analysis of platform usage by users, via an external service provider (Mixpanel)
  • Sending marketing messages to our existing and prospective (business) customers, in order to raise awareness and develop our business
  • Sending gifts
  • Organising events
  • Carrying out business statistics, after rendering your data anonymous or in any case after implementing procedures designed to prevent you from being re-identified
  • Defending our interests in the event of a dispute or legal action

Processing necessary to comply with our legal obligations: some of your data is also processed to comply with our legal obligations (for example, our accounting and tax obligations, or the management of requests to exercise rights under personal data protection rules) and to defend our interests in the event of a dispute or legal action.

4. With whom do we share your personal data?

We share your personal data only with:

  • our duly authorised staff, who need to access your data in the course of their duties in relation to the purposes described above;
  • our service providers who act as processors;
  • our business partners (including in connection with the organisation of events for which you are registered), with your consent where required;
  • our external advisors (lawyers, auditors, etc.), whenever this is necessary for the purposes of our legitimate interest;
  • public or judicial authorities, where we are legally obliged to do so or to protect our rights or the rights of third parties.

We may also share your personal data with third parties in connection with a potential or actual sale or restructuring of our company or certain of our assets, in which case your data may become part of the transferred assets.

5. Where is your personal data processed?

Your processed personal data is hosted in the European Union.

Our processors may transfer your personal data outside the European Union. In the absence of an adequacy decision by the European Commission under Article 45 of the GDPR, any such transfer will be governed by appropriate transfer mechanisms under Article 46 et seq. of the GDPR (such as standard contractual clauses adopted by the European Commission). You may obtain a copy of these standard contractual clauses (excluding confidential provisions) by contacting us as set out in Section 8 “How to contact us”.

For clarification, the personal data of visitors to the clients’ websites are not transferred outside the European Union. For more information, click here.

6. How long will your data be kept?

We keep your personal data for as long as is strictly necessary for the purposes set out herein and in accordance with the applicable regulations.

Your data is stored as follows:

Data necessary for contract and customer relationship management (including access to your online account): for the term of the contractual relationship. Thereafter, your data will be archived for a maximum of 5 years.

Bookkeeping: your data is archived for 10 years from the end of the current accounting year (legal period).

Your event registration: up to and for the duration of the event you have registered for, and for 3 years thereafter for prospecting purposes.

Options for electronic prospecting:

  • as a customer who has created a customer account, this data is kept for up to 3 years after the end of the contract, unless you interact (click) with an email we have sent you; or until you unsubscribe from the newsletter and business emails;
  • as a prospect, your data will be deleted 3 years after your last interaction (click) with an email we sent you.

Please note that your data may be kept for a longer period of time, for example in order to establish proof of a right or to comply with a legal obligation. In any event, your data will not be kept longer than is strictly necessary for the purposes for which it is processed. We will ensure that your data is deleted or anonymised whenever it is no longer required.

Job Applicants

This Privacy Policy applies to applicants for employment with AB Tasty. It applies to you when you respond to a job offer or apply spontaneously for a job at AB Tasty.

It is designed to help you understand how AB Tasty collects and processes your personal data, and what your rights are.

1. Who is responsible for processing your personal data?

The company and AB Tasty, a simplified joint stock company (société par actions simplifiée) registered under number 518 685 540 RCS Paris, whose registered office is located at 17-19 rue Michel Le Comte, 75003 Paris, France (“AB Tasty” or “we“) is responsible for processing your personal data.

2. What personal data do we collect and how?

We may collect information about you as part of our recruitment process. This information is contained in your CV, cover letter, interview reports, opinions, any tests and letters of recommendation.

We may collect this information either directly from you, or through the recruitment agencies we work with, or from public professional social networks (e.g. LinkedIn).

We may also collect references from third parties in your professional environment (former employers, colleagues as part of an internal process, professional relations, people who can be contacted who have been given as a reference by the applicant, etc.). We shall notify you in advance in such cases.

In any event, we shall only ask you for the information we really need for the purposes detailed below. You are free to choose whether or not to provide this information, but if you refuse, we shall not be able to consider your application further.

You also undertake to provide information that is accurate and does not prejudice the interests or rights of third parties.

3. Why do we collect your personal data?

We only process your data as part of our recruitment process for the following purposes:

Processing necessary for our legitimate interest and the possible conclusion of an employment contract with you:

  • Receiving, saving and filing your CV and cover letter
  • Discussing with the applicant’s future supervisors
  • Contacting you
  • Assessing your suitability for the proposed job or your professional skills (qualifications, experience, etc.)
  • Replying to your application

Processing necessary for the purposes of our legitimate interests:

  • Managing our online application platform
  • Seeking out and identifying relevant profiles to attract applications
  • Improving our recruitment process
  • Defending our rights in the event of litigation

Processing for which you have given your consent:

  • Carrying out background checks (depending on the type of position)
  • Obtaining references from third parties
  • Enriching our CV database
  • Contacting you at a later date if new job opportunities arise

Processing necessary to comply with our legal obligations: some of your data is also processed to comply with our legal obligations (e.g. our obligations to manage requests to exercise rights under the personal data protection rules) and to defend our interests in the event of a dispute or legal action.

4. With whom do we share your personal data?

We share your personal data only with:

  • our duly authorised staff, who need to access your data in the course of their duties in relation to the purposes described above;
  • our various offices in Europe and around the world when you apply for a position abroad;
  • our service providers who act as processors;
  • our external advisors (lawyers, auditors, etc.), whenever this is necessary for the purposes of our legitimate interest;
  • public or judicial authorities, whenever we are legally obliged to do so or to protect our rights or the rights of third parties.

We may also share your personal data with third parties in connection with a potential or actual sale or restructuring of our company or certain of our assets, in which case your data may become part of the transferred assets.

5. Where is your personal data processed?

Your personal data is hosted in the European Union.

We may transfer your personal data outside the EU/EEA if you apply for a job with one of our overseas offices. Some of our offices are located in countries that do not provide an adequate level of protection for personal data (such as Australia, the United States or Singapore). In the absence of an adequacy decision by the European Commission under Article 45 of the GDPR, such a transfer shall be necessary for the possible conclusion of an employment contract with you.

Our processors may also transfer your personal data outside the European Union. In the absence of an adequacy decision by the European Commission under Article 45 of the GDPR, any such transfer shall be governed by appropriate transfer mechanisms under Article 46 et seq. of the GDPR (such as standard contractual clauses adopted by the European Commission). You may obtain a copy of these standard contractual clauses (excluding confidential provisions) by contacting us as set out in section 8 “How to contact us”.

For clarification, the personal data of visitors to the clients’ websites are not transferred outside the European Union. For more information, click here.

6. How long shall your data be kept?

We keep your personal data for the period strictly necessary for the purposes set out herein and in accordance with the applicable regulations.

Your data is stored in the following manner:

If your application is accepted and you are hired:

  • Active basis: the duration of the recruitment procedure up until the decision to hire you. Once the decision has been taken, the data shall be reused and stored for personnel management purposes
  • Intermediate basis: only information strictly necessary for evidentiary purposes is kept

If your application is not accepted:

  • Active base: with your consent, for a maximum of 2 years from the last contact with you, for the sole purpose of contacting you again in the event of new opportunities
  • Intermediate basis: for a maximum of 5 years from the decision not to hire, for evidentiary purposes

Please note that your data may be kept for a longer period of time, for example in order to establish proof of a right or to comply with a legal obligation. In any event, your data shall not be kept longer than is strictly necessary for the purposes for which it is processed. We shall ensure that your data is deleted or anonymised whenever it is no longer required.

What are your rights?

You have certain rights in respect of your data.

  • You may withdraw at any time your consent to any processing of your data that is based on your consent.
  • You can ask us to confirm whether we are processing your data and, if so, to inform you of the characteristics of the processing, give you access to it and obtain a copy.
  • You can ask us to correct or complete your data if it is incorrect or incomplete.
  • You can ask us to delete your data or to limit the processing of your data.
  • You can ask us to provide your data in a structured, commonly used and machine-readable format, or you can request that it be transmitted directly to another controller.
  • You have the right to define (general or specific) instructions concerning the fate of your data after your death.
  • You may object to any processing of your data that is based on our “legitimate interests”. If you exercise this right, we must cease processing unless we demonstrate compelling legitimate grounds which override your fundamental rights and freedoms, or for the establishment, exercise or defence of legal claims.
  • You may object at any time to the processing of your data for the purpose of prospecting.

You can exercise your rights by contacting us at the address given in the section “How to contact us”.

You are also entitled to lodge a complaint with the competent supervisory authority regarding the processing of your data. In France, the supervisory authority for the protection of personal data is the CNIL (www.cnil.fr).

How to contact us

For more information about your rights, to exercise your rights or if you have any questions or complaints about the protection of your personal data, you can write to us at the following address: legal@abtasty.com.

The contact details of AB Tasty’s Data Protection Officer are as follows: dpo@abtasty.com.

Update of the Privacy Policy

We may change this Privacy Policy from time to time, in particular to comply with any legislative, regulatory, case law, editorial or technical developments. We will notify you of any material changes.