Personal data protection policy
Last updated date: 15/11/2024
As new communication tools are developed, particular attention needs to be paid to privacy. This Privacy Policy describes how NOMADIA GROUP processes your personal data. Data security is an important aspect of our policy and we ensure that appropriate technical and organisational measures are applied in accordance with the relevant data.
Identity of the controller
NOMADIA GROUP (hereinafter “NOMADIA”), located at 66 avenue du Maine, 75014 Paris, is responsible for the processing of personal data collected in connection with your use of this site and our solutions:
- Nomadia Field Service,
- Nomadia Delivery,
- Nomadia Protect,
- Nomadia Sales,
- TourSolver,
- Territory Manager,
- OpenPharma.
Why does NOMADIA collect your data?
We collect your personal data for specific purposes and on different legal bases.
In addition, and in accordance with Regulation 2016/679 of 27 April 2016 on the processing of personal data (“GDPR”), we have defined a legal basis for each of the treatments.
Finally, we keep your personal data for a period of time in accordance with the applicable legal and regulatory provisions; and failing that, for a period strictly necessary and proportionate to the accomplishment of the purposes for which your data were collected. The criteria we apply in defining these durations are shown in the table below.
When we no longer need to use your personal data, we delete it from our information systems or anonymize it in order to prevent its identification irreversibly.
Your personal data may be collected on the following legal bases:
- based on your consent;
- for the execution of a contract or pre-contractual measures taken at your request;
- in accordance with a legal obligation to which we are subject;
- for the legitimate interests of the company and the controller.
Processing purpose | Legal basis | Shelf life |
Manage contact or information requests on one of our websites | General interest | 2 years |
Manage incoming email at welcome [at] nomadia-group.com | General interest | 2 years |
Manage requests to upload a marketing document | General interest | 2 years |
Manage registration requests for one of our events or webinars | General interest | 2 years |
Manage subscription requests for our blog notifications | General interest | 2 years |
Manage test requests for one of our products | General interest | 6 months |
Manage demo requests for one of our products | General interest | 2 years |
Customer satisfaction survey management (paper and electronic form) | General interest | 2 years |
Managing NOMADIA partnership requests | General interest | 2 years |
Application management for recruitment | General interest | 2 years |
Newsletter management | General interest | The starting point for the duration of data use is the moment when the data was collected or the last contact from the prospect (request for documentation or click on a hyperlink). In any case, your data will not be used to send commercial requests beyond three years from the collection or last contact of the prospect. |
Managing registration as a user or administrator on our website www.nomadia-group.com so that you can access the application solutions for which your organization or company has subscribed user rights | Contract execution | Contract Term |
Manage registration as a learner on our e-learning platform or in a face-to-face training session | Contract execution | Contract Term |
Managing your personal customer account of one of our cloud services | Contract execution | Contract Term |
Accounting and financial management | Legal requirement | 10 years |
Monitoring information and communication systems, protecting physical facilities and infrastructure | Legitimate interest | Contract Term |
Data collected
Information you provide to us
Depending on the form used, NOMADIA collects the following data:
- first and last name;
- email address;
- telephone;
- organization/company, function, activity;
- Form responses and comments.
Mandatory data are indicated in the forms by an asterisk.
Automatically collected data
NOMADIA collects certain information through log files (log file) and cookies (cookie). This is mainly the following information:
- IP address;
- operating system, browser;
- Pages visited and queries;
- Login time and day;
- keywords and search query.
Using this information allows us to improve service and personalized welcome and produce statistics.
For more information on cookies placed on the site, please consult our Cookie Policy.
Sharing personal data
The personal data we process is processed by other service providers for the following reasons:
- the performance of a contract or order;
- a partnership.
Where processing is based on consent, you may refuse/withdraw your consent to the disclosure of your data to third parties at the time of collection or at any time thereafter.
To fulfil the purposes described as the purposes, data may be communicated to providers acting as subcontractors or entities acting as full controllers. The list of recipients of your data is available upon request to the DPO of NOMADIA in the context of the exercise of the right of access (according to article 15 of the GDPR).
The subcontractors are companies that are contractually linked to NOMADIA, the data controller. For example:
- Service providers used by Data Controllers for the management of information systems and telecommunications networks, and maintenance activities of computer systems (including electronic mail);
- Professionals, agencies or support and consulting companies;
- auditors and persons verifying and certifying the activities carried out by the data controllers.
The entities acting as data controllers are the recipients of your data under the following conditions:
- the various entities of the NOMADIA Group according to the purposes of the processing concerned;
- the authorities responsible for complying with legal obligations, provisions of public bodies, at their request.
In order to comply with legal and regulatory obligations, we may also disclose this personal data to public bodies, administrative or judicial authorities and supervisory bodies, also called “authorized third parties”.
Human rights
The GDPR provides you with rights that you can exercise at any time. These include:
- Right to information means the right to clear, accurate and complete information on NOMADIA’s use of personal data.
- Right of access means the right to obtain a copy of your personal data that NOMADIA holds on the applicant.
- Right to rectification : the right to have your personal data rectified if it is inaccurate or out of date and/or to complete it if it is incomplete.
- Right to erasure/right to be forgotten : the right, under certain conditions, to have your data deleted or deleted, unless NOMADIA has a legitimate interest in keeping them.
- Right to object: the right to object to the processing of personal data by NOMADIA for reasons related to your particular situation (subject to conditions).
When it comes to opposition to commercial prospecting: we propose you to exercise this right, when filling out a form, tick the box provided for this purpose.
You can also object to the processing of your data after the collection of your data: you have the possibility to unsubscribe from our email sending by clicking on the unsubscribe link or the management link of the subscription preferences at the bottom of our messages.
- Right to withdraw your consent : the right at any time to withdraw your consent when processing is based on consent.
- Right to restriction of processing: the right, under certain conditions, to request that the processing of your personal data be temporarily suspended.
- Right to data portability : the right to request that your personal data be transmitted in a reusable format allowing it to be used in another database.
- Right not to be subject to an automated decision : the right to refuse fully authorized decision-making and/or to exercise the additional guarantees offered in this regard.
- Right to define post-mortem directives: the right to define directives regarding the fate of personal data after your death.
To exercise your rights, you can:
- contact the Data Protection Officer (DPO) at the following email address: dpo@nomadia-group.com or at the following postal address: NOMADIA, attention the DPO, 66 Avenue du Maine, 74014 Paris.
- complete the form on our website: go to the form.
When you send us a request for the exercise of a right, we ask you to specify as far as possible the scope of the request, the type of right exercised, the processing of personal data concerned and any other relevant element, to facilitate the examination of your application. In addition, in cases of reasonable doubt, you may be asked to prove your identity.
Depending on the case, NOMADIA will not always be legally obliged to respond positively to requests related to these rights.
Safety
The personal information we collect is kept in a secure environment. The people working for us are obliged to respect the confidentiality of your information.
To ensure the security of your personal information, we use the following measures:
- Access Management – authorized person;
- Network monitoring software;
- computer backup;
- Login/Password;
- Firewalls.
We are committed to maintaining a high degree of confidentiality by integrating the latest technological innovations to ensure the confidentiality of your transactions.
However, as no mechanism offers maximum security, there is always a risk when using the Internet to transmit personal information.
Legislation
We undertake to comply with the legislative provisions set out in the EU General Data Protection Regulation (GDPR) n° 2016/679 of 26 April 2016, and the amended French Data Protection Act of 6 January 1978.
In the event of a problem related to the management of your personal data, you can address a complaint to the CNIL.
We would like to inform you of the existence of the “Bloctel” telephone solicitation opposition list, on which you can register here: http://www.bloctel.gouv.fr/a>.