1. Data controller
The controller responsible for processing your personal data is:
Adservio : registered office
10 rue de Penthièvre
75008 Paris, France
hello@adservio.fr
For any question regarding the protection of your data, you may write to our Data Protection Officer (DPO): dpo@adservio.fr.
2. Data collected
We collect and process the following categories of personal data:
- Identification data: surname, first name, professional email, job title, company.
- Contact data: telephone, company website, country/region.
- Browsing data: IP address, browser type, pages viewed, visit duration (via cookies, see section 10).
- Application data: CV, cover letter, professional background (careers form).
- Message content: information voluntarily provided through the forms.
- Campaign data: the campaign parameters present in the address through which you reached the site, the referring site and the landing page, kept for the duration of your visit and attached to a request if you submit one. This tells us which publication led to a contact, and nothing more.
3. Purposes of processing
Your data is collected and processed for the following purposes:
- Responding to your contact and information requests.
- Sending you our monthly newsletter (only with your consent).
- Managing job applications (permanent contract, freelance, internship, work-study).
- Preparing commercial proposals and contracting services.
- Measuring site traffic and improving the user experience.
- Complying with our legal and regulatory obligations.
4. Legal basis for processing
In accordance with Article 6 of the GDPR (RGPD), the processing of your data is based on the following legal grounds:
- Consent: for newsletter subscriptions and the placement of non-essential cookies.
- Performance of a contract or pre-contractual measures: for the handling of your commercial requests and job applications.
- Legitimate interest: for anonymised traffic measurement and site security.
- Legal obligation: for the retention of certain data for accounting or legal purposes.
5. Recipients of your data
Your personal data is strictly intended for:
- Authorised internal Adservio teams (sales, HR, marketing, support).
- Our approved technical subcontractors (host Vercel, CRM tools, emailing platform), contractually committed to complying with the GDPR (RGPD).
- The competent authorities where required by law.
Adservio never sells, rents or exchanges your personal data with third parties for commercial purposes.
6. Retention period
- Contact requests
- 3 years from the last exchange.
- Newsletter subscribers
- Until unsubscription, then 3 years in archive.
- Successful applications
- Duration of the contractual relationship plus legal obligations.
- Unsuccessful applications
- 2 years with consent (CV database), otherwise immediate deletion.
- Client data (contracts)
- 10 years after the end of the relationship (legal obligation).
- Analytics cookies
- 13 months maximum, in accordance with CNIL recommendations.
7. Transfers outside the European Union
Some of our technical subcontractors (in particular our host Vercel) may process data from servers located outside the European Union. In such cases, Adservio ensures that appropriate safeguards are in place (the European Commission’s standard contractual clauses, certifications, or other mechanisms provided for by the GDPR (RGPD)).
8. Data security
Adservio implements all appropriate technical and organisational measures to ensure the security, confidentiality and integrity of your data: TLS encryption, strict access control, regular backups, staff awareness, security audits.
In the event of a data breach likely to create a risk to your rights and freedoms, Adservio undertakes to notify the CNIL within 72 hours and to inform you where necessary.
9. Your rights
In accordance with the GDPR (RGPD) and the French Data Protection Act, you have the following rights over your personal data:
- Right of access: to obtain confirmation that your data is being processed and to receive a copy of it.
- Right to rectification: to correct inaccurate or incomplete data.
- Right to erasure (the “right to be forgotten”): to request the deletion of your data under the conditions provided for by the GDPR (RGPD).
- Right to restriction of processing: to request the suspension of processing in certain situations.
- Right to data portability: to receive your data in a structured format and to transmit it to another controller.
- Right to object: to object to the processing of your data on grounds relating to your particular situation.
- Right to withdraw your consent at any time, for processing based on it.
- Right to give directives regarding the retention, erasure and communication of your data after your death.
To exercise your rights, you may contact our Data Protection Officer (DPO) by writing to dpo@adservio.fr, or by post at the address indicated in section 1. Proof of identity may be requested. We undertake to respond within one month.
11. Complaint to the CNIL
If, after contacting us, you consider that your data protection rights are not being respected, you may lodge a complaint with the French Data Protection Authority (CNIL):
CNIL
3 place de Fontenoy - TSA 80715
75334 Paris Cedex 07
www.cnil.fr
12. DPO contact
For any question regarding your personal data or this policy, please contact our Data Protection Officer:
DPO email: dpo@adservio.fr
Post: Adservio - DPO, 10 rue de Penthièvre, 75008 Paris, France
See also: Legal notice