In accordance with Article 13 of Regulation (EU) 2016/679 containing provisions on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as' the RGPD "), we hereby provide you with information regarding the processing of your personal data provided by you and / or collected via the websites www.mbefrance.fr and www.mbe-franchising.fr (the" Websites ") .
The personal data collected via the websites will be processed by SARL MBE France, whose registered office is located at 37, rue du General Leclerc, 92130 Issy Les Moulineaux, exclusive licensee for France of the brand "Mail Boxes Etc", in quality controller (hereinafter "controller" or "MBE").
The following Personal Data provided by you (hereinafter the “Personal Data”) may be processed via the Websites:
- the IP address;
- navigation data on the Websites;
- information on the browser and on the device;
- information collected through cookies, pixel tags, provided by you and without disclosing your specific identity;
- demographic information and other information provided by you and without disclosing your specific identity;
- information that has been aggregated in such a way as to no longer reveal your specific identity.
Moreover, the following Personal Data provided by you may be processed if you decide to interact with the Websites:
Name, surname, email address, telephone number and company, if you send messages to a specific MBE center through our forms. Only the email address if you wish to receive the MBE newsletter.
Name and email if you use the chat box.
If you create an account and use our services, name, surname, email, address, company, telephone number, VAT number, your login account details and all the information related to the service you intend to purchase (e.g. size of the package, price, information on the relevant addressee).
Name, surname, email, telephone number, city, CV, if you ask to be contacted in order to obtain information on how to commence your business with MBE.
Your physical position, if you ask the website for the MBE centers closer to your position.
Name, surname, email, telephone number, address and CV if you ask to register to our seminars, workshops, webinars and events.
The Controller will process your Personal Data for the following purposes:
The personal data collected may also be processed in the context of any corporate event (sale of the company or business units), due diligence or litigation and related preliminary activities.
The processing of your Personal Data for the purposes referred to in Section 3, a. is carried out in order to comply with your request and on the basis of a legitimate interest of the Controller, which business is inevitably linked to the quality of the services offered by its Websites, to the users’ interaction experience and to the satisfaction of their expectations. Any refusal to provide the Personal Data for the purposes set out above will make it impossible to send your contact request to the Controller and/or the selected MBE center.
The processing of Personal Data for the purposes referred to in Section 3, b., is necessary in order to perform the pre-contractual and contractual measures adopted upon your request when you ask for the services offered by the Websites. Any refusal to provide the Personal Data for the purposes set out above will make it impossible to use and enjoy the services above.
The processing of your Personal Data for the purposes referred to in Section 3, c. and d., is optional and is based on your freely given consent. Any refusal to provide the Personal Data for the purposes set out above will have the sole consequence of making it impossible for the Controller, the MBE Group and/or the selected MBE center to send you advertising and promotional messages, to conduct studies and surveys of the market, and elaborating related statistics.
In case of processing in the event of any potential corporate events (sale of the company or business units), due diligence or in the case of defence of a legal claim and the related preliminary activities, such processing will be carried out on the basis of legitimate interests of the Controller in the continuation of its commercial activities and for the protection of its rights.
The processing will be carried out with the assistance of both automated instruments and on paper suitable for guaranteeing the security and confidentiality of Personal Data, this to collect, consult, store, manage, extract and transmit the Personal Data.
The Personal Data will be disclosed to the persons authorized for the processing within the Controller's staff.
The Personal Data may be disclosed by the Controller solely and exclusively for the purposes indicated and where necessary, to the following categories of subjects:
(i) agents or collaborators of the Controller who are located within the territory of the European Union;
(ii) MBE centers that are located in Italy and which may process your Personal Data to carry out the services you requested and any ancillary activities (e.g. invoicing) and for marketing purposes where the relevant consent has been obtained;
(iii) service providers for marketing activities;
(iv) MBE Group companies as specified above, including – as of the date of this privacy notice – SARL MBE France.
(v) consultants for accountancy, administrative, legal, tax and financial matters;
(vi) where required, the competent judicial authorities;
(vii) where required, public administrations and supervisory and control authorities.
Personal Data will not be publicly disclosed.
Entities belonging to the categories listed above, may act, as the case may be, as data processors (and in this case they will receive appropriate instructions from the Controller) or as autonomous data controllers. In the latter case, the Personal Data will be communicated only with the express consent of the data subjects, except where the communication is mandatory or necessary pursuant to the applicable law or for the pursue of purposes for which the consent from the data subject is not required.
The Controller also have the right to transfer your Personal Data to third countries. Transfers of Data outside the European Economic Area are subject to a special regime pursuant to the GDPR, and are only made in respect of countries that ensure an adequate level of personal data protection, on the basis of an adequacy decision of the Commission or where adequate safeguards have been adopted (including the standard contractual conditions provided by the European Commission), provided that the data subjects have enforceable rights and effective judicial remedies.
Personal Data will be stored, in compliance with the applicable law, for a term not exceeding what is necessary to pursue the purposes for which they are processed.
The criteria for determining the storage period of the Personal Data takes into account the allowed processing period and the applicable laws on the statute of limitation of rights and legitimate interests of the data subject where they are the applicable legal basis for processing.
As per the purposes of Section 3, c. and d., the Controller will process the Personal Data for a period no longer than twenty-four months from the time when the relevant consent has been collected. Subsequently the Personal Data will be deleted, aggregated or anonymized.
At any time, you will be entitled to:
You also have the right to withdraw your consent to the processing of your Personal Data (where given) at any time, without prejudice to the lawfulness of the processing based on your consent before its withdrawal. You will have the possibility to opt-out from marketing via email by clicking on the relevant “unsubscribe” link.
According with the GDPR, the Controller may not charge for complying with any of the requests mentioned in this paragraph, unless they are clearly unfounded or excessive and repetitive. Should you request more than one copy of your Personal Data or in cases of excessive or unfounded requests, the Controller may: (i) charge a reasonable expense, considering the administrative costs incurred to fulfil the request; or (ii) refuse to fulfil the request. In these cases the Controller will inform you of the costs before fulfilling the request.
The Controller may ask for further information before fulfilling the requests if it needs to verify the identity of the person who has made them.
Without prejudice to any administrative or legal remedy, you also have the right to lodge a complaint to the relevant supervisory Authority (for France, “CNIL”), if you believe that processing of your data is in breach of the GDPR. More information is available on the website https://www.cnil.fr/en/personal-data-definition
In any case, the Controller is interested in knowing the reasons for the complaint and requests that you use the above contact methods before turning to the authorities, in order to prevent and resolve any disputes, amicably and promptly, with the greatest courtesy, professionalism and discretion.
For more information about the provisions contained in Articles from 15 to 22 of the GDPR, click on the following link: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32016R0679
With respect to the exercise of your rights with respect to the purposes described in section 3 above and / or to obtain any type of information you may need regarding the controller in accordance with this Privacy Notice, you may send a written communication to SARL MBE FRANCE (Tax Code and VAT number FR37539736397), whose registered office is at 37 bis Issy les Moulineaux, or an e-mail to firstname.lastname@example.org.
This Privacy Notice will be valid as of the date indicated below. It is advisable to regularly monitor this privacy statement by visiting the websites to keep abreast of any future changes.
Last updated: June 18, 2019