Poool and the GDPR
Since 2018, May 25th, the GDPR (General Data Protection Regulation), which is a European regulation directly implemented in France, has came into effect. It tends to reinforce the importance of data protection with entities that process them (data controllers and data processors) and to make them aware of their responsibilities. It empowers citizens’ rights by giving them more control on their personal data.
We may collect personal data and activity data, that sometimes can be linked. This data can be collected and processed on our behalf or on behalf of our clients (publishers), which we inform related people about. As actors of these processings,
Thus, Poool is committing to respect its guiding principles:
Lawfulness, fairness and transparency of processing
We process data in a licit, loyal and transparent way
Purpose limitation
We collet data for determined, explicit and legitimate purposes, in relation to the services we offer
Data minimization
We collect appropriate and relevant data, that is limited to what is required to achieve our services
Data accuracy
We update obsolete data as much as we can when related people inform us about it
Storage limitation
We store data for a duration that does not exceed the one required in relation to the process purpose
Integrity and confidentiality
We guarantee an appropriate security, as far as our human, material and financial means allow us to do
Responsibility
We are aware of our responsibilities and we do every we can to protect personal data
To do so, Poool has implemented concrete actions:
From an organizational perspective
- checkWe have nominated our internal data protection officer
- checkSynthesis of our data security processes
- checkSecurity audits of our processing activities
- checkCartography of our processing activities
- checkCreation of records for each processing activity
- checkImplementation of a complaint processing procedure
- checkImplementation of a data security breach management procedure
From a technical perspective
- checkWe have adapted our technical base to respect the user’s consent or non-consent, which has to be passed on to us by our clients, the publishers
- checkAdaptation of our “newsletter” widget to collect readers’ express consent
- checkWe have adapted Poool’s own digital media to collect consent or non-consent, whether it be about cookie storage or about any personal data collection
- checkWe have put online this public information page about our GDPR process
Concretely, users can exercise their rights at any moment by contacting our data protection officer, in order to:
- Access their personal data
- Rectify their personal data
- Delete their personal data
- Exercise their personal data portability rights
- Exercice any other right given by the GDPR
From our side, we commit to:
- Asking for the users' consent so their personal data is collected
- Collecting only required data and for a required duration
- Technically protecting personal data at best, subject to our own constraints
- Informing users of any theft attempt on data