Personal Data Protection Policy

Thank you for visiting our website.

NIT (a LYNRED Group company) is committed to protecting your privacy and the confidentiality of your personal data. In the interest of transparency, NIT has adopted a “Personal Data Protection Policy” applicable to the personal data collected by NIT.

Through this Personal Data Protection Policy, NIT, as the data controller, undertakes to process your personal data in accordance with the French Data Protection Act (LIL) of 6 January 1978, as amended by the law of 21 June 2018, and with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”), and more broadly with all applicable legal provisions (hereinafter collectively referred to as the “Law”).

This policy describes how NIT collects and processes your data, as well as its commitments regarding the protection of your personal data.

The version of the Policy appearing on our website is the current version. The Policy is subject to change at any time. We therefore recommend that you consult the website regularly to remain informed of any changes made to the Policy.

For the sake of clarity, we offer definitions of the terms used herein. These definitions are provided for informational purposes only and do not replace the more comprehensive definitions provided by the French Data Protection Act (LIL) and/or the EU GDPR. Accordingly, the following terms are defined as follows:
Cookies: A cookie is a small text file that is used to keep track of your preferences. For example, when you use a website, read an email, or install or use a software or mobile application, regardless of the type of device (computer, smartphone, reader, etc.), cookies may be installed.
Personal data: Personal data is any information that is related to a specific individual.
Purpose: The reason or reasons for which the data processor processes your data.
Data Controller: refers to the entity that determines the purposes and means of processing Personal Data. For the purposes of the Policy, NIT is the Data Controller, whose identity and contact details are provided in the “CONTACT” section.
Third party: A natural or legal person that processes personal data on behalf of and according to the written instructions of the controller.
Processing: refers to any operation or set of operations performed on Personal Data, such as, for example: collection, storage, reading, archiving, etc, for a specified or determinable period and for the same Purposes.

PERSONAL DATA COLLECTED

NIT agrees to only collect personal data that is strictly necessary for the purposes of processing and to refrain from collecting more personal data than what is strictly necessary. NIT also agrees to provide you with the following information when collecting your personal data:

• The purposes for which the data is being collected.
• How to contact the controller.
• The legal basis for processing.
• Whether or not collecting your personal data is required or optional.
• How long your personal data will be stored.
• The recipients of your personal data.
• Whether or not your personal data will be transferred outside the European Economic Area (if necessary).
• Your rights and how to exercise them (with France’s data protection agency, or CNIL).

We collect your personal data in several ways:

• Forms you complete on our website or on paper when visiting our facilities; forms provided by NIT for you to complete (such as when signing a contract, for example).
• Any email or postal mail you send to us.
• Business cards you intentionally give us.
• Cookies on our website (see “Cookies” below).
• Social media.
• Other legal and fair channels (about which you will have been previously informed).

Please note that information shared via social media may, independently of our processing, be used by the social network in question. We encourage you to consult the privacy and data processing policies of these social networks to understand the consequences of their use. NIT is in no way responsible for the actions or omissions of these social networks, as NIT does not control their data usage or the data protection measures they implement, and therefore disclaims all liability in this regard.

Specific information regarding online forms:

When you choose to provide us with your personal data through the various forms on our website, some fields are marked with an asterisk. This means that this data must be completed in order for us to process your request. If you do not complete the fields marked with these asterisks, NIT will not be able to provide you with the services offered (Examples: requests for information or contact, newsletters, etc.). Data not marked with an asterisk is optional. All our subscriptions are based on an active opt-in process requiring your voluntary action. If you no longer wish to receive information about our products, events, and marketing communications in general, simply let us know by email at sales@new-imaging-technologies.com or, if applicable, by using the unsubscribe link/email address provided at the bottom of our newsletters/informational emails. This processing is indeed subject to your consent, which you can revoke at any time and free of charge (SEE “YOUR RIGHTS”).

LEGAL BASIS AND PURPOSE OF THE PROCESSING OF YOUR PERSONAL DATA

Regardless of the type of processing of your personal data, NIT undertakes to clearly define the purpose of the processing of your data at the time of collection. The purpose(s) for which your data will be processed will be clearly explained to you. NIT also undertakes to use your data only for the purpose specified at the time of collection. NIT will never use your personal data for purposes other than those initially intended.
In accordance with the GDPR, we lawfully collect your information based on your consent or a contractual relationship between you and NIT, and/or to pursue NIT’s legitimate interests in safety and security, and/or to comply with legal obligations to which NIT is subject.

Therefore, the main purposes for which your personal data is collected are as follows (this list is not exhaustive):

Opt-in:

• To send you information about our products, either in response to a specific request from you via our contact forms, or following your request to subscribe to email alerts/newsletters via our contact forms, or by giving you a business card at a trade show or other meeting;
• To send you information about our marketing events, following a specific request from you via our contact forms, or following your request to subscribe to email alerts/newsletters via our contact forms, or by giving you a business card at a trade show or other meeting;
• To respond to your various information requests that have been sent to us via the contact forms;

Contract-related:

• To provide you with the products and/or services you request from us and, more broadly, to fulfil any contractual obligations between NIT and your organization that require the personal information of parties to the execution and performance of the contract.

Legal requirements:

• To comply with our legal obligations, including, but not limited to, labor laws (such as if you were to be hired by NIT), and safety requirements.
• To perform an agreement in compliance with France’s anticorruption laws, NIT is committed to an ethical approach, aiming to maintain healthy and transparent relationships with its partners. Therefore, NIT agrees to audit its partners to ensure that they are acting with integrity, one of NIT’s core values. If NIT collects sensitive data (Article 9 of the GDPR) to meet its obligations under France’s anticorruption laws, and insofar as the data is critical to the aforementioned audits, NIT agrees to obtain your consent. NIT reserves the right not to sign a contract or to withdraw from an existing contract if the information required is not provided to NIT or if you withdraw your consent to this processing.

Legitimate interests:

• To prevent and detect fraud, manage security incidents, and more generally, to ensure safety and security within our premises during your visit
• To run our website: When you simply use our website without sending any information via our online contact forms, your browsing preferences are collected by cookies (see “COOKIES”). This data is only processed for the purposes of tracking website traffic, compiling statistics, and improving the user experience on our website. This data is not used for any other purpose. If you do not consent to the collection of this data, simply ensure that the concerned cookies are not enabled on your browser. However, please be aware that cookies required for the website to run properly cannot be deleted. Also be aware that, depending on how you choose to manage cookies, the website and certain features on the website may not work as intended and may not meet your expectations.
• To manage any disputes.

In the event that your personal data is processed for other purposes not mentioned here, NIT undertakes to inform you before processing your data and, if required by law, to obtain your consent.

RECIPIENTS

Access to your Personal Data is strictly limited to persons designated and authorized by NIT and to competent organizations/companies in cases where processing requires the involvement of such a third party. In such cases, you will be informed of the identity of the recipients of your personal data prior to processing. In all cases, these third parties are, due to the nature of their business, entitled to receive your personal data for the purposes for which it was legally obtained. If necessary, your personal data may be disclosed to government institutions, agencies, or judicial or administrative authorities if they request us to disclose your personal data.

NIT does not transfer your personal data outside the European Economic Area or outside countries currently considered by the French data protection agency (CNIL) to have adequate data protection measures in place, unless the processing of your personal data or the law requires it. In such cases, NIT undertakes to inform you before your data is transferred.

If necessary for processing, your personal data may be transferred to third parties authorized by NIT to process your data. NIT requires these third parties, in their capacity as processors, to comply with the law and the GDPR clause included in our contracts with our processors. These subcontractors include technical service providers (data hosting, website service providers, etc.). We also require our subcontractors to provide us with sufficient guarantees regarding the security and confidentiality of the personal data we transfer to them. We also ensure that all our subcontractors take all necessary technical and organizational measures to guarantee the confidentiality, integrity, and security of your personal data. NIT undertakes not to disclose your personal data to subcontractors who have not provided these guarantees.

NIT will never sell your personal data. NIT also undertakes not to share or disclose your personal data in any way to third parties for commercial and/or marketing purposes without first obtaining your consent.

HOW LONG IS YOUR DATA STORED?

In accordance with the recommendations of the French Data Protection Authority (CNIL), your personal data will only be kept for the period necessary to achieve the purposes for which it was collected.
Once these purposes have been achieved, your personal data will be temporarily archived to enable us to fulfill our legal, financial, and/or tax obligations, and/or for at least the applicable limitation period.

SECURITY MEASURES

NIT is committed to protecting your Personal Data, and we implement a series of organizational and technical security measures to prevent:

• The unintended destruction or loss of your personal data.
• The disclosure of your personal data to persons who do not need access to your personal data to fulfil the purposes of processing.
• Leaks or breaches of your personal data and, more broadly, unauthorized access to or use of your personal data.

Organizational measures

We are committed to ensuring that your personal data is processed by our employees and by third parties who need access to it in order to achieve the purposes of the processing. Please note that these third parties are bound by non-disclosure agreements, either through their employment contracts or through other contracts in which we have included stringent requirements. We require these third parties to use your personal data solely for those purposes for which it was collected. Please be aware that your personal data may be disclosed to administrative or judicial authorities with whom NIT does not have a contractual relationship. These authorities have their own procedures for protecting your personal data.
To ensure that our employees understand the importance of protecting your personal data, we have implemented a program to raise their awareness of how your personal data should be used. Our objective is for all our employees to understand their responsibilities in protecting your personal data.

Technical measures

Unless explicitly stated otherwise, all information systems used by NIT are hosted in France or within Europe, and operated by European companies. All expected and necessary security measures are implemented to guarantee appropriate protection of your Personal Data, both physical and IT-related. These measures may vary depending on the platforms and the information involved.

COOKIES

Our website uses cookies to measure traffic and generate statistics in order to improve your browsing experience.  We use the CookieYes plugin, which allows you to view the list and choose to accept or reject cookies.

What type of cookies do we use?

Necessary cookies for the operation of the website

These cookies enable the features necessary for the website to function and do not collect any personal data for commercial or marketing purposes. These cookies cannot be disabled. We use the following cookies for these purposes:

• CookieConsent: The data collected by these cookies is automatically deleted one year after it is collected.

Marketing cookies

These cookies are used to track visitor activity on our website.

YOUR RIGHTS

At NIT, it is important that you are able to exercise your rights regarding the protection of your personal data. Given our commitments to data security, you must provide proof of your identity to exercise your rights. You will only be given access to personal data that concerns you directly and individually. Therefore, each time you exercise your rights, we will ask you to provide a valid ID. Furthermore, we reserve the right to complete any other legitimate and reasonable verification to confirm your identity. We reserve the right to decline your request if you do not provide the proof of identity we request, and we cannot be held liable for doing so.
You have the following rights under France’s data protection law and the GDPR:

The right to access

You have the right to contact us to obtain a variety of information, including whether or not we process data that concerns you. If so, you have the right to be informed of the purposes of processing that concerns you, the categories of personal data processed, the recipients of the data (as long as informing you does not violate the recipients’ rights), etc.
When you exercise this right, we provide you with a copy of your personal data that is processed. We reserve the right to invoice you for additional copies of your data in the event of unfounded or nuisance requests.
The right to rectify
You have the right to contact us to complete, correct, or update personal data concerning you and kept by us if this data is incorrect.
The right to object to processing
You have the right to ask us to cease processing of personal data concerning you at any time; if your specific situation so requires, we are committed to fulfilling your request as quickly as possible.
Nevertheless, please be aware that we can refuse your request and that it is legal for us to do so:

• If NIT has legitimate and compelling concerns that take precedence over your rights and freedoms.
• For the purposes of legal proceedings

You have the right to object to the use of your personal data for sales and marketing campaigns at any time; you do not need to provide a reason for your request. To exercise your right, simply click the “unsubscribe” link included in our newsletters and emailers or contact the person who initiated the newsletter or mailer.

The right to restrict processing

You have the right to restrict the processing of your personal data that may be in our possession in the following cases:

• If you dispute the accuracy of your personal data, we agree to restrict the use of your personal data during the time necessary for NIT to verify the accuracy of your personal data.
• If processing is discovered to be illegal, but you have expressly requested that we do not delete your personal data.
• If you have objected to the processing of your personal data (see above). In such cases, we will restrict the processing of your personal data during the time necessary for NIT to verify whether or not NIT’s legitimate reasons for processing the data take precedence over your rights and freedoms.
• If your personal data is no longer necessary for processing, but if it remains necessary for the ascertainment, exercise, or defense of a party’s rights in a court of law.

The restriction of processing can result in moving your personal data to another database so that it cannot be accessed by certain users, for example.

The right of erasure

In certain circumstances, you have the right to ask us to delete promptly any personal data concerning you in our possession.
You may exercise this right if:

• You withdraw your consent to processing only if the processing in question was initiated on the sole basis of your consent. (In other words, if there is no other legal basis for the processing in question).
• If you have objected to processing, and if we do not have any compelling and legitimate interests that take precedence over your right and freedom to object to the processing of your personal data.
• If you have objected to the processing of your personal data for sales and marketing purposes (see above).
• If the processing in question is illegal
• If a national legal obligation and/or a European regulatory obligation requires the controller to delete your personal data.

Please be aware that we can refuse to delete your personal data if we are subject to legal obligations that require the concerned processing, or if we need your personal data to ascertain, exercise, or defend a party’s rights in a court of law.

The right to data portability

You can ask us to provide you with a copy of the personal data you provided to us in a structured, commonly-used format that can be read by a machine, subject to all of the following conditions being met:

• The processing of your personal data is carried out based on your consent or a contract.

AND

• Processing is carried out using automated processes.

Your exercising this right must not infringe upon your right of erasure, subject to the conditions for the right of erasure being met.

HOW TO EXERCISE YOUR RIGHTS?

The law allows you to exercise all of the above rights by contacting us by email at info@new-imaging-technologies.com, and/or by mail addressed to the Managing Director of NIT, at the following postal address: 1 Impasse la Noisette BP 426, 91370 VERRIERES LE BUISSON, France.
To help us process your request as efficiently as possible, please indicate the nature of your request as clearly as possible. And, to help us fulfil your request promptly, we ask that you provide proof of your identity immediately.
If you believe that NIT is not complying with its legal or regulatory obligations regarding the protection of your personal data and, in particular, your rights and/or the security and protection of your personal data, you have the right to file a complaint with the French data protection authority (CNIL), which is empowered to investigate breaches of personal data protection.