Personal data protection policy
1. PERSONAL DATA PROTECTION POLICY FOR BRIDGE
Bridge aims to be a model corporate citizen and wants to build strong, lasting relationships with its clients, based on confidence and mutual benefit. In line with this ethos, we consider protection of your personal data to be essential, and by means of this personal data protection policy we want to tell you how we collect and process these data.
Unless express consent is required by the law in your country regarding personal data protection, when you make use of the “Resources” defined below, you are giving consent for us to collect and use your personal data in the ways set out in this personal data protection policy.
2. WHAT DOES THIS PERSONAL DATA PROTECTION POLICY APPLY TO?
This personal data protection policy applies to all the internet sites, apps and any other on-line initiative belonging to an Bridge company which results in the collection of personal data (the “Resources”). As a result, this personal data protection policy does not apply to third-party internet sites, including those which may be referred to on our Resources by means of an internet link.
Please note that if required by the laws of your country, this personal data protection policy may be supplemented by local provisions which we strongly advise you to consult.
3. WHAT DATA DO WE COLLECT ABOUT YOU?
With your prior consent, we may collect and process all or some of the following data when you make use of our Resources:
- the data you provide (i) by filling in forms, (ii) by uploading data on-line, (iii) by subscribing to on-line services (e.g. apps and social network pages), or (iv) by sending us correspondence:
- first name and last name;
- email address;
- gender;
- telephone number;
- postal address;
- age/date of birth;
- your opinion of our products;
- payment details (via the e-commerce Resources);
- any request which you may send us (mainly for archiving purposes);
- photos or videos of yourself which you want to share.
We may ask you to reply to surveys which we use for scientific and statistical purposes.
4. DO WE COLLECT YOUR IP ADDRESS AND YOUR COOKIES?
We may collect your IP address and your browser type for use in administering our systems and/or for establishing statistics, but without identifying any other individual information.
In some cases, we may also use cookies which are small files of letters and numbers downloaded to your terminal when you access our Resources. We mainly use cookies to recognise you when you reconnect to one of our Resources and to display content which may correspond to your interests.
The default setting of Internet browsers is usually to accept cookies, but you can easily change that by altering the settings of your browser. However, please note that if you choose to inactivate the cookies, it is possible that some parts of our Resources will not be accessible.
5. HOW DO WE USE YOUR PERSONAL DATA?
We use your personal data mainly to stay in contact with you, particularly by sending you regular news and information about our products, our brands (such as LYRA), our activities and/or our Resources.
We also use your data to improve your on-line experience when you connect to our Resources: to understand which Resources and content interest you, to manage your on-line account, to confirm your participation in our activities, to process you payments, to make sure that our Resources are presented in the most appropriate way for you and your terminal, and to protect you against potential fraudulent acts.
6. HOW CAN YOU ACCESS YOUR PERSONAL DATA?
You can always contact us by post, by email or by telephone to consult the personal data about you which we hold (please see the contact details shown in the Conditions for Use of the Resources you are using).
If you identify an error in the data or if you consider them to be incomplete or ambiguous, you can also ask us to correct, expand or clarify them.
Finally, you can ask us to delete any of the personal data about you which we hold. However, please note that we may retain a record of your data for archiving purposes (particularly when the law requires us to).
7. DO WE SHARE YOUR PERSONAL DATA?
Subject to the provisions of this personal data protection policy, or unless we have obtained your prior consent, we will not share your personal data with anyone who is not an employee of Bridge and LYRA or its service providers (for example, our Web agencies who manage some on-line operations on our behalf).
Please note that we place a strict requirement on our service providers to only use your personal data for managing the services which we have asked them to provide. We also ask our service providers to act always in compliance with the relevant laws regarding personal data protection and to pay particular attention to the confidentiality of these data.
8. WHERE DO WE STORE YOUR PERSONAL DATA?
Your personal data are stored in our data bases which can only be accessed by our staff and our service providers.
In some cases, and mainly for technical reasons, these data bases may be stored on servers situated outside of the country from which you originally entered the data (including outside the European Union). In that case, if the countries to which we have transferred your data are not subject to personal data protection regulations as strict as those described in the current personal data protection policy, we will take the appropriate steps to ensure that your data are processed in accordance with the conditions of this policy.
9. ARE YOUR PERSONAL DATA STORED SAFELY?
Our aim is always to store your personal data in the most safe and secure manner. To that end, we use multiple technologies in order to prevent as far as possible any corruption or loss of your data, or any unauthorised access to them.
With our e-commerce Resources, we manage information about your payment by means of methods complying with industry standards (such as PCI DSS).
Please note that this personal data protection policy may be modified by us. In that case, you will be able to see the changes on this page.
10. PROTECTION OF PERSONAL DATA COLLECTED WHEN SETTING UP AN ON-LINE ACCOUNT
The Data Controller - Bridge - processes personal data for the purpose of managing client accounts and commercial relationships, in particular for the placement, follow-up and recording of orders to allow clients to download and consult their account documents and to benefit from personalised promotions and recommendations.
This processing is justified by the need to meet contracts made with Bridge, by the consent of its clients and the legitimate interest of Bridge. The legitimate interest of Bridge is based on the need to put in place and to improve tools for selling its products and services remotely, as well as to constantly improve its services for clients, in particular through knowledge of their professional requirements.
Its clients can withdraw their consent at any time. This will not call into question the legitimacy of the collection and storage of data carried out before withdrawal of consent.
The data collected are essential for this processing and are destined for the relevant services of Bridge and, potentially, its sub-contractors and service providers. The data are stored for the duration of the contractual relationship, extended according to legal requirements.
As clients, you have the right to access, correct or delete your data, to restrict or object to their processing, the right to data portability, as well as the right to specify instructions for the fate of the data after your death. As clients, you can also withdraw your consent at any time and submit a complaint to a supervisory authority. If clients exercise the rights listed above, we will nevertheless retain some of their personal information as well as the request, in order to ensure that their rights are being met effectively.
Clients can exercise these rights by email to dpo@bridge.dental or by writing to the DPO, Bridge, 25 rue Bleue 75009 Paris, attaching a copy of a passport or identity card.
Identity and contact details for the Data Controller: Gregory Nizard, 25 rue Bleue, 75009 Paris
Contact details for the DPO: Vincent Peslin, 25 rue Bleue, 75009 Paris
11. PROTECTION OF PERSONAL DATA COLLECTED WHEN SUBSCRIBING TO A NEWSLETTER ON THE INTERNET SITE
Bridge, the Data Controller, carries out processing of personal data for the purpose of managing and following up subscriptions to the newsletter. Our newsletters contain information on our existing products and services as well as new products and services and exclusive offers which may be of interest to the internet user.
This processing is justified on the basis of the subscriber’s consent.
The subscriber can withdraw consent at any time. This will not call into question the legitimacy of the collection and retention of data before this withdrawal of consent. The subscriber can unsubscribe completely from the newsletters by clicking on the “unsubscribe” link found on all our newsletters. If the subscriber asks not to receive newsletters any more, we will nevertheless retain some personal information as well as the request, in order to ensure that he/she is removed from the newsletter distribution list.
The data collected are essential for this processing and are destined for the relevant services of Bridge and, potentially, its sub-contractors and service providers, in particular to ensure the correct routing of emails. The data are retained for a period of 3 years, starting at the end of the commercial relationship, or at the time of collection or the last incoming contact from the subscriber.
As a subscriber you have the right to access, correct or delete your data, to restrict or object to their processing, the right to data portability, as well as the right to specify instructions for the fate of the data after your death. You can also withdraw your consent at any time and submit a complaint to a supervisory authority. If clients exercise the rights listed above, we will nevertheless retain some of their personal information as well as the request, in order to ensure that their rights are being met effectively.
Subscribers can exercise these rights by email to dpo@bridge.dental or by writing to the DPO, BRIDGE, 25 rue Bleue 75009 Paris, attaching a copy of a passport or identity card.
Identity and contact details for the Data Controller: Gregory Nizard, 25 rue Bleue, 75009 Paris
Contact details for the DPO: Vincent Peslin, 25 rue Bleue, 75009 Paris