CITEGESTION places the utmost importance and care on the protection of privacy and personal data, and on compliance with the relevant legal provisions.

In accordance with Regulation (EU) 2016/679 of 27 April 2016 (known as the ‘’GDPR‘’) and French Law No. 78-17 of 6 January 1978 as amended, personal data must be processed lawfully, fairly and transparently.

The purpose of this Privacy Policy is to provide you with simple, clear and complete information on the way in which we process and use the personal information that you send us and that makes it possible to identify you. This Policy covers the various processing operations carried out by CITEGESTION as part of your browsing on the https://www.citegestion.com/ website.

1. DEFINITIONS

All terms relating to the protection of personal data used in this policy and identified by capital letters, used in the singular or plural, must be interpreted in accordance with the General Data Protection Regulation 2016/679 of 27 April 2016 (hereinafter ‘GDPR’).

Specifically, we use the following terms in this Policy:

Personal data: any information relating to an identified or identifiable natural person (hereinafter ‘Data Subject’). The personal data processed by CITEGESTION are referred to in the article ‘Categories of data processed’ of this Policy.

Data subject: any identified or identifiable natural person whose personal data is processed by the data controller. For example, in the context of your browsing on our website, you are a Data Subject.

Processing: any operation or set of operations which is performed upon personal data or sets of personal data, whether or not by means of automated processes, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, limitation, erasure or destruction. The purposes of the processing carried out by CITEGESTION are identified in the article ‘Purposes and legal bases of the processing’ of the Policy.

Data controller: the natural or legal person, public authority, department or other body which, alone or jointly with others, determines the purposes and means of the Processing.

Data processor: the natural or legal person, public authority, department or other body which processes personal data on behalf of the Controller.

Recipient: the natural or legal person, public authority, department or other body which receives personal data from us, whether or not it is a third party to CITEGESTION.

2. DATA CONTROLLER

CITEGESTION, whose registered office is located at Colisée Gardens, 8-10 avenue de l’arche, COURBEVOIE (92400), determines the means and purposes of all processing of personal data carried out in the context of your browsing on the https://www.citegestion.fr/ website and therefore acts as Data Controller.

For the processing of personal data carried out in the context of the provision of the MUSE solution to its user clients, CITEGESTION acts as their data processor.

3. CATEGORIES OF DATA PROCESSED & PURPOSES

As part of your browsing on the CITEGESTION website, you may be asked to provide us with the information listed below about yourself, the nature and quality of which will vary depending on your relationship with our company:

• identification data (title, surname, first name) ;
• contact details (telephone number, postal address, e-mail address);
• all the information provided by you as part of a contact request and, where applicable, the content of the message, as well as any information communicated subsequently during our exchanges;
• information relating to your professional background and training (curriculum vitae, level of education, skills, etc.) and any information provided by you as part of a job application (language spoken, hobbies, salary expectations, etc.);
• connection and browsing data (IP address, cookies, etc.).

CITEGESTION ensures that the collection of your personal data is relevant, adequate, not excessive and strictly necessary for its activities. You are informed that certain information is essential in order to benefit from our services (for example, when you fill in a collection form, this information is indicated by an asterisk). If you do not provide this information, we will not be able to offer you the related services.

We collect your personal data for specific purposes and on various legal grounds. CITEGESTION therefore collects and processes your data in order to:

• responding to all your requests made via the Contact Form on the basis of our legitimate interest or the execution of pre-contractual measures where applicable;
• establishing the elements necessary for the conclusion of contracts, such as the definition of the price and other contractual conditions concerning the provision of our services, on the basis of the performance of the contract;
• providing our services, in particular by organising the delivery of MUSE software to our customers and providing user support, on the basis of the performance of the contract;
• managing orders with our suppliers and service providers and monitoring their invoicing, on the basis of the performance of the contract or a legal obligation where applicable;
• to consider your unsolicited application or in response to a job offer published by CITEGESTION on the basis of our legitimate interest or the performance of pre-contractual measures where applicable.

4. DATA RECIPIENTS

In order to manage our relationship with you, and in particular to enable us to respond appropriately to requests made on our website, we may need to transmit your personal data:

• Internally: to authorised staff in departments responsible for accessing and processing the data concerned, in particular the Human Resources, Sales, Products & Services and Communications departments.
• Externally: to technical service providers chosen for their expertise and reliability who act on our behalf and according to our instructions (IT subcontractor, host of our servers, etc.) or to local authorities in the context of a legal obligation or at the request of an administrative authority authorised to make this type of request.

We never share your personal data with other companies for commercial prospecting purposes without your consent.

5. DATA RETENTION

In accordance with data protection regulations, your personal data will be kept only for as long as is necessary to fulfil the purposes for which it is collected and processed. Insofar as storage requirements may vary depending on the purpose, the periods for which personal data is stored may also vary. In general, the criteria taken into account to determine the length of time your personal data is kept depend on:

• the existence of a legal obligation to retain data for a certain period of time ;
• an administrative interest in keeping your personal data; or
• the existence of a contract between you and CITEGESTION;
• applicable legal requirements.

For example, the following retention periods are applied by CITEGESTION:

• when you make a contact request: your data is kept by the department concerned by your request for the time necessary to reply to you;
• when you sign a contract with CITEGESTION: your personal data is kept for the duration of our contractual relationship and will then be archived for five (5) years following the end of the contractual relationship in order to meet our legitimate interest in ensuring the protection and defence of our rights in the event of litigation;
• when you submit an application for a job vacancy: in the event of a successful application, data relating to an employee will be kept for the time of his/her presence within CITEGESTION and after his/her departure for the applicable legal retention period; in the event of a negative application, your data will be kept for two (2) years, unless you object, and will in all cases be destroyed at your request.

6. INTERNATIONAL TRANSFER OF DATA

CITEGESTION aims to process personal data from France or the European Economic Area (EEA).

In the event that the recipients of your personal data, in particular for example in the context of service contracts concluded by CITEGESTION, are located outside the EEA in countries where data protection legislation differs from that applicable within the EEA, this transfer of data will be carried out subject to appropriate guarantees, in particular contractual guarantees, in accordance with the applicable regulations on the protection of personal data.

7. COOKIES

What are cookies?
Cookies are data placed on your computer or mobile phone. They can be distinguished by their unique identifiers, which are associated with your computer or mobile phone. Cookies prevent you from having a bad consumer experience on your favourite sites, because they remember your actions and preferences. So you don’t need to enter your browsing preferences each time you use a site, such as location, font or language. These cookies are stored in RAM on your computer. They do not enable us to identify you; however, they record information relating to your computer’s browsing on the site (the pages you have visited, the date and time of the visit, etc.) which we can read on your subsequent visits.

The data collected through cookies is used to identify you when you log on to your personal space and to remember your connection to the website.

How do we use them and what do they do for us?
Below are the different types of cookies that we may use on the https://www.citegestion.fr/ website.

• Technical and functional cookies: these cookies, which are necessary for the proper operation of the site and are not subject to prior consent, are deposited to meet the needs of ensuring the basic functionality and security features of the website, such as: technical management of your session, management of the languages used, performance monitoring, security and technical error monitoring, improving your user experience and performance management. You can authorise/refuse these cookies directly via your browser, but you may not be able to use the site in its entirety.

Please note that you can prevent cookies being stored on your computer by configuring your browser as follows:

– for Internet Explorer: https://support.microsoft.com/fr-fr/help/17442/windows-internet-explorer-delete-manage-cookies
– for Safari: https://support.apple.com/fr-fr/guide/safari/sfri11471/mac
– for Chrome: https://support.google.com/chrome/answer/95647?hl=fr&hlrm=en
– for Firefox: https://support.mozilla.org/fr/kb/protection-renforcee-contre-pistage-firefox-ordinateur

Please note, however, that if you set your browser to refuse cookies, certain functions, pages and areas of our site that require the use of cookies will not be accessible.

To find out more about how to configure your browser, please visit the website of the French Data Protection Authority (CNIL): https://www.cnil.fr/fr/cookies-les-outils-pour-les-maitriser.

8. CONFIDENTIALITY AND DATA SECURITY

CITEGESTION undertakes to protect the personal data processed against loss, destruction, alteration, unauthorised access or disclosure.

We therefore implement all appropriate technical and organisational measures, depending on the nature of the data and the risks involved in processing it. These measures must make it possible to preserve the security and confidentiality of your personal data. They may include practices such as limited access to personal data by persons authorised by virtue of their functions, pseudonymisation or encryption.

9. DATA SUBJECTS RIGHTS

In accordance with the regulations in force, you have the right to access and rectify your personal data and, insofar as applicable, the right to request its deletion, the right to object to the processing of your data for a legitimate reason and to obtain its restriction or portability.

When you exercise your rights, your personal data will be processed for the purposes of managing your request.

You may exercise these rights or ask any question relating to the management of your personal data by CITEGESTION by writing to :

• by e-mail to rgpd@citegestion.com
• by post to the address given in our Legal Notice

If there is reasonable doubt as to the identity of the person making the request, proof of identity may be requested.

You also have the right to complain to the Commission Nationale de l’Informatique et des Libertés (CNIL), 3 Place de Fontenoy – TSA 80715 – 75334 Paris CEDEX 07, about the way in which CITEGESTION collects and processes your data.

10. POLICY UPDATE

This Policy may be updated in order to take account of changes in regulations relating to personal data or to inform data subjects of new processing operations implemented by CITEGESTION.

Date of last update : 05/02/2025