Content

Privacy Policy

Date of last update: 05/12/2024

The protection of your personal data (the "Data") is important to DIFFLY ("we"), and this Privacy Policy allows us to inform you about the processing carried out on your Data, in compliance with all European and French regulations on the protection of personal data and privacy, and in particular Regulation (EU) 2016/679 of 27 April 2016 (the "GDPR") and Law No. 78-17 of 6 January 1978 on data processing, files and freedoms, as amended.

‍

DATA PROCESSED BY DIFFLY AS DATA CONTROLLER

‍

Processing of Data collected via the DIFFLY website
Processing of Data of DIFFLY's suppliers, customers and prospects for commercial management purposes
Processing of Data of DIFFLY Platform users for service improvement purposes
Data retention periods
What are your rights?

DATA PROCESSED BY DIFFLY AS DATA PROCESSOR

Processing of Data carried out via the DIFFLY platform

CONTACT

DATA PROCESSED BY DIFFLY AS DATA CONTROLLER

1. Processing of Data collected via the DIFFLY website

DIFFLY, publisher of the website https://www.diffly.co/ (the "Site"), may process the Data of Site visitors ("you") during their browsing on the Site. This section describes the processing of Data carried out by DIFFLY as data controller in this context.

Why do we process your Data?Data from Site visitors is collected and used for the following purposes:

Responding to your demo and contact requests and queries;
Hosting your Data;
Improving our services and the features of our tools;
Ensuring the security of the Site;
Guaranteeing the exercise of your rights and the defence of our rights.

‍

We also use cookies. Find all information on this subject in our Cookie Policy.

‍

We process your Data with your consent (for cookies), which you may withdraw at any time (i); or because it is necessary to respond to your requests, in particular pre-contractual ones (ii); or to comply with a legal obligation to which we are subject (iii); and in accordance with our legitimate interests, to ensure the security and proper functioning of the Site (iv).

‍

· What categories of Data are processed?Only Data strictly necessary to fulfil the purposes mentioned above is processed by DIFFLY. The Data processed is that which you provide to us during your browsing on the Site or when you contact us, such as identification data, contact data including email address, as well as usage and connection data. You are invited to update your Data whenever necessary.

‍

· Who are the recipients of the Data?Your data may be transmitted to our technical service providers for the use of Site features (Webflow). Your Data may be transferred outside the European Union to authorised service providers. If you would like to know more about the appropriate safeguards put in place in this regard, please contact us!

‍

Please note that your Data may be transmitted to third parties legally authorised to access it upon specific request, in certain cases provided for by law: judicial authority, administrative authority, etc. Your Data may also be communicated to third parties if necessary to protect and/or defend our rights or to enforce these provisions.

Processing of Data of DIFFLY's suppliers, customers and prospects for commercial management purposes

‍

We carry out processing of personal data of our suppliers, customers and prospects, as data controller, in the context of our commercial management activities.

‍

Why do we process your Data?This personal data processing is intended to enable us to:

‍

manage the contracts binding us to our customers and suppliers (management of service delivery, payment and invoicing);
monitor customer, prospect and supplier relationships for the purpose of satisfaction surveys, handling complaints and after-sales service;
maintain general accounts and any ancillary accounts;
carry out commercial prospecting activities, including communications about our offerings;
manage reviews from individuals regarding the services we offer;
guarantee the exercise of your rights and the defence of our rights.

‍

We process your Data because it is necessary to provide you with our services in accordance with the contract binding us and to respond to your requests (i); to comply with a legal obligation to which we are subject, in particular bookkeeping requirements (ii); and in accordance with our legitimate interests, in particular to carry out commercial prospecting by electronic means in the context of our B2B relationships and satisfaction surveys in order to improve our service (iii). If you no longer wish to receive our communications, you may click on the unsubscribe link provided in the relevant email.

‍

· What categories of Data are processed?In this context, DIFFLY will collect only the Data strictly necessary to achieve these purposes. The Data collected falls within the category of identification data (civil status, identity, email address, etc.), data relating to professional life, and data relating to our commercial relationship.

‍

Please note: your Data may be transmitted to third parties legally authorised to access it upon specific request, in certain cases provided for by law: judicial authority, administrative authority, etc. Your Data may also be communicated to third parties if necessary to protect and/or defend our rights or to enforce these provisions.

‍

Processing of customer data carried out for the provision of services via the Google API

‍

We carry out processing of personal data of our customers in order to offer them the ability to connect DIFFLY to their Google account and to enable the sending of feedback emails to their prospects directly from their mailbox.

We process this data because it is necessary to connect your Google account to the DIFFLY platform and to enable you to use this service in accordance with our general terms and conditions of sale and with your consent.

‍

· What categories of data are processed?DIFFLY will only process the data strictly necessary relating to your Google account: first name, last name, email address. No other data will be collected and DIFFLY will not have access to data stored in your mailbox.

‍

· Who are the recipients of the data?Your data is only transmitted to those who strictly need to know it. It may be extracted and accessible to our technical service providers, in particular our hosting provider AWS (Amazon Web Services (https://aws.amazon.com/fr/privacy/)).

‍

· How is data security ensured?We make our best efforts to ensure the security of your data. Appropriate technical and operational measures in line with the state of the art are implemented accordingly. In particular, data is encrypted to prevent it from being compromised.

‍

3. Processing of Data of DIFFLY Platform users for service improvement purposes

‍

We may reuse Data from DIFFLY Platform users for the purposes of improving and monitoring the performance of our services, in accordance with our legitimate interest.

‍

· What categories of data are processed?DIFFLY only processes the data strictly necessary for these purposes, including technical service usage data, the content of communications with DIFFLY, and comments on DIFFLY services.

‍

· Who are the recipients of the data?Your data may be transmitted to our technical service providers. Your Data may be transferred outside the European Union to authorised service providers. If you would like to know more about the appropriate safeguards put in place in this regard, please contact us!

‍

4. Data retention periods

‍

We retain your Data for the duration of our commercial relationship plus 5 years if you are a customer or supplier, and 3 years from the last contact with you, or until the withdrawal of your consent or your objection to commercial prospecting activities directed at you. Data relating to accounting is retained for 10 years.

‍

We also retain your connection data for a period of 6 months.

‍

Data used for service improvement purposes is retained for the strict duration necessary for that purpose and for a maximum of one year; it is never retained beyond the retention period set out in the contract with the Customer.

‍

Furthermore, data necessary for the defence of our rights is retained for a period of 5 years after the end of the commercial relationship, in accordance with applicable legislation or the applicable limitation period.

‍

However, Data may be retained for longer if a longer retention period is authorised or required under a legal, contractual, tax or social obligation.

‍

5. What are your rights?

‍

In accordance with applicable regulations, in particular Articles 15 to 22 of the GDPR, you have the following rights regarding the processing of your Data, within the limits provided by law:

‍

Right of access: to obtain information about your Data and a copy of your Data;
Right to information: to obtain information about the processing conditions (recipients, purposes, categories of data, etc.);
Right to rectification: to correct or update your Data when it is inaccurate or incomplete;
Right to object: to object to the carrying out of processing for reasons relating to your particular situation, or to withdraw your consent for processing based on that legal basis;
Right to restriction: to request that all or part of your Data is temporarily not processed, without requesting its deletion;
Right to erasure: to request the deletion of your Data;
Right to data portability: to obtain your Data in a structured, machine-readable format and to be able to transmit it easily to a third party;
Right to define specific instructions for the processing of your Data after death;
Right to register on the Bloctel website www.bloctel.gouv.fr.

‍

You may exercise your rights via the contact address (below) regarding the processing of data for which DIFFLY is the data controller. If there is any doubt about your identity, proof of identity may be requested.

‍

Any request that is abusive or unfounded under applicable laws and regulations may be rejected.

‍

We are committed to responding to your requests to exercise your rights as quickly as possible and, in any event, within the legally required timeframes.

‍

If, after contacting us, you consider that we have not responded to your request, you may lodge a complaint with the CNIL.

DATA PROCESSED BY DIFFLY AS DATA PROCESSOR

‍

Processing of Data carried out via the DIFFLY platform

DIFFLY is the publisher of a platform offering its professional clients a service to assess their performance — in terms of their sales team's ability to close deals — and to provide personalised recommendations to improve that performance.

‍

As an employee, customer or prospect of companies using the DIFFLY platform, your Data is processed to enable:

‍

When you are a user: your identification on the DIFFLY platform and the collection of data on your performance;
When you are a business contact (customer or prospect): the assessment of the performance of DIFFLY's client company, in particular through qualitative interviews, surveys and the collection of CRM data from you.

‍

In this context, DIFFLY acts as a data processor for its client, who acts as the data controller.

‍

All information required under personal data protection regulations is transmitted to you directly by DIFFLY's client.

‍

Accordingly, we invite you to contact that client directly for any questions relating to the processing of your Data on the DIFFLY platform, as DIFFLY is not authorised to respond to you in this regard.

‍

DIFFLY, as data processor, complies with all French and European regulations on the protection of personal data and privacy, and in particular Regulation (EU) 2016/679 of 27 April 2016 (the "GDPR") and Law No. 78-17 of 6 January 1978 on data processing, files and freedoms, as amended (the "Informatique et Libertés" law).

CONTACT

‍

To contact us regarding the processing of your Data that we carry out as data controller, you may send an email to: contact@diffly.co

‍

DIFFLY — Société par actions simplifiée with a share capital of €26,000 — registered in Nanterre under number: RCS 978 126 050 — Registered office: 1 B RUE BAUDIN, 92300 LEVALLOIS-PERRET.

‍

This Privacy Policy is subject to change; we invite you to consult it regularly.

‍