NEBESTA is committed to processing your personal data securely and responsibly in accordance with applicable regulations, in particular the French Data Protection Act of January 6, 1978 as amended by the European Regulation of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“the GDPR” or “Data Protection Regulation”).

This data privacy policy sets out the principles according to which NEBESTA, as data controller, processes your personal data and provides you with the information you need to understand the scope and type of personal data processing carried out. It is available at all times on the website nebesta.com (the “Website”).

As a reminder, personal data is any data relating to an identified or identifiable natural person. A person is identifiable if he or she can be identified directly or indirectly, in particular by reference to an identifier, for example location data, an online identifier, etc.

To exercise your personal data rights, you can contact NEBESTA at the following email address: privacy@nebesta.com.

If you have any difficulty exercising your rights or wish to make a complaint regarding the processing of your personal data, you have the right to refer the matter to the CNIL.

1/ Definition

For a better understanding of this privacy policy, certain terms are defined below:

Legal basis: the processing of personal data is only lawful if it is based on one of the legal bases set out in the Data Protection Regulation.

Retention period: the period during which your personal data is kept in an active database by NEBESTA.

Website: www.nebesta.com 

2/ Purposes of personal data processing 

NEBESTA processes your personal data for the reasons listed below. Each purpose of processing only concerns the categories of data subject listed. These legitimate purposes deal only with the personal data collected via the Website.

2.1. Response to user requests 

• Data subjects: users of the Website who asked for a demo.

• Personal data processed: identification data (first name, last name, professional email), company, connection data, user requests and answers provided.

• Legal basis for processing: Legitimate interests pursued by NEBESTA.

• Maximum retention period: 3 years from the request.

2.2. Direct Marketing purpose (such as NEBESTA promotional offers, newsletters) 

• Data subjects: users of the Website who asked for a demo. 

• Personal data processed: identification data (first name, last name, professional email).

• Legal basis for processing: Legitimate interests pursued by NEBESTA.

• Maximum retention period: 3 years from the last contact with the data subject. 

3/ Confidentiality on Personal Data

NEBESTA takes technical and organizational security measures to protect Personal Data against accidental or unlawful destruction, accidental loss, alteration, unauthorized disclosure of or access to Personal Data in accordance with applicable Data Protection Regulations.

Moreover, NEBESTA undertakes to:

• Not disclose any Personal Data to a recipient (except NEBESTA subcontractors), whether a private or public person, natural or legal, for a fee or for free, without the prior consent of the Data subject, unless otherwise provided by the French law and applicable to the processing;

• Ensure that all its employees, subcontractors and service providers providing services are aware of and comply with the rules relating to the confidentiality and protection of Personal Data.

4/ Your rights over your Personal Data

Depending on the legal basis for the processing, you have various rights over your personal data:

• Right of access, which allows you to find out what personal data is being processed and to obtain it in an understandable format;

• Right to correct your personal data;

• Right to object to the processing (for example, to request to no longer receive emails), particularly when the processing has NEBESTA's legitimate interest as its legal basis;

• Right to withdraw your consent when the processing has your consent as its legal basis;

• Right to erase your data;

• Right to restrict processing (your data is not deleted but it is made unavailable);

• Right of portability (you receive a file with the data that NEBESTA processes or you can ask to send this file directly to a third party).

You can exercise your rights by sending a request by email to privacy@nebesta.com.

Your request should specify which of these rights you wish to exercise. You may be asked to provide proof of identity by sending a copy of your ID.

5/ Cookie policy

A cookie is a small text file stored on your device (computer, tablet, smartphone) when you visit a website. Cookies are widely used to ensure websites function properly, improve user experience, and gather statistical information.

This Website uses only essential cookies that are:

• Essential for navigation and the proper functioning of the site; and

• Audience measurement cookies (analytics) implemented in a privacy-compliant manner.

In accordance with the guidelines issued by the French Data Protection Authority (CNIL), these audience measurement cookies are exempt from the requirement to obtain prior consent of the data subject.

For more information on cookies, you can consult the CNIL website www.cnil.fr. 

6/ Modification of the privacy policy

This Privacy Policy may be modified by NEBESTA according to changes in the functionalities of the Website and the services offered, as well as the laws applicable to its activities. Any major change will be communicated to the data subjects by any means NEBESTA deems appropriate.