Privacy Policy

1. Objective and scope of application of this Policy

SAFI gives the greatest importance and takes the greatest care to protect privacy and personal Data, as well as complying with the provisions of applicable Legislation.

EU Regulation number 2016/679 of April 27, 2016, relative to the protection of physical persons in terms of the Processing of Personal Data and the free flow of this Data (referred to hereafter as “RGPD”) affirms that personal Data must be processed in a lawful, fair and transparent manner. Thus, this privacy policy (referred to hereafter as “Policy”) seeks to provide you with simple and clear information on the Processing of Personal Data about you, as part of your browsing and transactions conducted on our website.

2. Data Controller and subcontractor

As part of our business activities as a trade fair organizer, SAFI collects and uses Personal Data connected to you, physical persons (referred to hereafter as “the Person Involved”).

For all Processing, SAFI, registered in the Paris Business and Companies Registry under no 388 424 129, with its headquarters at 8 Rue CHAPTAL, 75009 Paris, determines the methods and end-uses of Processing. Thus, we act as Data Controller, as defined in the Regulation related to Personal Data, and, notably, EU Regulation number 2016/679 relative to the protection of physical persons in terms of the Processing of Personal Data and the free flow of this Data.

For certain types of processing, notably those specified in article 4 of this Policy, SAFI may also act as a subcontractor for its clients, in compliance with Article 28 and subsequent articles of the RGPD.

3. What Personal Data do we collect, and how?

By using our website, or as part of our varied business activities, you provide us with a certain amount of information about you, including some elements that can personally identify you (“Personal Data”). Such is the case when you browse through our website, fill out forms online, or when you simply participate in our events and subscribe to our services.

The nature and quality of Personal Data collected about you vary depending on the relationship you establish with SAFI, the main ones being:

• Identification data: This includes all the information that may allow us to identify you, such as your last name, first name, email address, or phone number, as part of the creation and management of your visitor or exhibitor account, of your contact request, estimate, or access badge request for our fairs. We also collect your postal address, in addition to this data.
•  
• Personal data: As part of your participation in the fairs, we may collect information about your tastes and preferences to offer you relevant content and products in the future.
•  
• Professional data: As part of your account creation, we collect your job title, company name, and your field of business. We may also receive, through our specially dedicated recruitment email address, your CV and application letter, for unsolicited job applications or replies to a job opening.
•  
• Connection data: This is all the information we may need to access your personal account, such as the password and other information needed for authentication and account access.
•  
• Browsing data: By browsing our website, you interact with it. Consequently, certain information related to your browsing is collected, such as your IP address.
•  
• Financial data: This corresponds to Banking Data such as the numbers of your bank card/debit or credit card and your purchases when, for example, you place orders, or your bank details.

4. Why do we collect your Personal Data and how?

We collect your personal data for specific purposes, based on a variety of legal bases.

As part of the management of our websites, SAFI uses personal data as follows:

As part of the management of our offerings on the MOM platform, at our trade fairs, or at Paris Design Week, SAFI uses personal data as follows:

As part of the promotion of our services, SAFI uses personal data as follows:

When we act as a subcontractor for our vendor clients, we use personal data as follows:

5. Do we share Personal Data?

Your Data is provided to SAFI employees in charge of managing and executing contracts and legal obligations, for the purposes of collection and within the limits of their respective responsibilities.

They are subject to being passed along to the following recipients, for certain tasks connected to these purposes, and within the limits of their respective missions and authorizations:

• Entities of the Ateliers d’Art de France Group and RX France;
•  
• Our service providers, suppliers, agents, and representatives, notably, and not limited to, payment firms, exhibition centers, subcontractors present at event sites, customer service, email service providers, IT service providers, and direct-mail firms and shipping agents, to process the data needed based on your instructions and in compliance with this privacy policy and any other applicable privacy or security policy.
•  
• Duly authorized government authorities (legal, audit, etc.), as part of our legal and regulatory obligations;
•  
• Regulated professionals (lawyers, bailiffs, etc.) who may intervene as part of the implementation of guarantees, debt collection, or disputes

When Data is communicated to our service providers and subcontractors, they are also asked not to use this Data for purposes other than that initially intended. We do our utmost to ensure that these Third Parties maintain the confidentiality and security of your Data.

In any event, only essential Data is provided. We do our utmost to guarantee secure communication or transmission of your Data.

We do not sell your Data.

6. Is your Data transferred to Third countries?

SAFI strives to keep Personal Data in France, or, at the very least, within the European Economic Area (EEA).

Nevertheless, it may happen that the Data we collect when you use our platform, or as part of our services, may be transferred to other countries. This is the case if, for example, some of our service providers are located outside the European Economic Area.

In the case of this type of Transfer, we guarantee that it will be carried out:

• Toward a country that ensures an adequate level of protection, in other words, a level of protection equivalent to that required by European regulations;
•  
• As part of standard contractual terms;
•  
• As part of internal corporate regulations.

7. How long do we save Personal Data?

We save your Personal Data only as long as needed to carry out the purpose for which we hold this Data, and we do so to meet your needs or fulfill our legal obligations (cf. article 4).

Storage time varies depending on several factors, such as:

• The business needs of SAFI;
•  
• Contractual requirements;
•  
• Legal requirements;
•  
• Recommendations from regulatory authorities.

8. How do we guarantee the security of your Personal Data?

SAFI commits to protecting the Personal Data we collect or process against any loss, destruction, alteration, or non-authorized access or disclosure.

Thus, we do our utmost, using the appropriate technical and organizational measures, depending on the nature of the Data and the risks its Processing entails. These measures must allow for the maintenance of the security and confidentiality of your Personal Data. They may include practices such as limiting access to Personal Data to authorized persons, due to their positions in the company, creating pseudonyms, or even encryption.

In addition, our practices and policies and/or physical and/or logical security measures (secure access, authentication process, backup copies, software, etc.) are regularly verified and updated as needed.

9. What cookies do we use on our website?

When you browse our website or open our emails, cookies and pixels (also referred to as trackers) may be placed on or read from your device.

9.1 What is a cookie?

Cookies are digital files that are automatically deposited into the hard drive of your computer, tablet, or mobile phone when you browse our website. They are managed by your web browser (Internet Explorer, Firefox, Safari, or Google Chrome).

9.2 Are cookies deposited when you browse SAFI’ websites?

During your first visit to SAFI websites, if cookies requiring your authorization are deposited, a banner will inform you of the presence of these cookies and will invite you to indicate your selection. Cookies that require your consent, per current regulations, are only deposited if you accept them. You may be informed of and set up your cookies to accept or reject them by clicking on “my cookie settings” at the bottom of each page on the Website, or by configuring your browser.

9.3 What data is collected using cookies?

All data related to a terminal at a given moment may be collected using cookies, notably:

• One or several technical IDs that allow for the identification of your internet router;
•  
• The date, time, and duration of a terminal’s connection to the Website;
•  
• The internet address of the source page of the terminal accessing the Website;
•  
• The type of operating system of the terminal (e.g.: Windows, macOS, Linux, Unix, etc.);
•  
• The type and version of the browser software used by the terminal (Internet Explorer, Firefox, Safari, Chrome, Opera, etc.);
•  
• The brand and model of the mobile phone or tablet;
•  
• Possible download errors;
•  
• The language used by the browser software on the terminal;
•  
• The details of content viewed and shared (name displayed and Website navigation).

When you receive an email from us, it may contain a tracking pixel. A tracking pixel is a very small, invisible image that allows us to determine whether the email has been opened. This technology is used for the following purposes:

• Measuring the open and click-through rates of our campaigns;

•  

• Producing aggregated statistics regarding the performance of our email communications;

•  

• Where applicable, adapting and personalising future communications based on your level of engagement with our emails.

This processing activity is based on your consent. You may withdraw your consent at any time by clicking the unsubscribe or opt-out link included in our emails or by contacting us at exercervosdroits@safisalons.fr.

The data collected through this tracking pixel (email identifier, date, event type, related campaign and email address) are retained for a period of 6 to 13 months and processed by our technical service providers, Imagino and Brevo, located in France. These data are not disclosed to any other third parties.

To exercise your rights of access, rectification or erasure, please refer to the section "What are your rights?" of this Privacy Policy.

9.4 What is a pixel?

A pixel is an invisible image embedded in a web page or email that enables the measurement of views and user interactions.

9.5 Pixels in our emails

Our newsletters and marketing emails may contain tracking pixels that allow us to determine whether an email has been opened and which links have been clicked, in order to improve our communications. You may object to this processing at any time by unsubscribing using the link provided in each email.

10. What are your rights?

For Personal Data that we collect/process, you may exercise the following rights:

• Right to access (article 15 of the RGPD): You have the right to request access to personal data that we have about you, and you may request a copy of it (find out mores);
•  
• Right to correction: You may request the correction of any inaccurate data about you;
•  
• Right to deletion (article 17 of the RGPD): You may request the deletion of your personal data under certain circumstances (find out more);
•  
• Right to portability (article 20 of the RGPD): Under certain conditions, you may receive all the personal data about you that you have supplied, in a structured format. You also have the right to demand that we send it to another controller, to the extent that it is possible (find out more);
•  
• Right to oppose its processing by invoking justified interest (article 21 of the RGPD – find out more);
•  
• Right to retract your consent at any time (article 7-3 of the RGPD – find out more) ;
•  
• Right to the limitation of processing (article 18 of the RGPD): You have the right to restrict the processing of your data if:
  - You dispute the accuracy of your data, until we can verify its accuracy;
  - Its processing is illegal, but you don’t want us to delete your data;
  - We no longer need your personal data for processing, but you need your data to file for, assert, or defend against legal procedures;
  - You are opposed to its processing based on related reasons, while waiting to verify that our legitimate and necessary reasons for the pursuit of processing take precedence over these interests;
  
  If this personal data is subject to this type of limitation, we will only process your data with your consent, or to file for, assert, or defend ourselves against legal action (find out more).
•  
• Right to define what happens to your data after your death and to choose whether we communicate (or not) your data to a third party that you designate in advance (Law for the Digital Republic – find out more).

You may exercise all these rights upon request from the Data Protection Officer (DPO) at SAFI at the following email address: exercervosdroits@safisalons.fr

When you submit a request to exercise a right, please specify as much as possible the purview of the request, the type of right to be exercised, the personal data processing involved, and any other useful information, to facilitate the review of your request. Furthermore, if there are reasonable doubts about your identity, proof of identity may be requested.
If, after contacting us, you believe that your rights to your data have not been respected, you may submit a complaint to the National Commission for IT and Freedoms (CNIL).

11. Update to this Policy

This Policy may be updated regularly to take into account evolutions in Regulations related to Personal Data.

Date of latest update 25/10/2022.