Privacy policy

Introduction.

This Privacy policy covers the personal information (also known as personal data) that DT Master Carbon, (‘DT Master Carbon’, ‘we’, ‘our’, or ‘us’) collect, store, use, disclose and otherwise process about you, as well as the rights available to you when DT Master Carbon acts as the data controller for such personal information.

Scope of this Privacy Policy. This policy does not include personal information processed by DT Master in its capacity as a processor or service provider on behalf of its customers. Any personal information uploaded to or processed through the services by a customer constitutes "Customer Content" and is governed exclusively by the applicable customer service agreement, purchase orders, and Data Processing Agreement (DPA).

1. Who Collects Your Data?

DT Master Carbon. In the context of this Privacy Policy, DT Master Carbon is the data controller. This means that DT Master Carbon is the entity that decides how and why your personal data is collected and used.

Who we are. DT Master Carbon is a company registered in France with its registered office at 12 place Carnot, 93110 Rosny-sous-Bois , company number 949 102 610.

How to contact us:

By contacting us at mia@dtmastercarbon.fr
By sending us a letter at DT Master Carbon, 12 place Carnot, 93110 Rosny-sous-Bois
For any other concerns, please consult our website and the relevant contact forms.

How to contact our Data Protection Officer (DPO):
By contacting us at it@dtmastercarbon.fr
By sending us a letter at DT Master Carbon, Attn: DPO, 12 place Carnot, 93110 Rosny-sous-Bois.

2. What Data Do We Collect?

Data you provide directly to us: civil identity (name), account data (password retrieval and verification), contact data (email address), contract data (the Service you subscribe to), payment and billing information (invoices, billing address), and communications (comments, feedback, reviews, recommendations, personal profile). We collect this data when you create your account, subscribe to a Service, subscribe to our communications, subscribe to a paid Service, or use the Services.

Data generated when you use the Services: technical data (IP address, login, computer and connection information, network protocol), usage data (page response times, length of visits, page interaction information, browsing methods), purchase history (your transactions on the Website), and cookies as listed in our Cookie Policy. We collect this data automatically when you use the Services.

Data indirectly provided to us: data publicly available on the Internet and data provided by third parties such as our hosting provider Wix.com, payment gateway providers, and other service providers, which may include personal data necessary to provide and operate the Services. We use good practices to filter out personal data where possible.

3. Why Do We Use Your Personal Data?

We use your personal data only for the following purposes and on the following lawful bases:

To provide and operate the Services -your civil identity, account, contract, technical, and usage data and purchase history. Legal basis: performance of the contract between you and DT Master Carbon.
To provide customer assistance and technical support -your civil identity, contact, and communications data. Legal basis: performance of the contract between you and DT Master Carbon.
To contact you with service-related notices and promotional messages -your civil identity and contact data. Legal basis: your consent for marketing communications; performance of the agreement for non-marketing communications.
To create aggregated statistical data and inferred non-personal information _your usage and technical data. Legal basis: our legitimate interest in improving the Services and introducing new features.
To create and administer your account-your civil identity, account, and contract data. Legal basis: performance of the contract between you and DT Master Carbon.
To manage the security and integrity of the Services- your civil identity, account, technical, contact, and usage data. Legal basis: our legal obligations and our legitimate interest in managing security and integrity.
To manage and enforce our Terms of Service and licenses, including moderation and abuse monitoring -your civil identity, account, contact, and communications data. Legal basis: performance of the contract between you and DT Master Carbon.
To manage our commercial relationship with you, including payments and billing -your civil identity, account, contact, and payment and billing data. Legal basis: performance of the agreement and our legal obligations.
To reply to your requests to exercise your rights-your civil identity, account, and contact data and any other personal data included in your request. Legal basis: our legal obligation to reply.
To comply with any applicable laws and regulations-any data necessary to comply. Legal basis: our legal obligations.

Where we rely on your consent, you may withdraw it at any time. Where we rely on legitimate interest, you may object at any time as described in Section 7

4. Cookies

When you visit our website, we use cookies (small text files stored on your device) to enhance your experience on the Services. For more information about the way we use cookies, please see our Cookie Policy, available on our website.

5. How Long Do We Keep Your Personal Data?

We retain your personal information only as long as necessary to fulfill the specific purposes for which it was collected, or to satisfy applicable legal, accounting, and reporting requirements. Retention periods vary based on the nature of our relationship with you and the category of data.

When determining appropriate retention periods, we evaluate:

Data Category & Usage: The sensitivity and type of information, and whether it follows automated deletion schedules (such as routine marketing data deletion).
Service Delivery: Whether retaining the information is necessary to maintain your account or uphold our contractual obligations.
Legal Compliance: Applicable statutory retention requirements under relevant laws or regulatory frameworks.
Legitimate Business Interests: Requirements for network security, fraud prevention, audit trails, and defending or enforcing legal rights.

6. Who Do We Share Your Personal Data With?

We share your personal data strictly on a need-to-know basis with the following categories of recipients:

Internal Team Members: Authorized personnel who require access to your personal data solely to fulfill their professional duties.
Hosting and Infrastructure Providers: Our website and online platforms are hosted on Wix.com, which provides the infrastructure for our digital services. User data is stored on Wix.com’s secure databases and servers behind firewalls.
Financial Institutions & Payment Processors: Banks, financial organizations, and payment gateways. All direct payment gateways utilized through our platform adhere to PCI-DSS standards (as managed by the PCI Security Standards Council) to ensure the secure handling of cardholder data.
Regulatory Authorities: Public and governmental authorities, including the French Data Protection Authority (CNIL), to fulfill statutory obligations.
Legal and Professional Advisors: Competent courts, mediators, accountants, auditors, legal counsel, bailiffs, and debt collection agencies when required for legal compliance or the exercise of our legal rights.
Third-Party Service Providers: Vetted vendors who process data on our behalf. Prior to engagement, our security team conducts technical and privacy audits to ensure vendors meet our security standards, and we execute a dedicated Data Processing Agreement (DPA) with each provider.

We do not transfer your personal data outside of the European Union.

7. Your Rights

You can exercise the following rights:

Access. You have the right to know if we process your personal data. You also have the right to request a copy of such personal data and to obtain further information about the way we process your personal data.
Portability. You have the right to obtain and transfer your personal data you provided to another entity.
Rectification. You have the right to ask us to update or correct your personal data.
Deletion. You have the right to delete and/or ask us to delete your personal data.
Objection. You have the right to object to the processing of your personal data. This right does not apply when we have a legal obligation to process your personal data.
Consent withdrawal. You have the right to withdraw your consent to the processing of your personal data at any time.
Limitation. You have the right to ask us to freeze the processing of your personal data.
Automated decision. You have the right to not be subject to an automated decision (including profiling) and to appeal such a decision. DT Master Carbon does not engage in profiling or automated decision-making in the processing of personal data.
Post mortem. You have the right to tell us how you would like us to process your personal data after your death.
Lodge a complaint. You have the right to lodge a complaint before the competent data protection authority, including the French data protection authority (the CNIL), which is the competent supervisory authority to deal with any Data Privacy issue concerning DT Master Carbon, including, where applicable, a User's complaint.

You can exercise these rights at all times:

By contacting DT Master Carbon at mia@dtmastercarbon.fr and/or at it@dtmastercarbon.fr
By sending us a letter at DT Master Carbon, Attn: Privacy Team, 12 place Carnot, 93110 Rosny-sous-Bois.

We will take every step to make sure we reply to your requests.

8. Security

We implement appropriate technical and organisational measures to protect your personal data, including access control, encryption of devices, secured hosting, and staff confidentiality. Our website is hosted on the Wix.com platform, and User's data is stored on secure servers behind a firewall, while all direct payment gateways offered by Wix.com and used by our company adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council.

9. Children

Our Websites, Services, and Events are not directed at children. We do not knowingly collect personal information from children under the age of 18. We do not knowingly collect personal information for children between 13-18 unless we have obtained consent from a parent or guardian, such collection is subject to a separate agreement with us, or the visit by a child is unsolicited or incidental. If you are a child, please do not attempt to register for the Services or Events or send any personal information about yourself to us. If you believe we have mistakenly or unintentionally collected personal information of a child without appropriate consent, please contact us by using the information in the ‘Contact us’ section below and we will take steps to delete their personal information from our systems.

10. Changes to This Privacy Policy

DT Master Carbon reserves the right to modify this Privacy Policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the Website. If DT Master Carbon makes material changes to this policy, DT Master Carbon will notify the Users and Clients here that it has been updated, so that the Users and Clients are aware of what information DT Master Carbon collects, how DT Master Carbon uses it, and under what circumstances, if any, DT Master Carbon uses and/or discloses it. We may amend this Privacy Policy from time to time as our products continuously evolve. Make sure to check this Privacy Policy frequently. The latest version is always available on our website.

11. Contact Us

If you have any questions about this Privacy Policy or about how DT Master Carbon handles your personal data, you may contact us at mia@dtmastercarbon.fr. You also have the right to lodge a complaint before the competent data protection authority, including the French data protection authority (the CNIL).