Privacy Policy
1. Information We Collect
Connection Data
When you visit our Site, our servers may record standard data provided by your web browser. This may include the Internet Protocol (IP) address of your computer, your browser type and version, the pages you visit, the time and date of your visit, the time spent on each page, and other details.
Hardware Data
We may also collect data about the device you use to access our Site. This data may include device type, operating system, unique device identifiers, device configuration settings, and geolocation data.
Personal Information
We may ask you for personal information, such as your:
First and last name
Email address
Mailing Address
Payment information
2. Purposes and legal basis of processing
We will collect and process your personal data in a lawful, fair and transparent manner. We will only collect and process your data where we have a legal basis to do so.
We collect and process your personal data for the following purposes and on the following legal bases, your personal data will not be further processed in a manner incompatible with these purposes:
(i) to enable you to place your order for the purchase of Emission Reductions under the Low Carbon Label Regulation in accordance with the General Terms and Conditions of Sale, which is necessary to take steps prior to entering into a contract with you and for the performance of the contract entered into with you pursuant to the General Terms and Conditions of Sale ;
(ii) to generate a personal certificate, if you place an order, to indicate the number of Emission Reductions purchased, which is necessary for the performance of the contract concluded with you in application of the General Terms and Conditions of Sale;
(iii) to allow you to access and use our Site, as well as any associated application, which is necessary for the performance of the contract entered into with you pursuant to the General Terms of Sale;
(iv) to allow you to personalize and customize your experience on our Site, which is in our legitimate interest to provide you with a good administration of our Site and a better experience of the Site;
(v) to contact you and communicate with you, which is necessary for the performance of the contract entered into with you pursuant to the General Terms of Sale;
(vi) for archiving and internal administration purposes, which is necessary for the performance of the contract entered into with you in accordance with the General Terms of Sale;
(vii) for analysis, market research and business development purposes, in particular to develop and improve our Site and any associated applications, which is in our legitimate interest to ensure proper administration and a better experience on our Site or on the basis of your consent, when we use cookies requiring the collection of your consent under the law;
(viii) for advertising and marketing purposes, including to send you promotional information about our products and services and information about third parties we believe may be of interest to you, based on your consent;
(ix) to comply with our legal obligations, such as the provisions of the Low Carbon Label Regulations, in particular to provide the Low Carbon Label Authority with your identity as a recipient of Emission Reductions and to allow the Low Carbon Label Authority to publish your identity on the public Low Carbon Label Register of recipients of Emission Reductions;
(x) to preserve evidence of our rights and the contract, based on our legitimate interest in establishing, exercising or defending our rights in the event of a dispute.
Where processing is based on your consent, you have the right to change your mind at any time (although this does not affect processing that has already taken place).
3. Recipients of Personal Data
We may disclose your personal data to:
(i) our employees, collaborators, companies and/or related entities, in order to provide our Site and services ;
(ii) third party service providers to enable them to provide their services, including (but not limited to) information technology providers, data storage, hosting and server providers, advertising network, statistical, error logging, maintenance or troubleshooting providers, marketing or advertising providers, payment system operators, and accounting, legal and professional advisors;
(iii) to courts, tribunals, regulatory, administrative and judicial authorities and law enforcement officials, in connection with our legal obligations, or current or future legal proceedings, or to establish, exercise or defend our rights;
(iv) the Low Carbon Label Authority to provide it with your identity as a recipient of Emission Reductions and to allow it to publish your identity on the public Low Carbon Label Registry of recipients of Emission Reductions.
4. International Transfers of Personal Data
We may transfer your Personal Data outside the European Union in connection with the provision of our Site and services. We will ensure that appropriate safeguards are in place by verifying that the recipients are established in a country that ensures an adequate level of protection or, failing that, that they have adhered to a binding certification scheme approved by the European Commission, or that they have adopted binding corporate rules approved by the European Commission, or that they have adopted standard contractual clauses approved by the European Commission.
Upon your request, we will provide you with a list of transfers of your data outside the European Union and a copy of the appropriate safeguards in place.
In particular, you are informed that the Site's hosting and statistical service providers may host data outside the European Union (including in the United States), and that we have ensured that they have adopted the standard contractual clauses approved by the European Commission.
5. Retention of Personal Data
We process your personal data for the period from the time of your purchase of Emission Reductions on the Site until you are registered as a beneficiary of Emission Reductions on the Low Carbon Label Registry under the Low Carbon Label Regulation, in order to comply with our contractual obligations under the Terms and Conditions.
We may also process your Personal Data for any additional period of time as required by the Low Carbon Label Regulations, in order to comply with our legal obligations.
Thereafter, we will retain and store your personal data for the time necessary to preserve evidence of our rights and contract under the General Terms and Conditions of Sale and on the basis of our legitimate interest in establishing, exercising or defending our rights in the event of a dispute, namely for a period of 5 years following the termination of our contractual relationship under the General Terms and Conditions of Sale.
We will also retain and archive some of your personal data for any additional period of time necessary to comply with our legal accounting obligations, namely for a period of 10 years following the end of each accounting period.Where your data is collected and processed solely on the basis of your consent, such processing will be stopped upon withdrawal of your consent and the data will be deleted as soon as technically possible.
Specific retention periods apply in relation to cookies, as set out below. These retention periods are without prejudice to the exercise of the right to have your personal data deleted as provided below. Your personal data may also be stored and archived in a permanently anonymized form for statistical and analytical purposes.
6. Security
We protect your personal data by implementing appropriate technical, IT, organizational or contractual measures to ensure a level of security appropriate to the risks presented by the data processing, in particular against loss, unauthorized destruction, unauthorized alteration, unauthorized disclosure, unauthorized access or unauthorized use, whether accidental or unlawful.
Despite the security measures in place to protect your personal data, you must take the necessary steps to protect your personal data and maintain your privacy on the Internet and when using the Site.
In any event, if we become aware of a breach of your personal data that is likely to result in a high risk to your rights and freedoms, we will inform you, if you are concerned by this breach, as soon as possible, so that you can take the necessary measures to protect your personal data, after having first informed the CNIL, in accordance with the law.
7. Your Personal Data Rights
Right of access:
You may ask us whether your data is or is not being processed and, where it is, request a copy of the information about your data that we have. Where possible, we will provide this information in CSV or other machine-readable format.
Right of correction:
You may request to correct or complete any personal data that is inaccurate, incomplete, irrelevant or out of date.
Right to withdraw your consent:
Where a processing is based solely on your consent, you have the right to withdraw your consent, in which case we will stop processing your data based solely on your consent.
Right to object:
You have the right to object to the processing of your data on legitimate grounds, where the processing is based on the legitimate interest of Rize ag. Where processing is carried out for the purpose of canvassing by Rize ag, you have the right to object to the processing of your data without grounds.
Right to deletion:
You have the right to request the erasure of your data when the processing is no longer necessary, when the processing is unlawful or when you have exercised your right to withdraw your consent or your right to object.
Right to limitation:
You have the right to request the temporary limitation of a processing of your data, in certain cases, when provided by law.
Right to portability:
You have the right to request a copy of your personal data in a structured and commonly used machine-readable format and the transmission of this data to another data controller, where the law so provides.
Complaints:
If you believe that we have violated applicable data protection regulations and you wish to file a complaint, please contact us using the contact information below and provide us with full details of the alleged violation. We will promptly investigate your complaint and respond to you, in writing, setting out the outcome of our investigation and the steps we will take to address your complaint.You also have the right to contact a regulatory body or data protection authority in relation to your complaint, including the Commission Nationale de l'Informatique et des Libertés (CNIL) by filing a complaint via this link: https://www.cnil.fr/fr/plaintes.
If you wish to exercise any of the above rights, please contact us by e-mail at the following address: contact@rizeag.com or by post at the following address:
RIZE - Data Management Department - 128 Rue de la Boétie - 75008 Paris
8. Cookies
We use "cookies" to collect personal data about you and your activity on our Site. A cookie is a small file that our Site stores on your computer and accesses on each visit to allow us to analyze your use of our Site. This helps us to provide you with content based on the preferences you have entered.
We use "cookies" to collect personal data about you and your activity on our Site. A cookie is a small file that our Site stores on your computer and accesses on each visit to allow us to analyze your use of our Site. This helps us to provide you with content based on the preferences you have entered.
We use the following cookies:
- Technical cookies, which are necessary for the administration, operation and security of our Site; Technical cookies are used without requiring your consent.
You can also authorize, block or deactivate the use of these cookies by configuring the browser settings of the terminal used and you can change your choice at any time. Your choice will be retained for a maximum period of 6 months. Cookies will be kept on your device for a maximum of 13 months. The data collected via these cookies will be kept for a maximum of 25 months.
9. Change of structure
In the event of a change in our corporate structure (including a merger, acquisition, sale to any third party entity, etc.), or in the unlikely event that we cease operations or go out of business, we will include the data as one of the assets transferred to any third party acquiring our company. You acknowledge and agree that such transfers may occur and that any third party acquiring our company may continue to use your personal data in accordance with this policy.
10. Limitation of the scope of the privacy policy
Our Site may contain links to external sites that are not developed or operated by us. Please note that we have no control over the content and policies of these third-party sites, and we cannot be responsible for their privacy practices or for protecting your data.
11. Changes to this policy
We may change our privacy policy at our discretion to reflect changes in laws and regulations. We will take reasonable steps to notify you of such changes on our Site. Your continued use of our Site following the modification of this Privacy Policy will be deemed to be acceptance of such modifications. If there is a material change to this Privacy Policy, such as a change in the legal basis on which we process your personal data, we may ask you to consent again to the amended Privacy Policy.
12. Language of this policy
The privacy policy is available on the Site in English and French. In the event of any discrepancy or doubt as to the interpretation of this policy between the English and French versions, the French version shall prevail over the English version.
13. Data controller
The data controller is Rize ag, a simplified joint stock company (SAS) with a capital of €9,965, registered in the Paris Trade and Companies Register under number 880 026 365, whose registered office is located at 128 Rue de la Boétie - 75008 Paris. Rize ag can be contacted by email at the following address: contact@rizeag.com or by mail at the following address RIZE - Service de gestion des données - 128 Rue de la Boétie - 75008 Paris.