Please read this privacy policy carefully in order to understand how your personal data is gathered, processed and stored when you use HeyTeam’s application (the “Application”). 

For the purposes of this privacy policy, the data controller in charge of processing your personal data is INTELLIGENCE+ SAS, a French Joint Stock Company; share capital: €40,570.20; registered in Paris, France under no. 820 551 778; registered address: 10 Avenue Kléber, 75116 Paris, France (“HeyTeam”, “we”, “us” and “our”). 

As explained below, some of your personal data that is processed via the Application is collected directly by the company to which you belong and that enables you to use the Application; in that case we only act as a data processor / subcontractor of the enterprise involved, which is then the data controller.

We may be contacted through the following form for any claim or question concerning this privacy policy. 

1. What personal data do we collect?
   We receive and process a number of elements of information that may include your personal data when you access and use the Application, particularly when you fill in any information gathering form as part of the Application or when you register or update the information in your user account.
   1. The user’s contact details
      When you register for the Application, you will be asked to input a number of personal data elements that are needed for the creation of your user account and that may be used to identify you during your connection to the Application.
   2. Connection data
      During your connection to the Application, we gather your connection and browsing data, i.e. information that is automatically recorded by our servers when you access and use the, whether or not you are registered as a member of the Application.
   3. Data collected directly by your enterprise when you use the Application
      When you use the Application, you may be asked to disclose personal data directly to your manager or to a director of the company to which you belong and that initially enabled you to use our Application.
      
      In particular, this may include all data relating to your professional life (e.g., position, department, area of expertise, career movements within the company), as well as the administrative documents concerning you that must be collected by your company’s human resources department through our Application.
      
      Please refer to the confidentiality policies that are applicable within your company in order to determine how your company processes your personal data that it collected via HeyTeam’s Application.
2. For what purposes and under which legal basis your personal data are collected ?
   We collect, process and store your personal data for the following purposes: 
   - When you use the Application and create a user account, your personal data is processed and stored in order to enable the creation of your user account, in accordance with our General Terms of Use. In this respect, the processing of your personal data is thus based on our contractual commitments.
   - As part of the administration of the Application, we may also send you e-mails concerning your registration with the Application, technical notifications, updates and security alerts. In this respect, the processing of your personal data is thus based on our legitimate interest in administering our Application.
   - we also host the personal data that you transmit to the other members of your enterprise via the Application. We only process this data if instructed to do so and in the capacity of data processor of your enterprise, to which you have decided to disclose this data. The processing of these data is based on the performance of your employment contract or the legitimate interest of the company that allowed you to use our Application. We invite you to refer to the privacy policies applicable within your company in order to understand more precisely the purposes and legal bases for which your company processes the personal data concerning you that it collects via the Application offered by HeyTeam.
   
   Subject to anonymising it beforehand so as to prevent you from being identified, we may moreover use your personal data to compile statistics on the use of the Application.
   
   
3. Who can access your personal data?
   Your personal data will only be accessible by duly authorised persons within HeyTeam for purposes strictly linked to their respective duties. This may include members of the following teams: customer service, customer support and technical support.
   
   We may moreover have to share your personal data in the following situations:
   - your personal data may be transmitted to our hosting company based in Europe which enables us to provide access to the Application, in keeping with the contractual terms signed with this hosting company, which may not depart from the terms of this privacy policy.
   - your personal data may also be disclosed where need be to the police (under a court warrant) or to any person who is legally empowered to receive this information (pursuant to a court order). 
   
   Finally, please note that the company to which you belong and that enables you to use the Application will also have access to your personal data. This enterprise may moreover collect some of your personal data via the Application, for its own purposes.
   We invite you to refer to the privacy policies applicable within your company in order to understand more precisely the purposes and legal bases for which your company processes the personal data concerning you that it collects via the Application offered by HeyTeam.
   In accordance with the applicable European data protection regulations, HeyTeam and your company have executed a data processing agreement.
4. How is your personal data hosted?
   We endeavour to secure the personal data of the users of our Application adequately and appropriately and have taken all useful precautions to preserve and ensure that our hosting company preserves the security and the confidentiality of this personal data, and in particular to prevent the data from being distorted, compromised or disclosed to unauthorised persons.
   However, no transmission mode over the Internet and no means of storing information in electronic formal is 100% reliable. Therefore, we cannot fully guarantee the security of the data that is transmitted to us nor that of the personal data that we store. Any security breach will however be notified to you in strict compliance with the applicable regulations.
   
   All the personal data that we gather is hosted in the European Union. We do not transfer personal data to third parties based outside the European Union.
   Any personal data will normally be destroyed immediately when your user account with the Application is deleted.
   It may however be archived in a segregated database for a period of time that may not exceed five (5) years as of the date on which it was archived, in order to meet our legal obligations.
5. Exercising your rights
   In accordance with the applicable European data protection regulations, you have the following rights:
   - a right of access enabling you to find out at any point in time whether your personal data is or is not being processed by us and if this is the case, to have access to the personal data and the information required by law concerning the terms under which this data is being processed;
   - a right of rectification enabling you to request that any inaccuracy in your personal data be corrected as soon as possible;
   - a right to be forgotten, enabling you to request that your personal data be erased as soon as possible if (i) the data’s retention is no longer necessary for the purposes for which it was gathered; (ii) you have opposed the processing of the data and therefore wish it to be erased; (iii) the data is being processed illicitly; or (iv) the data must be erased to comply with a legal obligation stipulated either by European Union law or by French law;
   - a right to limit the processing of your personal data (i) when you challenge the accuracy of the data in question, throughout the period required to check its accuracy; (ii) if pursuant to processing of the data involved that turns out to have been illicit, you prefer to limit the processing of the data rather than request the complete erasure of the data; (iii) if the data is no longer required for the purposes for which it was being processed but it is still needed for the acknowledgement, exercising or defence of rights in court; or (iv) when you have opposed the processing of your personal data and you wish to impose a limitation on its processing throughout the period required to check whether the legitimate grounds invoked are justified;
   - a right to request the portability of your data, enabling you to receive your personal data in a common, structured and machine-readable format, or to request that your personal data be transmitted to another data controller, provided that this portability request covers personal data that you have provided directly and that your request for portability does not infringe the rights and freedoms of any third parties;
   - a right to oppose the processing of your personal data for reasons linked to your personal circumstances; the contentious processing will be discontinued unless there are legitimate and overriding grounds justifying its continuation in keeping with the applicable regulations;
   - a right to issue instructions concerning the storage, erasure and disclosure of your personal data after your death;
   - should the processing of your personal data be based on your consent, you also have the right to withdraw this consent at any point in time.

These rights may be exercised by contacting us directly at the following e-mail address: dpo@heyteam.com  .

You may also send any claims concerning the use of your personal data to CNIL, France’s data protection authority, 3 Place de Fontenoy, TSA 80715, 75334 Paris CEDEX, France.