Privacy Policy

Document last updated: July 18, 2024 

Table of Contents 

• Personal Data Collected and Processed by OPTM

• Purposes and Legal Basis of Processing  

• Communication of Personal Data  

• Transfer of Personal Data outside the European Union  

• Your Rights Regarding Personal Data  

OPTM, a French Société par Actions Simplifiée (simplified joint stock company), registered in the Paris Trade and Companies Register under no. 838918944 and whose registered office is located at 33 avenue du Maine, 75015 Paris, FR (hereinafter referred to as “OPTM”) is the “Data Controller” of the Personal Data collected and processed on the Site. 

The purpose of this Privacy Policy (hereinafter the “Policy”) is to define the rules applicable to the collection and processing of your personal data (hereinafter a “Personal Data(s)”) via our website www.tourmontparnasse56.com (hereinafter the “Site”) and to inform you, in accordance with Regulation No. 2016-679 of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter the “Regulation”). 

The Policy in force is the one accessible on the Site at the date of your connection to the Site. It may be modified at any time, in particular for updating purposes, or in accordance with changes in current regulations.  

If you have any questions about the Policy and, more generally, about the collection and processing of your Personal Data, please do not hesitate to contact us at the following e-mail address: dpo@tourmontparnasse56.com.  

Personal Data Collected and Processed by OPTM 

The Personal Data that OPTM collects and processes are those that you communicate to us and may include in particular: 

• Identification data (last name, first name, telephone number, e-mail address); 

• Bank details 

• Data relating to your education and professional situation (educational background, qualifications, profession, professional experience, curriculum vitae, cover letter, etc.); 

• Browsing data: this refers to the data we collect when you browse our site, such as the date and time of connection, browser type, browser language, IP address, and your login details for the website user area.  

In the event that you connect to our services using the social networking features made available to you, we will have access to some of the Data (your first name, last name, photograph, e-mail address and number of Facebook or LinkedIn friends) in your account on said social network, in accordance with the general terms of use of the social network concerned. We may also collect some of your Data when you interact with features of these social networks, such as “Like” features. 

In addition, MONTPARNASSE 56 (“Magnicity”) coordinates with its parent company, OPTM, the implementation of marketing campaigns for OPTM customers. In this context, OPTM and Magnicity are “Joint Data Processors”, and a joint responsibility agreement has been signed by the two entities to determine their obligations in this respect.  

OPTM does not collect or process sensitive data. 

Purposes, Legal Basis for Processing and Retention Periods 

OPTM only collects your Personal Data for specified, explicit, and legitimate purposes. Each processing of Personal Data by OPTM is founded on one of the legal bases provided for by the RGPD. 

In order to guarantee you complete transparency with regard to the purposes, and legal bases of processing within OPTM, you will find below an explanatory table in which the applicable retention periods are also mentioned: 

Disclosure of Personal Data  

OPTM is committed to limiting access to your Personal Data to only those persons who need to use it, namely: 

• OPTM employees and those of our parent company Magnicity; 

• Our IT service providers, which we use to host and maintain our website; 

• Our online payment service provider; 

• Our communications agency, which we use to manage our website and marketing strategy; 

• The publisher of the emailing solution used to manage our newsletter; 

• The editors of the solutions we use on our site to install cookies and our consent management platform. 

OPTM never discloses Personal Data to third parties, except: (1) in the event of judicial requisition; (2) if disclosure is necessary to comply with contractual, legal and/or regulatory obligations; (3) if you request or authorize disclosure. 

We only transmit to these third parties the Data they need to perform their services, and we require that they do not use your Personal Data for any other purpose. These third parties will act in accordance with our instructions and will be contractually bound to ensure a level of security and confidentiality of your Personal Data equivalent to ours, as well as to comply with applicable regulations on the protection of personal data. 

Transfer of Personal Data Outside the European Union  

If OPTM transfers your Personal Data outside the European Union, OPTM undertakes to take all the necessary guarantees to protect your Personal Data and have the assurance of RGPD-compliant processing:  

• Either by transferring the Data to a recipient located in a country that has been the subject of an adequacy decision by the European Commission certifying that it has a level of protection equivalent to that offered by the Regulation ; 

• Or by implementing or having implemented European Standard Contractual Clauses that have been approved by the European Commission as ensuring an adequate level of protection for your Personal Data; 

• Or by resorting to binding internal company rules validated by the competent data protection authorities; 

• Or by using any appropriate safeguards as referred to in Article 46 of the Regulation. 

• You can access a copy or extract of these documents by contacting us at the address given in this Policy. 

Security of Your Personal Data 

We take the necessary and appropriate technical and organizational measures to prevent unauthorized access to or modification, disclosure, loss or destruction of your Personal Data.  

To this end, we require our staff and service providers to comply with binding rules on data security and protection (such as confidentiality obligations, the use of encryption and anonymization techniques, the implementation of physical security measures, etc.). 

You have rights over your Personal Data, and in particular:  

• A right of access and information: you have the right to be informed in a concise, transparent, intelligible and easily accessible manner of how your Personal Data is processed. You also have the right to obtain (i) confirmation that Personal Data concerning you is being processed and, where applicable (ii) access to and a copy of such Personal Data. 

• A right of rectification: you have the right to obtain the rectification of inaccurate Personal Data concerning you. You also have the right to complete incomplete Personal Data concerning you, by providing an additional declaration. Should you exercise this right, we undertake to communicate any rectification to all recipients of your Data. 

• A right of deletion: you have the right to obtain the deletion of your Personal Data. However, this is not an absolute right and we may, in particular due to legal obligations, retain this Data. 

• A right to the limitation of processing: you have the right to obtain the limitation of processing on your Personal Data. 

• A right to Data portability: you have the right to receive the Personal Data you have provided to us, in a structured, commonly used and machine-readable format, for your personal use or to pass it on to a third party of your choice. This right applies only where the processing of your Personal Data is based on your consent, on a contract or where such processing is carried out by automated means. 

• A right to object to processing: you have the right to object at any time to the processing of your Personal Data for processing based on our legitimate interest and those carried out for commercial prospecting purposes.  

• The right to withdraw your consent at any time: you may withdraw your consent to the processing of your Personal Data where such processing is based on your consent.  

• The right to lodge a complaint with a supervisory authority: you have the right to lodge a complaint with the competent supervisory authority if you consider that your rights have not been respected. In France, this would be the CNIL. 

• The right to give instructions concerning the fate of your data after your death: you have the right to give us instructions concerning the use of your Personal Data after your death. 

You can exercise these rights at any time in one of two ways: 

• By e-mail to: dpo@tourmontparnasse56.com 

• By post to: OPTM, 33 avenue du Maine, 75755 Paris, France 

Your request will be processed within a maximum of 1 month, renewable if necessary for the same period. OPTM reserves the right to ask you for a copy of proof of identity to verify your personal interest in exercising your rights, unless your identity is sufficiently established; this copy will be kept for this purpose only and for the duration of the processing of your request only. 

If you consider that OPTM is not complying with its obligations with regard to the protection of Personal Data or is not responding satisfactorily to your requests, you can contact the Commission Nationale de l’Informatique et des Libertés (CNIL) via its website (www.cnil.fr) or by post: CNIL, Service des Plaintes, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex.