Privacy & cookie policy
RIVIERA FLOW attaches great importance to the protection of your personal data, in accordance with the General Data Protection Regulation (GDPR), the ePrivacy Directive, and French Law No. 78-17 of 6 January 1978 known as the "Informatique et Libertés" Act.
For any information on the protection of personal data, you may also consult the website of the French data protection authority, the Commission Nationale de l'Informatique et des Libertés (CNIL): www.cnil.fr.
For further information and for the definitions of capitalised terms, please refer to our T&Cs: https://rivieraflow.com/cgv.
Who is the data controller of my personal data?
The data controller is the company that determines for what purpose and how your personal data are used.
The personal data collected on the Site are processed by:
RIVIERA FLOW, a French simplified joint-stock company (SAS) with a share capital of €1,000.00, registered under number 992 509 539 with the Paris Trade and Companies Register (RCS), having its registered office at 200, rue de la Croix-Nivert, Paris (75015)
It is referred to as "RIVIERA FLOW" in this Policy.
What personal data about me are collected?
RIVIERA FLOW may collect and process the following categories of personal data:
- Identification (first name, surname, e-mail address, bank and billing details);
- Services (the services subscribed to, information relating to the project and to support requests);
- Technical (IP address, connection and Site usage data, your browser type and version, time zone setting and location, your browser plug-in types and versions, operating system and other technologies relating to the device);
When and how do we collect your personal data?
RIVIERA FLOW collects your personal data in several ways:
- Direct collection: You provide us yourself with Account personal data when you log in and Services personal data when you use the said Services.
For example: when you fill in a contact form, when you write to our contact e-mail address, etc.
- Automated interactions: We collect Technical and Account personal data automatically, by means of cookies, server logs and other similar technologies.
For example: when you log in to our Site, browse our Platform and use the Services, etc.
Why are your personal data processed and for what purposes?
RIVIERA FLOW wishes to provide you with the best services and features so as to give you access to a Site that is simple and smooth to use according to your needs. To this end, we process in particular your personal data relating to your use of our Platform in order to provide you with suitable services.
We thus use your data in particular for the following purposes and on the following legal bases, for the retention periods set out below:
Should personal data be used for other purposes, RIVIERA FLOW undertakes to obtain the prior consent of the data subjects before implementing the processing and to specify the said purpose(s) in advance.
What communications may I receive?
By using the Services, you may receive the following types of communication:
- E-mails relating to the provision of the Services;
- E-mails relating to invoicing;
- E-mails relating to commercial prospecting;
How long do we keep your personal data?
We keep your personal data only for as long as is necessary to achieve the purposes set out above, and then archive them with restricted access for an additional period in order to comply with our legal and/or regulatory archiving obligations and for the duration of the applicable limitation periods. At the end of this additional period relating to the statutory limitation periods, your personal data are permanently deleted.
As regards cookies placed on your device, they are kept for a maximum period of thirteen (13) months from the first time they are placed on the device.
Who are the recipients of my personal data?
The personal data we collect may be transmitted to the processors we use for the provision of our services within the scope of the purposes mentioned above.
By accepting the T&Cs, you give RIVIERA FLOW your written and general authorisation to subcontract the processing of your personal data to processors and/or sub-processors.
The list of our processors is set out below:
At least one month in advance, RIVIERA FLOW shall inform the Client of any intended change concerning the addition or replacement of processors by updating beforehand the list appearing in the table presented above.
We ensure that the processors we use provide the guarantees required by the applicable personal data protection regulations. They have access only to the personal data necessary for the performance of their services and are not authorised to process your data for other purposes. We also ensure that each of these processors provides guarantees of security and protection of the integrity of your personal data and of their processing in compliance with the applicable regulations.
Finally, personal data may also be disclosed to public bodies, officers of the court and ministerial officers, in order to comply with any applicable law or regulation, to whom we are required to respond.
Can your personal data be transferred outside the European Union?
You are informed that data concerning you may be transmitted, for the purposes listed above, to processors located in countries outside the European Union.
If we transfer your personal data outside the European Union, we ensure that a similar level of protection is guaranteed by putting in place:
- either the transfer of your personal data to a country located outside the European Union but recognised by the European Commission as providing an adequate level of protection;
- or the use of standard contractual clauses based on the model provided by the European Commission.
Where applicable, the similar level of protection put in place is detailed in the table of processors set out above.
What are your rights?
Under the conditions provided for by the applicable personal data protection regulations, you have:
- the right to obtain confirmation as to whether or not personal data concerning you are being processed and, where applicable, to access them;
- a right to rectification of personal data concerning you that are inaccurate or incomplete;
- under certain conditions, a right to erasure of your personal data;
- under certain conditions, a right to restriction of the processing of your personal data;
- a right to portability of your personal data;
- the right to give instructions regarding the fate of your personal data after your death (retention, erasure or disclosure to a designated person);
- the right to object, under certain conditions, to the processing of your personal data.
For further information on your rights with respect to your data, we invite you to consult the CNIL website, available here: https://www.cnil.fr/.
You may also, at any time, object to the processing of your data for commercial prospecting purposes and withdraw your consent to the processing of your data carried out by RIVIERA FLOW for the purposes of behavioural advertising, browsing analysis and audience measurement.
We also remind you that you have the right to lodge a complaint with the CNIL if you consider that your rights have not been respected.
How to exercise your rights?
To exercise the rights set out above, you may send an e-mail to contact@rivieraflow.com:
- specifying the subject of your request and the right(s) you wish to exercise;
- stating your surname and first name(s).
In case of doubt as to your identity, we may ask you to attach to your request a double-sided scan of your identity card or passport, in order to prevent any identity theft.
We will respond to you as soon as possible and at the latest within one month of receipt of your request.
You may also consult the CNIL website, available here: https://www.cnil.fr/.
Cookies & trackers on this site
On your first visit, no analytics or marketing cookie is set until you have given your consent through our consent banner (Google Consent Mode v2). You can change or withdraw your choice at any time: .
Strictly necessary
We only keep your consent preference (stored locally on your device). It does not require consent.
Analytics, subject to consent
Google Analytics 4 (via Google Tag Manager) and Microsoft Clarity, to understand traffic and usage of the site in aggregate. Retention: 13 months maximum.
Marketing, subject to consent
Meta Pixel and LinkedIn Insight Tag, to measure our advertising campaigns and retargeting. Retention: 13 months maximum.
Legal basis: your consent (Article 6.1.a of the GDPR), collected before any cookie is set. Your consent is kept for 6 months, then requested again.