Twenty Two, a communication and production agency for institutional and advertising films, is a limited liability company, registered in the Paris Trade and Companies Register under number Paris B 452 275 845, whose head office is located at 12 boulevard de Magenta in Paris 10 (75010). We process your personal data in our capacity as data controller.
The personal data we collect from you is stored in the European Economic Area (“EEA”). Twenty Two has a secure platform to store the data collected.
At Twenty Two, the processing of your personal data is based on your consent or the legitimate interest of Twenty Two and allows us to inform you about the events we organize, the services we offer or to highlight our latest news or speeches.
Twenty Two takes all reasonable precautions to preserve the security and confidentiality of your personal data by implementing organisational, technical, software and physical measures. We require our partners to do the same. We also strive to keep the data we collect to a minimum and to keep it accurate and up to date by facilitating the rights of the individuals concerned.
Your personal data, collected within the framework of our activity, are exclusively processed by the Twenty Two agency. The latter is the sole user of your personal data. Twenty Two does not sell your data.
However, insofar as necessary, we may pass on your personal data to authorised and specified recipients, namely to :
We require these recipients to implement all necessary and appropriate technical and organisational measures to ensure the confidentiality and optimum security of your personal data against misuse and to use it only in accordance with our instructions and the applicable laws and regulations, in particular by signing a personal data protection agreement.
In accordance with the French Data Protection Act of 6 January 1978, as amended, and the General Data Protection Regulation (“RGPD”) n°2016/679 dated 27 April 2016, which came into force on 25 May 2018, you have the right to access, modify, rectify and delete any personal data :
Right of access to your personal data :
You have the right to request information about the personal data we hold about you. You can contact Twenty Two who will send you your personal data by e-mail.
Right to rectify your personal data :
You have the right to request rectification of your personal data if it is inaccurate.
Right to object to the processing of your personal data on legitimate grounds :
You have the right to object to the processing of your personal data on the basis of a legitimate interest of Twenty Two. Twenty Two will stop using your personal data unless we have a legitimate objection or unless we can prove that the use of your personal data overrides your interest and rights or for legal reasons.
Right to erasure of your personal data subject to legitimate grounds/right to deletion :
You have the right to delete any personal data processed by Twenty Two at any time.
Right to restrict :
You have the right to request that Twenty Two restrict the use of your personal data in the following circumstances :
Right to withdraw your consent :
You have the right to withdraw your consent to the processing of your personal data at any time.
Right to a digital will :
In accordance with the Law for a Digital Republic and the RGPD, you have the right to provide us with directives regarding the retention, deletion and communication of your personal data after your death. These directives can be registered with a “trusted digital third party” certified by the CNIL. In the absence of a person designated to ensure the execution of these directives, your heirs will be designated.
You can contact us at firstname.lastname@example.org
We have appointed a Data Protection Officer who will ensure that your personal data is consistently used in a transparent, accurate and lawful manner.
In accordance with the legislation and regulations in force, we do not keep your data beyond the period strictly necessary for the purposes set out below:
For prospect/customer data: three (3) years from the date of collection or last contact, or after the end of the commercial relationship.
However, in order to meet our administrative, legal, accounting and fiscal obligations, your personal data may be archived and kept beyond the above-mentioned periods, in accordance with the legislation in force.