Privacy Policy

Effective as of 11/11/2024

This privacy policy aims to explain why we collect your data and how we are committed to protecting it.

ARCA II (GoldInBlock) is committed to protecting your personal data and privacy.

As such, and in application of the General Data Protection Regulation (hereinafter referred to as “GDPR”), we provide you with the conditions under which your personal data is processed.

 

 

 

What personal data do we process?

Purposes:
We may collect and store your personal data, including but not limited to:

  • To process and respond to your messages,
  • To create and manage access to your accounts,
  • To receive and process your order,
  • To handle your participation in a survey or competition,
  • To manage your newsletter subscriptions,
  • To establish and follow up on the commercial relationship that may result from your inquiries,
  • To post a review/comment on the site,
  • To process your job application,
  • To process your payment,
  • To ensure accounting and management,
  • To improve our follow-up and customer service,
  • To ensure the proper functioning and customization of services,
  • To send you commercial and advertising information based on your preferences,
  • To detect fraud and take legal action if necessary,
  • To remember your cookie preferences,
  • To handle and respond to your rights requests,
  • To comply with applicable regulations or those under adoption.

Categories of data:
We may process the following categories of personal data:

  • Contact details (e.g., name, first name, phone number, email),
  • Personal information (e.g., date of birth, nationality, marital status, occupation),
  • Your preferences,
  • Payment-related data,
  • Technical and location data generated through the use of our services.

 

 

Legal grounds for processing

The processing of personal data is based on:

  1. Consent (Article 6.1.a GDPR): For all processing requiring prior consent. In online forms, mandatory fields are marked with an asterisk. Failure to complete mandatory fields may prevent us from providing the requested services.
  2. Contract performance or pre-contractual measures: For processing necessary to execute or prepare a contract.
  3. Legitimate interest (Article 6.1.e GDPR): For processing based on our legitimate interest.
  4. Compliance with legal or regulatory obligations: For processing necessary to meet applicable legal requirements.

 

 

Data retention periods

The retention period for your personal data depends on the purpose for which it is processed. Personal data is retained only as long as necessary to fulfill the purposes mentioned above.

  • If no action is taken, personal data is deleted within the deadlines recommended by the French Data Protection Authority (CNIL), which is three years from the date of collection.
  • By exception, data required to establish proof of a right or contract is archived in accordance with legal provisions (5 or 10 years after the end of the commercial relationship).

 

 

Who are the recipients of your data?

Your personal data is intended for ARCA II.

Our internal services: Data is processed by staff from departments such as sales and IT security.

Trusted companies or individuals: Third parties who process your data on our behalf and for the purposes described above, in compliance with our privacy policy.

Technical subcontractors: Your data may be transferred to our technical subcontractors (as defined in Article 4.8 GDPR) under strict supervision. In case of transfer, we ensure that these subcontractors comply with GDPR and implement technical and organizational measures to guarantee data protection (Article 28 GDPR).

 

 

How does ARCA II ensure the security of your data?

We implement all necessary organizational and technical measures to ensure an appropriate level of security for your personal data, particularly to prevent loss of confidentiality, integrity, or accessibility.

This includes:

  • Regular data backups,
  • Data encryption during transfer,
  • Restricting access to personal data to authorized personnel only,
  • Ensuring that third parties guarantee the same level of data protection,
  • Implementing technical and organizational measures to secure data storage during the required retention period.

 

 

What are your rights regarding your personal data?

In accordance with the applicable regulations, you have the following rights:

  • Right to rectification: You may request the correction of inaccurate data and the completion of incomplete data.
  • Right to erasure: You may, in certain cases, request the deletion of your data.
  • Right to restriction: You may request limited processing of your data under certain circumstances.
  • Right to data portability: You may request your data in a structured, machine-readable format for personal use or transfer to a third party.
  • Right to object: You may object to data processing at any time, particularly for legitimate interest or direct marketing purposes.
  • Right to withdraw consent: If data processing is based on your consent, you may withdraw it at any time.
  • Right to file a complaint: You may contact the French Data Protection Authority (CNIL) regarding our data protection practices.

Requests will be addressed promptly and, in any case, within 30 days of receipt.

 

 

Who to contact for GDPR-related requests?

You may exercise your rights by contacting:

ARCA II
SAS with a share capital of €2,000
Registered with the Toulouse Trade and Companies Register under number SIRET 79522965700015
Address: 8 Place de la Paix, 31600 Muret, France
Phone: +33 561 410 502
Publishing Director: Edouard Dubrana

 

 

Privacy Policy Updates

This Privacy Policy may change. As we continually develop our services, we reserve the right to modify this policy. Changes will be published promptly, and we recommend you regularly review this page for updates.