Politique de confidentialité de VitaKey

Further information for Users in the United States

This part of the document integrates with and supplements the information contained in the rest of the privacy policy and is provided by the business running @{replacement missing: fr.privacy_policy_page.interpolation.replacement missing: en.mobile} and, if the case may be, its parent, subsidiaries and affiliates (for the purposes of this section referred to collectively as “we”, “us”, “our”).
The information contained in this section applies to all Users (Users are referred to below, simply as “you”, “your”, “yours”), who are residents in the following states: California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Nevada, Delaware, Iowa, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island and Montana.
For such Users, this information supersedes any other possibly divergent or conflicting provisions contained in the privacy policy.
This part of the document uses the term Personal Information (and Sensitive Personal Information).

Notice at collection

The following Notice at collection provides you with timely notice about the categories of Personal Information collected or disclosed in the past 12 months so that you can exercise meaningful control over our use of that Information.
While such categorization of Personal Information is mainly based on California privacy laws, it can also be helpful for anyone who is not a California resident to get a general idea of what types of Personal Information are collected.

Identifiers

Personal Data processed: Données d'utilisation; Traqueurs; Différents types de données indiquées dans la politique de confidentialité du service; Adresse électronique + 4

Personal Information collected or disclosed:

• Données d'utilisation
• Traqueurs
• différents types de Données indiquées dans la politique de confidentialité du service
• adresse électronique
• informations sur l'appareil
• réponses aux questions
• coordonnées
• divers types de Données

Sensitive Personal Information collected or disclosed

identifiants du compte, mot de passe, informations de paiement

Purposes:

• Hébergement web et infrastructure de backend
• Inscription et authentification
• Gestion des paiements
• Autres informations sur les Données Personnelles
• Gestion de la collecte de données et des sondages en ligne
• Enregistrement et authentification fournis directement par @{replacement missing: fr.privacy_policy_page.interpolation.replacement missing: en.mobile}
• Transfert de Données hors de l’UE
• Surveillance de l’infrastructure

Retention period:

for the time necessary to fulfill the purpose

Sold or Shared:

No

Targeted Advertising:

No

Third-parties:

Supabase, Inc., Apple Inc., Vercel Inc., Functional Software, Inc. , Google Ireland Limited

Service providers or contractors:

@{replacement missing: fr.privacy_policy_page.interpolation.replacement missing: en.mobile}

Internet or other electronic network activity information

Personal Data processed: Données d'utilisation; Traqueurs; Différents types de données indiquées dans la politique de confidentialité du service; Autorisation des contacts + 13

Personal Information collected or disclosed:

• Données d'utilisation
• Traqueurs
• différents types de Données indiquées dans la politique de confidentialité du service
• Autorisation des contacts
• Autorisation du téléphone
• Autorisation d’accès aux appels
• adresse électronique
• informations sur l'appareil
• réponses aux questions
• coordonnées
• nombre d'Utilisateurs
• statistiques de la session
• adresse IP
• informations sur le navigateur
• pages vues
• clics
• historique de navigation

Sensitive Personal Information collected or disclosed

identifiants du compte, informations de paiement, mot de passe

Purposes:

• Hébergement web et infrastructure de backend
• Inscription et authentification
• Autorisations du dispositif pour accéder aux Données personnelles
• Gestion des paiements
• Gestion de la collecte de données et des sondages en ligne
• Enregistrement et authentification fournis directement par @{replacement missing: fr.privacy_policy_page.interpolation.replacement missing: en.mobile}
• Analyses

Retention period:

for the time necessary to fulfill the purpose

Sold or Shared:

No

Targeted Advertising:

No

Third-parties:

Supabase, Inc., Apple Inc., Vercel Inc., Google Ireland Limited, PostHog, Inc.

Service providers or contractors:

@{replacement missing: fr.privacy_policy_page.interpolation.replacement missing: en.mobile}

Geolocation data

Personal Data processed: Données d’activités générales

Personal Information collected or disclosed:

• données d’activités générales

Purposes:

• Traitement de données d’activités

Retention period:

for the time necessary to fulfill the purpose

Sold or Shared:

No

Targeted Advertising:

No

Third-parties:

Apple Inc.

Commercial information

Personal Data processed: Traqueurs; Données d'utilisation; Adresse électronique; Informations sur l'appareil

Personal Information collected or disclosed:

• Traqueurs
• Données d'utilisation
• adresse électronique
• informations sur l'appareil

Sensitive Personal Information collected or disclosed

informations de paiement

Purposes:

• Gestion des paiements

Retention period:

for the time necessary to fulfill the purpose

Sold or Shared:

No

Targeted Advertising:

No

Third-parties:

Apple Inc.

Inferences drawn from other personal information

Personal Data processed: Traqueurs; Réponses aux questions; Données d'utilisation; Adresse électronique + 1

Personal Information collected or disclosed:

• Traqueurs
• réponses aux questions
• Données d'utilisation
• adresse électronique
• coordonnées

Purposes:

• Gestion de la collecte de données et des sondages en ligne

Retention period:

for the time necessary to fulfill the purpose

Sold or Shared:

No

Targeted Advertising:

No

Service providers or contractors:

@{replacement missing: fr.privacy_policy_page.interpolation.replacement missing: en.mobile}

ℹ️ You can read the definitions of these concepts inside the “Definitions and legal references section” of the privacy policy.

To know more about your rights to limit the use of your sensitive personal information (“Limit the Use of My Sensitive Personal Information”) you can refer to the “Your privacy rights under US state laws” section of our privacy policy.

For more details on the collection of Personal Information, please read the section “Detailed information on the processing of Personal Data” of our privacy policy.

We won’t process your Information for unexpected purposes, or for purposes that are not reasonably necessary to and compatible with the purposes originally disclosed, without your consent.

What are the sources of the Personal Information we collect?

We collect the above-mentioned categories of Personal Information, either directly or indirectly, from you when you use @{replacement missing: fr.privacy_policy_page.interpolation.replacement missing: en.mobile}.

For example, you directly provide your Personal Information when you submit requests via any forms on @{replacement missing: fr.privacy_policy_page.interpolation.replacement missing: en.mobile}. You also provide Personal Information indirectly when you navigate @{replacement missing: fr.privacy_policy_page.interpolation.replacement missing: en.mobile}, as Personal Information about you is automatically observed and collected.

Finally, we may collect your Personal Information from third parties that work with us in connection with the Service or with the functioning of @{replacement missing: fr.privacy_policy_page.interpolation.replacement missing: en.mobile} and features thereof.

Your privacy rights under US state laws

You may exercise certain rights regarding your Personal Information. In particular, to the extent permitted by applicable law, you have:

• the right to access Personal Information: the right to know. You have the right to request that we confirm whether or not we are processing your Personal Information. You also have the right to access such Personal Information;
• the right to correct inaccurate Personal Information. You have the right to request that we correct any inaccurate Personal Information we maintain about you;
• the right to request the deletion of your Personal Information. You have the right to request that we delete any of your Personal Information;
• the right to obtain a copy of your Personal Information. We will provide your Personal Information in a portable and usable format that allows you to transfer data easily to another entity – provided that this is technically feasible;
• the right to opt out from the Sale of your Personal Information; We will not discriminate against you for exercising your privacy rights.
• the right to non-discrimination.

Additional rights for Users residing in California

In addition to the rights listed above common to all Users in the United States, as a User residing in California, you have:

• The right to opt out of the Sharing of your Personal Information for cross-context behavioral advertising;
• The right to request to limit our use or disclosure of your Sensitive Personal Information to only that which is necessary to perform the services or provide the goods, as is reasonably expected by an average consumer. Please note that certain exceptions outlined in the law may apply, such as, when the collection and processing of Sensitive Personal Information is necessary to verify or maintain the quality or safety of our service.

Additional rights for Users residing in Virginia, Colorado, Connecticut, Texas, Oregon, Nevada, Delaware, Iowa, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island and Montana

In addition to the rights listed above common to all Users in the United States, as a User residing in Virginia, Colorado, Connecticut, Texas, Oregon, Nevada, Delaware, Iowa, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island and Montana you have

• The right to opt out of the processing of your personal information for Targeted Advertising or profiling in furtherance of decisions that produce legal or similarly significant effects concerning you;
• The right to freely give, deny or withdraw your consent for the processing of your Sensitive Personal Information. Please note that certain exceptions outlined in the law may apply, such as, but not limited to, when the collection and processing of Sensitive Personal Information is necessary for the provision of a product or service specifically requested by the consumer. In Maryland, your Sensitive Personal Information will be collected or processed only if strictly necessary to provide or maintain a specific product or service requested by you.

In Minnesota and Maryland Users also have the right to obtain a list of the specific third parties to which the controller has disclosed the consumer's personal data

* Note that in some states like Minnesota you have the following specific rights connected to profiling:

• The right to question the results of the profiling;
  
• The right to be informed of the reason that the profiling resulted in the decision; if feasible
  
• The right to be informed of what actions the consumer might have taken to secure a different decision and the actions that the consumer might take to secure a different decision in the future;
  
• The right to review personal data used in the profiling;
  
• If inaccurate, the right to have the data corrected and the profiling decision reevaluated based on the corrected data;
  

Additional rights for users residing in Utah and Iowa

In addition to the rights listed above common to all Users in the United States, as a User residing in Utah and Iowa, you have:

• The right to opt out of the processing of your Personal Information for Targeted Advertising;
• The right to opt out of the processing of your Sensitive Personal Information. Please note that certain exceptions outlined in the law may apply, such as, but not limited to, when the collection and processing of Sensitive Personal Information is necessary for the provision of a product or service specifically requested by the consumer.

How to exercise your privacy rights under US state laws

To exercise the rights described above, you need to submit your request to us by contacting us via the contact details provided in this document.

For us to respond to your request, we must know who you are. We will not respond to any request if we are unable to verify your identity and therefore confirm the Personal Information in our possession relates to you. You are not required to create an account with us to submit your request. We will use any Personal Information collected from you in connection with the verification of your request solely for verification and shall not further disclose the Personal Information, retain it longer than necessary for purposes of verification, or use it for unrelated purposes.

If you are an adult, you can make a request on behalf of a child under your parental authority.

How to exercise your rights to opt out

In addition to what is stated above, to exercise your right to opt-out of Sale or Sharing and Targeted Advertising you can also use the privacy choices link provided on @{replacement missing: fr.privacy_policy_page.interpolation.replacement missing: en.mobile}.

If you want to submit requests to opt out of Sale or Sharing and Targeted Advertising activities via a user-enabled global privacy control, such as for example the Global Privacy Control (“GPC”), you are free to do so and we will abide by such request in a frictionless manner.

How and when we are expected to handle your request

We will respond to your request without undue delay, but in all cases within the timeframe required by applicable law. Should we need more time, we will explain to you the reasons why, and how much more time we need.

Should we deny your request, we will explain to you the reasons behind our denial (where envisaged by applicable law you may then contact the relevant authority to submit a complaint).

We do not charge a fee to process or respond to your request unless such request is manifestly unfounded or excessive and in all other cases where it is permitted by the applicable law. In such cases, we may charge a reasonable fee or refuse to act on the request. In either case, we will communicate our choices and explain the reasons behind them.