1. Data Controller

The controller of personal data is the Publisher of the website www.capexperiences.com, as defined in the legal notices.

2. Data Collection

In the course of using the platform, the Publisher is required to collect the following data:

• Identification data (name, surname, company, position)
• contact details (email, phone)
• account data (username, hashed password)
• data relating to the establishment and published content (fact sheets, texts, visuals)
• data relating to exchanges and interactions carried out via the platform
• browsing data (connection logs, IP address, cookies)
• data related to commercial transactions (quotes, orders, invoicing)

Some information provided by Users in their profiles or content is intended to be disseminated publicly or to other Users of the platform as part of the normal services offered.

CAP EXPERIENCES may also obtain certain data relating to professionals from publicly accessible sources, such as the websites of establishments, organizations or associations, professional directories or other public professional sources. This data may include, in particular, professional identity, position, professional contact details, as well as information relating to the activity or structure concerned.

3. Purposes of the processing

The data is collected for the following purposes:

• Creation and management of user accounts
• access to and use of the platform
• creation and distribution of establishment profiles
• Sales management and customer relations
• Billing and service tracking
• sending communications necessary for the operation and use of the platform

• sending information, offers and opportunities related to the Users' activity or interests

• security and fraud prevention

Personal data is used to ensure the operation and improvement of the services offered by the platform, as well as to enrich its internal database.

The purpose of this enhancement is to enable and optimize the platform's functionalities, including connecting Users, increasing profile visibility, search and communication functionalities, and identifying and disseminating information, offers or opportunities that may correspond to their activity, interests or projects.

In this context, CAP EXPERIENCES may send communications, information, offers or opportunities to professionals, whether or not they are users of the platform, when these communications are related to their professional activity or to the information available to CAP EXPERIENCES.

The platform can also allow its professional Users to disseminate, via CAP EXPERIENCES, information, offers or proposals to other professionals who may be interested in relation to their activity.

CAP EXPERIENCES ensures the distribution of these communications to selected recipients. Their contact details remain confidential and are not shared with the Users or advertisers who initiated the communication.

Certain professional information provided by Users and intended for publication may be accessible to other Users through the platform's functionalities. Contact details used by CAP EXPERIENCES for its communication and networking activities are only shared with other Users when such transmission results from an action or an explicit request by the User in question.

4. Legal basis for processing

The treatments are based on:

• Contract execution:access to and use of the platform
• Compliance with legal obligations:invoicing, accounting
• The Publisher's legitimate interest:service, security, platform optimization
• User consent:when required (particularly for cookies or marketing)

5. Data Recipients

The data can be transmitted to:

• the publisher's internal teams
• technical service providers (hosting, maintenance, email marketing, SaaS tools, payment solutions)
• partners strictly necessary for the performance of services

Some data may be processed or hosted outside the European Union by the Publisher's technical service providers. In this case, the Publisher ensures that appropriate safeguards are implemented in accordance with applicable regulations.

No data is sold to third parties.

6. Data retention period

Personal data is kept for no longer than is necessary for the purposes for which it is processed, taking into account in particular the nature of the services offered, the relationship with the person concerned and the applicable legal obligations.

Data related to User accounts and platform usage is retained for the duration necessary to provide services and manage the relationship with the User. In the event of prolonged inactivity, CAP EXPERIENCES may take the necessary steps to verify the continued operation of the account and, if necessary, deactivate, archive, or delete it when its retention is no longer justified.

Customer data may be kept for the duration of the business relationship and then, when used for marketing purposes, for a period of three years from the end of that relationship.

Data relating to prospective clients used for marketing purposes may be kept for three years from the date of collection or the last contact initiated by the prospect. At the end of this period, CAP EXPERIENCES may contact the prospect again to offer to maintain the relationship. If there is no positive response, the data is no longer used for marketing purposes and is deleted or archived unless another purpose or legal obligation justifies its retention.

Data required to comply with legal obligations, including accounting, tax or contractual obligations, may be kept or archived for the periods stipulated by applicable regulations.

Navigation and technical data are kept for a limited period of time proportionate to their purpose, in accordance with applicable regulations.

When a person exercises their right to object to marketing, the information strictly necessary to take into account this objection may be kept in order to avoid any further solicitation.

At the end of the applicable periods, the data is deleted, anonymized or, where justified, placed in intermediate archiving for the period necessary to comply with a legal obligation or to establish, exercise or defend legal rights.

7. Cookies

The site uses cookies necessary for the operation of the platform as well as, where applicable, audience measurement and service improvement cookies.

The User can manage their cookie preferences via the consent management tool provided on the platform, when available.

8. User Rights

In accordance with applicable regulations, the User has the following rights:

• Right of access:to obtain confirmation as to whether or not one's data is being processed and where that is the case.
• Right of rectification:to request the updating or correction of inaccurate data.
• Right to erasure:to obtain the deletion of one's data under the conditions provided for by law.
• Right to object:to object at any time to processing based on legitimate interest or direct marketing.
• Right to restriction:to request the temporary suspension of the processing of one's data.
• Right to data portability:to retrieve one's data in a structured format to transmit it to a third party.

When marketing communications are sent on the basis of legitimate interest, the User may object to them at any time, simply and free of charge, in particular by using the unsubscribe link present in each relevant communication.

When processing is based on the User's consent, the User may withdraw their consent at any time, without this withdrawal calling into question the lawfulness of the processing carried out previously.

These rights can be exercised by contacting the Publisher at the address indicated in the legal notices.

The User also has the right to lodge a complaint with the National Commission for Information Technology and Freedoms (CNIL).

9. Security

The Publisher implements appropriate technical and organizational measures to ensure the security of personal data and to prevent its loss, alteration or unauthorized access.

10. Modification

This policy may be modified at any time to ensure its compliance with applicable regulations.