Legal notice

Contacts:

Contact : contact@ecotropy.fr
Publication manager: Alexandre Nassiopoulos
Webmaster : Jordan Brouns

Company:

Registered office: 34 rue du Corps de Garde 44100 Nantes
Share capital: €64,454
Registration number: 818 082 398 RCS Nantes

Disclaimer:

The trademarks of SA Ecotropy and its partners, as well as the logos appearing on this site, are registered trademarks. The structure of the site as well as all the data included (texts, photographs, illustrations, icons, animations, databases, etc.) are the exclusive property of SA Ecotropy or are the subject of a specific authorisation of use for SA Ecotropy. Any total or partial representation of this site by any person whatsoever without the express permission of SA Ecotropy is prohibited and would constitute an infringement punishable by articles L. 335-2 et seq. of the Intellectual Property Code.

Site internet :

Site hosted by OVH
SAS with capital of €10,069,020
RCS Lille Métropole 424 761 419 00045
Code APE 2620Z
VAT NUMBER: FR 22 424 761 419
Head office: 2 rue Kellermann - 59100 Roubaix - France
Tel: 1007

Privacy policy for the use of our services


Thank you for using Ecotropy's services!

This Privacy Policy describes how we collect, use, process and disclose information about you, including personal information, in connection with your access to and use of the Portals.

If you encounter an undefined term in this Privacy Policy, that term will have the same definition as in our Terms of Use.

Wherever the terms ‘Ecotropy’, ‘we’, ‘us’ or ‘our’ appear in this Privacy Policy, they refer to Ecotropy, which is responsible for your data in accordance with this Privacy Policy.

If you have any questions or complaints about this Privacy Policy or Ecotropy's data processing practices, you can send an email to contact@ecotropy.fr or contact us by post.

1. Information collected

We request and collect the following personal data about you when you use the Portals. This data is necessary for the proper performance of the agreement between the Customer and us and to enable us to comply with our legal obligations. Without it, we may not be able to provide you with all the services requested.

Account data. When you create your Account, we ask you to provide us with certain data such as your first name, surname and e-mail address.

Profile data. In order to use certain features of the Portals (such as access to health logs or technical maintenance logs), we may ask you to provide additional data which may include your telephone number and a profile photo. Telephone numbers are optional and are requested if you wish to set up SMS alerts from the ecotropy.fr service. The profile photo is optional. It is requested in order to facilitate the identification of the different users of the service within your organisation.

When you use the portals, we automatically collect information, including personal data, about the services you use and how you use them. This data is necessary for the proper performance of the agreement between you and us, for us to comply with legal obligations and in view of our legitimate interest in being able to provide and improve the functionality of the portals.

Usage data. We collect data about your interactions with the Portals, such as your visits to pages or content.

Connection and device data. Nous collectons We automatically collect login and device data when you access and use the Portals, even if you have not created an Ecotropy Account or are not logged in. This data includes, but is not limited to: data about how you have used the Portals (including whether you have clicked on links to third party applications), IP address, access dates and times, computer hardware and software data, device data, data associated with device usage, unique identifiers, crash data, cookies, and pages you have viewed or displayed before or after using our Portals.

Cookies and similar technologies. We use cookies or other similar technologies, such as web beacons, pixels and mobile device identifiers. We may also authorise our commercial partners to use these tracking technologies on the Portals. You may deactivate the use of cookies by selecting the appropriate settings on your browser. However, such deactivation may prevent you from using certain functionalities of this site.

2. Use of the information collected

2.0 Newsletter subscription and contact request

Newsletter registration and contact requests are made voluntarily by the user on the ecotropy.fr portal. The double opt-in procedure guarantees the identity of the person registered and attests to their consent. The data provided in these cases is stored for the sole purpose of establishing a commercial relationship.

2.1 Providing a customer service for ongoing diagnostics of building operation

When using our services, we aggregate the data collected in the buildings in order to provide our Customers with a high-quality continuous energy diagnostics service enabling them to improve the operation of the buildings concerned.

Consumption, comfort, weather, occupancy, usage and operating data, as well as data entered manually by users, such as actual occupancy figures, are stored, automatically processed and compared in order to provide analyses of how the building is operating.

These analyses are used to automatically provide information, advice and alerts on the operation of the building, any malfunctions in the building, part of the building or one or more of its components, and any abnormal drift in any of the measured variables.

2.2 Certifying the author of certain information

In some services, such as the water quality logbook, the attendance logbook or the maintenance operations logbooks, personal data (surname, first name, numerical identifier) is used to identify the person who entered the data. In the context of these services, it is understood that the user who enters the data accepts responsibility for the accuracy and relevance of the data entered. As stipulated in the terms of use, Ecotropy cannot be held responsible for the content of this information.

2.3 Provision, improvement and development of the Portals

  • Allow you to access and use the Portals
  • Manage, protect, improve and optimise services and user experience, for example by carrying out analyses and studies
  • To provide customer service
  • To send you support or service-related messages, updates, security alerts and Account notifications
  • To manage, protect, improve and optimise services and user experience, and to personalise and tailor your experience.

We process this data given our legitimate interest in improving the Portals and user experience, and where such data is necessary for the proper performance of the agreement with you.

2.4 Creating and maintaining a more secure and trusted environment

  • To detect and prevent fraud, spam, abuse, security incidents and other harmful activities
  • Conduct security investigations and risk assessments
  • Verify or authenticate data or identifiers submitted by you (for example, verifying the address of your Hosting or comparing the photo identification with another photo submitted by you)
  • Comply with our legal obligations
  • To enforce our terms of use and other policies.

We process this data given our legitimate interest in protecting the Portals, to measure the proper performance of our agreement with you and to comply with applicable laws.

2.5 Aggregate data

We may also share aggregated data (data about our users that we combine in such a way that it can no longer identify or reference an individual user) and other anonymised data for regulatory compliance, industry and market analysis, demographic profiling, marketing, advertising and other business purposes.

3. Your rights

3.1 Management of your data

You can update your personal data in your Account settings. You are responsible for keeping your data up to date.

3.2 Rectification of inaccurate or incomplete data

You have the right to ask us to correct inaccurate or incomplete personal data about you (which you cannot update yourself in your Account).

3.3 Data access and portability

You are entitled to request copies of the personal data you have provided to us in a structured, commonly used and machine-readable format and/or ask us to transfer that data to another service provider (where technically possible).

3.4 Data retention and deletion

In general, we will retain your personal data for as long as is necessary for the performance of the agreement between you and the Customer and to comply with our legal obligations. If you no longer wish us to use your data to provide you with the services of the Portals, you may ask us to delete your personal data and close your Account. Please note that if you request the deletion of your personal data, because we maintain the Portals to protect them from accidental or malicious loss or destruction, residual copies of your personal data may not be deleted from our backup systems for a period of time limited to one (1) month, which period corresponds to the maximum time between two software version upgrades.

3.5 Withdrawal of consent and restriction of processing

If you have given your consent to the processing of your personal data by Ecotropy, you may withdraw your consent at any time by modifying your Account settings or by sending a communication to Ecotropy specifying the consent you are withdrawing. Please note that the withdrawal of your consent does not affect the lawfulness of any processing activity based on such consent prior to its withdrawal. In addition, in some jurisdictions, applicable law may give you the right to restrict how we use your personal data, in particular in cases where (i) you challenge the accuracy of your personal data; (ii) the processing is unlawful and you object to the deletion of your personal data; (iii) we no longer need your personal data for the purposes of the processing, but you require the data for the establishment, exercise or defence of legal claims; or (iv) you have objected to the processing of your data as described in section 2 and an analysis of whether Ecotropy's legitimate interests override yours is pending.

3.6 Complaints

You have the right to lodge complaints about Ecotropy's data processing activities with the competent data protection authorities.

4. Security

We implement and continuously update administrative, technical and physical security measures to protect your data against unauthorised access, loss, destruction or alteration. Some of the safeguards we use to protect your information are firewalls, encryption of authentication data (passwords), information access controls, secure servers using SSH protocol, and secure domains using SSL protocol.

The data host guarantees the security of its infrastructures: OVH is committed to optimum security of its infrastructures, in particular by having implemented an information systems security policy and by meeting the requirements of several standards and certifications (PCI-DSS certification, ISO/IEC 27001 certification, SOC 1 TYPE II and SOC 2 TYPE II attestations, etc.).

If you know or have reason to believe that your Account identification data has been lost, stolen, misappropriated or otherwise compromised, or in the event of actual or suspected unauthorised use of your Account, please email us at contact@ecotropy.fr or contact us at 34 rue du Corps de Garde, 44 100 Nantes (France).

5. Modification of this Privacy Policy

Ecotropy reserves the right to amend this Privacy Policy at any time in accordance with this clause. If we make a change to this Privacy Policy, we will post the new version and update the ‘Last Updated’ date at the top of this Privacy Policy. We will also inform you of the modification by e-mail at least thirty (30) days before the date on which it takes effect. If you do not agree with the terms of the new Personal Data Protection Charter, you may delete your Account. If you do not delete your Account before the effective date of the new Privacy Policy, your continued access and use of the portals will be subject to the new Privacy Policy.

6. Notification in the event of a personal data breach

Ecotropy undertakes to notify all persons concerned of any breach of their personal data that may have occurred as a result of a failure in the security systems of the company or one of its subcontractors. The breach will be reported within 72 hours of becoming aware of it. The CNIL (French institute for data policy compliance) will also be informed in accordance with the RGPD.