Privacy Policy

Privacy Policy for Clients

This Privacy Policy aims to inform the Client about how their personal data is processed by GetMyOpinion (hereinafter referred to as "GetMyOpinion") as the data controller, in the context of subscribing to a Subscription in accordance with GetMyOpinion's General Terms and Conditions of Sale. The conclusion of the Contract and the use of the Solution require Clients to provide a certain amount of personal data (hereinafter referred to as "Personal Data") which are collected, processed, and protected in accordance with this privacy policy. Words used with a capital letter are defined in this privacy policy or, failing that, in the General Terms and Conditions of Sale.

Data provided by the Client when concluding the Contract and/or subscribing to a Subscription

To conclude the Contract and subscribe to a Subscription, as well as to create their account on the Solution, the Client must provide the following mandatory information about themselves:

• Last Name
• First Name
• Email Address
• Phone Number
• Address, company name, and manager's name

Purposes and legal bases

The collection of this data by GetMyOpinion is necessary to comply with its contractual and legal obligations, for the conclusion and execution of the General Terms and Conditions of Sale, the creation and management of the Client's account, the use of the Solution, billing and payment management of subscriptions, and monitoring the contractual relationship with the Client in accordance with the General Terms and Conditions of Sale. The provision of this data is contractual and regulatory. Failure to provide the data identified as mandatory will prevent the Client from subscribing to a Subscription and using the Solution. The collected data may also be used by GetMyOpinion to create a contact, prospect, and client file as part of its legitimate interests arising from the exercise of its commercial and prospecting activities.

Use of Personal Data by GetMyOpinion

Data Controller: The controller of this personal data is GetMyOpinion, whose contact details are listed in the GTC.

Recipients: Personal data may be processed by GetMyOpinion staff responsible for managing contracts and user accounts. It may be processed or accessed by service providers responsible for hosting and maintaining the Solution. If necessary or pursuant to a legal provision, GetMyOpinion may be required to communicate personal data to its advisors, banks, or administrations that process the data under their responsibility.

Retention and archiving: Personal Data concerning the Client is processed for the duration of the contract between the Client and GetMyOpinion and may be kept for 3 years after the end of the contract for re-contact purposes. Data related to the execution of the contract is archived for the duration of the statute of limitations, the period necessary for establishing, exercising, or defending a legal claim (in principle, 5 years). These durations apply from the date of termination of the contractual relationship between GetMyOpinion and the Client or from the last contact from the Client, if this date is later.

Client's Rights regarding Personal Data provided to GetMyOpinion

The Client has the following rights regarding the personal data provided to GetMyOpinion, subject to the conditions provided by current regulations:

• A right of access and rectification;
• A right to erasure of data ("right to be forgotten"), a right to restriction of processing;
• A right to object to processing (if processing is based on GetMyOpinion's legitimate interests);
• The right to define directives concerning the fate of their personal data after their death;
• A right to portability of the raw data provided to GetMyOpinion;
• The right to lodge a complaint with the competent authority (the CNIL in France).

These rights can be exercised by contacting GetMyOpinion at the following email address: cnil@getmyopinion.fr.

Privacy Policy for Consumers

This Privacy Policy aims to inform users who respond to questionnaires sent by GetMyOpinion and submit a review ("Consumers") about how their personal data is processed by GetMyOpinion as the data controller.

It is specified that:

• The contact details allowing the email to be sent to the Consumer of the consumed product or service were communicated by the provider from whom the Consumer purchased a product or service, which provider is responsible for the collection and use of this data;
• If the Consumer does not respond to the review request and does not enter into a relationship with GetMyOpinion, the provider remains responsible for processing this data, and GetMyOpinion acts as a subcontractor. In this case, the Consumer is invited to contact the provider for any questions related to the collection or use of their personal data.
• If the Consumer responds to the review request and enters into a relationship with GetMyOpinion, GetMyOpinion will process the Consumer's personal data as a data controller, according to the methods described below.

Data collected from the Provider and provided by the Consumer when responding to the Review request

Submitting a Review requires the mandatory communication of the following information by the Consumer:

• Last Name
• First Name
• Email Address
• Phone Number
• Consumed product or service, date and place of consumption
• Rating and comments you assign to your consumption experience
• The date and time the Review was submitted
• The IP address of the device used to submit the Review
• Company name if applicable

Purposes and legal bases

The collection of this data by GetMyOpinion is necessary for collecting responses and managing reviews, moderating and processing reviews, their publication, as well as contacting the Consumer to verify their identity, if their Review is flagged, or to communicate the Provider's possible response. This data is collected from the Provider. This processing is based on the contractual relationship between the Consumer and GetMyOpinion resulting from the General Terms of Use accepted by the Consumer and GetMyOpinion's legal obligations as an online review manager. The provision of data identified as mandatory is contractual and regulatory. Failure to provide the data identified as mandatory will prevent the Client from subscribing to a Subscription and using the Solution.

Use of Personal Data by GetMyOpinion

Data Controller: The controller of this personal data is GetMyOpinion, whose contact details are listed below and in the General Terms of Use.

Recipients: Personal data may be processed by GetMyOpinion staff responsible for managing and moderating reviews, persons authorized to compile statistics, and the IT department. It may be processed or accessed by GetMyOpinion's technical service providers (hosting provider and moderation provider). If necessary or pursuant to a legal provision, GetMyOpinion may be required to communicate your personal data to its advisors, banks, or administrations that process the data under their responsibility.

Furthermore, the Consumer acknowledges that the following data is intended to be published on the Internet and accessible to everyone:

• First Name
• First letter of the last name
• Date the review was submitted
• Date of the consumption experience
• Date the review was published
• Service purchased
• Locations where the service was provided
• Data related to the experience of the purchased service

Additionally, their name, first name, date of the consumption experience, and rating assigned will be accessible by the Providers.

With GMO Response:

As part of using the GMO Response service, reviews and comments left by consumers may be analyzed to improve our services and optimize the automatic generation of responses via our artificial intelligence. By submitting a review, the Consumer agrees that their verbatim text may be collected and processed by GetMyOpinion for analysis and machine learning purposes, in compliance with current regulations on personal data protection. The data thus processed is used exclusively to refine the relevance of the generated responses and is neither resold nor exploited for external commercial purposes. GetMyOpinion guarantees that this information remains anonymous and secure in accordance with its Privacy Policy.

Retention and archiving: data relating to Consumers is kept in the active database for the period planned for the publication of the Review, which depends on the Provider's activity, and archived for the duration of the statute of limitations, the period necessary for establishing, exercising, or defending a legal claim (5 years).

Consumer's Rights regarding Personal Data provided to GetMyOpinion

The Consumer has the following rights regarding the personal data provided to GetMyOpinion, subject to the conditions provided by current regulations:

• A right of access and rectification;
• A right to erasure of data ("right to be forgotten"), a right to restriction of processing;
• A right to object to processing (if processing is based on GetMyOpinion's legitimate interests);
• The right to define directives concerning the fate of their personal data after their death;
• A right to portability of the raw data provided to GetMyOpinion;
• The right to lodge a complaint with the competent authority (the CNIL in France).

These rights can be exercised by contacting GetMyOpinion at the following email address: cnil@getmyopinion.fr.