Learn more about Crown’s privacy policy and how we protect your personal data. We are committed to transparent, compliant, and secure data usage.
Legal
Data protection and privacy
These are some of our most frequently asked questions.
Introduction
This Privacy Policy explains how CROWN PROCUREMENT SAS processes Personal Data in compliance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and other applicable European data protection laws. It complements the Terms of Use and applies to Users and other data subjects whose Personal Data is processed through the Platform. Capitalized terms not defined here have the meaning given in the Terms of Use.
Scope
In the course of providing access to the Platform, CROWN may process Personal Data relating to Users. The meaning of “Personal Data” is defined in Section 3 of the Terms of Use (Definitions).
Categories of data
The Personal Data processed may include, for example: ● identification data (name, surname, email, phone number, company); ● authentication and access data (login, password, logs); ● usage data (time of access, actions performed on the Platform).
Legal basis
The processing of Personal Data is based on: ● the necessity to perform a Commercial Contract with the Client; ● CROWN’s legitimate interest in ensuring the security and proper functioning of the Platform; ● compliance with legal obligations.
Data subject rights
In accordance with GDPR, Users have the right to: ● access their Personal Data; ● request rectification or erasure of their data; ● restrict or object to processing; ● request portability of their data.
Sharing of data
Personal Data is not shared with third parties except: ● where necessary to provide the Platform (for example, hosting providers, service providers bound by confidentiality and data protection obligations); ● where required by law or regulation; ● where explicitly authorized by the Client or the User.
Roles of parties
In most cases, CROWN acts as a Data Processor on behalf of its Clients, who act as Data Controllersand remain responsible for determining the purposes and means of processing.In certain circumstances, such as the management of User accounts, Platform security, orcompliance with legal obligations, CROWN may act as an independent Data Controller. Theallocation of responsibilities between CROWN and the Client is further specified in the applicableCommercial Contract.
Security and incidents
CROWN implements technical and organizational measures designed to ensure a level of security appropriate to the risks. In the event of a data breach or other security incident affecting Personal Data, CROWN will notify the relevant Client without undue delay, in accordance with applicable legal requirements.
Updates
This Privacy Policy may be amended from time to time. The most recent version is always available on the Platform or on CROWN’s website. Users are responsible for reviewing this Privacy Policy regularly to remain informed of any changes.
