Data protection policy 

Version updated on October 19, 2024 

RYZOM FILMS is committed to ensuring that the processing of personal data carried out as part of its business complies with the General Data Protection Regulation (“ GDPR ”) as well as the French Data Protection Act (“Loi Informatique et Libertés”). 

RYZOM FILMS processes your personal data in accordance with this data protection policy (" Policy ”) as well as any instructions given by third parties as part of its subcontracting activities.  

These third parties are: 

- Customers using the products and services of RYZOM FILMS as part of their film production and direction in the audiovisual field as well as in the realization and production of image and sound.  

In this Policy, we explain how and why we use your data, what your rights are and how to exercise them. 

By accepting the Policy, you agree to our processing of your data. 

What is personal data? 

Personal data (” Personal Data ‘ or ’ Data ”) refers to any information relating to an identified or identifiable natural person: 

- directly (surname, first name, e-mail address)  

- or indirectly (IP address, customer account number). 

To whom is this Data Protection Policy addressed? 

This Policy applies to all our products and services (the “ Services” ), i.e. our services for the production and direction of advertising, technical and corporate films, training and educational films, video clips, as well as our services for the rental, purchase and sale of audiovisual equipment, our training courses for professionals and individuals in the audiovisual field, our production, direction and editing of images and sound and our design of communication media, as presented via our website www.ryzomfilms.com ( the “ Site” ). 

Our Policy is intended to inform all persons who use our Services (the “ User ‘ or the ’ Customer” ). 

Who collects your Data? 

The Data Controller, within the meaning of the RGPD, is SAS RYZOM FILMS, represented by Antoine Szlafmyc as President. 

How do we collect your Data? 

RYZOM FILMS collects your Data online (including by e-mail), on paper or orally (during a physical appointment or by telephone) and this Policy applies regardless of the method of collection or processing. 

The Personal Data that the User agrees to communicate to us, regardless of the method of collection (online, on paper or orally), is subject to the provisions of this Policy. 

Why do we collect your Data? 

Some of your Data is necessary for the processing and provision of our Services. Failure to provide this information will prevent the proper functioning of our Services. 

For information purposes, you will find below a list of the categories of data collected corresponding to the purposes pursued by our collection as well as the legal basis for this collection. 

To respond to your contact request: 

Ø Categories of Data collected: identity data (surname, first name), contact data (e-mail address). 

Ø Legal basis: legitimate interest in offering you our Services. 

To respond to your request for a quote : 

Ø Categories of Data collected: identity data, contact data, quotation number, professional life, . 

Ø Legal basis: pre-contractual measures taken at your request. 

To enable you to benefit from our Services: 

Ø Categories of Data collected: identity data (surname, first name), contact data (email address, telephone number), customer data (order form, billing and delivery address), professional life. 

Ø Legal basis: contractual measures taken at your request. 

To manage customer invoicing: 

Ø Categories of Data collected: identity data (surname, first name), contact data (email address, telephone number), customer data (order form, billing and delivery address if applicable), professional life, economic and financial data. 

Ø Legal basis: contractual measures taken at your request. 

When creating a customer account to use our Services: 

Ø Categories of Data collected: identity data (surname, first name) and contact data (e-mail address), password. 

Ø Legal basis: contractual measures taken at your request.  

To process your response to a job offer: 

Ø Categories of Data collected: identity data (surname, first name), contact data (e-mail address, telephone number), information contained in the curriculum vitae and covering letter (photograph, professional background). 

Ø Legal basis: pre-contractual measures taken at your request. 

To carry out commercial prospecting operations: 

Ø Categories of Data collected: identity data (surname, first name) and contact data (e-mail address, telephone number), date of birth, professional life, an interaction profile based on previous interactions with RYZOM FILMS such as services previously performed or follow-up of our training courses. 

Ø Legal basis: your consent when you request commercial information. 

Are you required to provide your Personal Data? 

When you request a quotation, some of your personal and contact details must be processed. This is because we cannot prepare a quotation without processing this Data.  

Please note that once you have given your consent to the processing of your Personal Data, you may withdraw this consent at any time by sending an e-mail to contact(a)ryzomfilms.com. 

What are your rights?  

Subject to compliance with the legal obligations imposed on RYZOM FILMS in the course of its business, each individual may exercise the following rights:  

- Request a copy of the Data in your customer account - Right of access 

- Correct inaccurate Data concerning you - Right of rectification 

- Request the deletion of certain Data concerning you - Right of deletion 

- Oppose our processing of your Data; we draw your attention to the fact that this request is incompatible with the processing of your order for Services - Right of opposition 

- Decide at any time to withdraw your consent - Right of withdrawal 

- Request to limit the use of your Data - Right to limit processing 

- Oppose the profiling of your Data - Right to oppose profiling 

- Exercise your Right to portability 

In the event of a Data breach likely to pose a high risk to your rights and freedoms, you will be informed of the breach as soon as possible. 

You may formulate directives concerning the conservation, deletion and communication of your Data after your death, in accordance with article 40-1 of the French Data Protection Act.  

How can you exercise your rights? 

You can exercise these rights and instructions by writing to us by post or e-mail to the address given at the top of this document.  

To enable us to identify you quickly and respond to your request, please enclose all information required to establish your identity (in particular your invoice number). You will receive a reply within 1 month of receipt of your request. In certain cases, due to the complexity of the request or the number of requests, this deadline may be extended by 2 months. 

You can also contact the Commission Nationale de l'Informatique et des Libertés (CNIL), the regulatory authority responsible for ensuring compliance with regulations on the protection of personal data in France, by internet https://www.cnil.fr/fr/agir or by post at the following address: Commission Nationale de l'Informatique et des Libertés, 3 Place de Fontenoy - TSA 80715, 75334 PARIS CEDEX. 
How long do we keep your Data? 

We only keep your Data for as long as is necessary to carry out the operations for which it was collected, except where the law provides for a different retention period.  

You acknowledge that the Data you provide to us and which is stored in our information systems is accurate and constitutes proof of your identity.  

With whom do we share your Data? 

The Data collected is shared, according to their respective needs and in accordance with the purposes mentioned above, with : 

- RYZOM FILMS staff 

- external web hosting services  

- external accounting staff  

Is your Data sent outside the European Union? 

We may share some of your Data outside the European Union with service providers located outside the European Union. However, each transfer is governed by a mechanism ensuring protection equivalent to that guaranteed by European Union law. 

What security measures have we taken to protect you? 

We are committed to implementing all the technical and organizational measures necessary to protect your Personal Data.  

For example, we apply the principle of data minimization and have taken out cyber risk insurance.  

However, RYZOM FILMS cannot be held liable in the event of total or partial non-compliance with an obligation and/or failure of operators of transport networks to the Internet world, and in particular of its access provider(s) or its computer equipment. Compensation payable by RYZOM FILMS in the event of service failure resulting from a fault established against it shall correspond to the direct, personal and certain loss linked to the failure in question, to the express exclusion of any indirect loss. In the event of a personal data breach, RYZOM FILMS undertakes to notify the CNIL (French Data Protection Authority) in accordance with the applicable regulations. 

In the event that this breach presents a high risk to the rights and freedoms of natural persons, we will inform them as soon as possible and in accordance with the conditions set out in the RGPD.  

Modification of this Data Protection Policy 

We may update this Policy by publishing a new version on our Site. We undertake not to lower the level of confidentiality of your Data substantially without informing you and obtaining your consent where appropriate. 

Contact 

If you have any questions about our Data Protection Policy, please contact us by post or by e-mail at the address given at the top of this document - contact(@)ryzomfilms.com