LEGAL NOTICE

HOSTING

This site is hosted exclusively at data centres in Europe (Ireland and Germany) of the company Amazon Web Services (AWS):
Amazon Web Services Inc.
410 Terry Avenue North,
Seattle, WA 98109-5210, USA
http://aws.amazon.com

All personal information is treated as strictly confidential and has two levels of encryption.
The company, iRaiser, strives to ensure the highest level of security for all its solutions.


PRIVACY NOTICE

You are about to make a donation to support Publicis Groupe Ukraine employees and their families. This Privacy Notice sets out how we use and protect any information collected through the different steps of the “Helping Our Ukraine Team as One” Fundraising.

Introduction
 
Any data collected including Personal Data will only be used for the processing of your donation. Once collected, the Personal Data will not be used for a different incompatible purpose without your consent.
 
Publicis Groupe Holdings B.V. , Wilgenweg 12A 1031 HV  Amsterdam, The Netherlands, Registered no.: 34183694, is considered as the Controller of the Data.

1. Purpose of data collection

 
Your Personal Data will be collected to process your payment via an online platform and a secure payment infrastructure to deliver financial assistance to Publicis Groupe Ukraine employees and their families.
 

2. What Personal Data do we collect and process?

 
Personal Data means any information relating to an identified or identifiable natural person (i.e. living individual). 
 
We will collect, process and store the following Personal Data when you make a donation for the “Helping Our Ukraine Team as One” Fundraising:
 

• your first and last name,
• your personal or business email address,
• the IP address used for the transaction,
• your payment information and amount of donation.

 

3. What legal ground(s) do we rely on?

 
The collected Personal Data is required for the execution of your donation and we rely on the legal ground that processing is necessary for the performance of a contract pursuant to Art. 6(1)(b) GDPR. The IP address used for the transaction will be processed for authentication and fraud prevention purposes pursuant to Art. 6(1)(f) GDPR. Your Personal Data will not be used for further purposes.
 

4. With whom do we share Personal Data?

 
The company iRaiser is providing the platform to facilitate the fundraising. Your payment information will be managed by the payment processor Stripe. Administrators of Publicis Groupe will have access to the platform for technical reasons only in exceptional circumstances.
 

5. Your rights and choices regarding your Personal Data

Please use this link if you want to make use of any of your below mentioned legal rights.
 
The fields marked with an asterisk on the forms are required for us to process and respond to your request. If you do not provide this Personal Data, Publicis Groupe will not be able to process and respond to your request.
 

1. Where you are resident of the EU

If you are a resident of the EU, the GDPR provides you with specific rights regarding your Personal Data. This subsection describes your rights and explains how to exercise those rights regarding Personal Data that we hold about you. These rights include:

• The right of access:

You can access all Personal Data we hold about you, know the origin of this Personal Data and obtain a copy in an understandable format. You may also use your right to access your Personal Data to control the exactness of the data and have them rectified or deleted. You have no justification to provide to exercise your right to access;

• The right to rectification:

In order to avoid that inaccurate or incomplete Personal Data relating to you is process or shared, you can ask us to rectify them;
 

• The right to erasure:

You may request the erasure or deletion of the Personal Data we hold on you. This is not an absolute right since we may have to keep your Personal Data for legal or legitimate reasons. You may, for example, exercise your right to deletion in the following cases:

• if you have withdrawn your consent to the processing (see below);
• if you legitimately objected to the processing of your data (see below);
• when data is not or is no longer necessary for the purposes for which it was initially collected or processed;
• the data is processed unlawfully (e.g., publishing hacked data);

 

• The right to object to the processing of your Personal Data:

When we process your Personal Data based on our legitimate interest (to determine to which processing this applies, please refer to Section III of this Privacy Notice), you may at any time object to the processing of your Personal Data for reasons relating to your personal situation. We may nevertheless, on a case-by-case basis, reject such a request by pointing out the legitimate and imperious reasons justifying the processing of this data which prevail on your interests, rights and freedoms, or when this data is necessary to establish, exercise or defend a right before a Court.
 

• The right to restrict processing:

The right to limit the processing completes your other rights. This right means that the data processing relating to you and that we are performing is limited, so that we may keep this data, but we cannot use it or process it in any other manner. This right applies in specific circumstances, i.e.:

• if you challenge the exactness of your Personal Data. The processing is then limited for a period of time so that the agency may verify the exactness of the Personal Data;
• if the processing is unlawful and you object to the erasure of your Personal Data and request instead that its use be limited;
• if we do not need the Personal Data for the purposes mentioned above in Section I anymore, but you still need it to establish, exercise or defend rights before a Court; and
• in the cases where you objected to the processing which is based on the legitimate interests of the agency, you may ask to limit the processing for the time necessary for us to verify if we can accept your objection request (i.e., the time necessary to verify whether the legitimate reasons of the agency prevail over yours).

 

• The right to data portability:

You may request to retrieve the Personal Data you provided us with, in a structured, commonly used, and machine-readable format, for personal use or to share them with a third party of your choice.
 
This right only applies to Personal Data you provided us with, directly or indirectly, and which was processed through automated means, if this processing is based on your consent or the performance of a contract. Please check the list of our Personal Data processing activities’ legal grounds (in Section III of this Privacy Notice) to know whether our processing is based on the performance of a contract or on consent.
If you are unsatisfied with the way we process your Personal Data or if your request has been rejected, you may also lodge a formal complaint with your local competent data protection authority.
Personal Data will be stored in accordance with our applicable data retention requirements and corporate policies. The retention period for Personal Data varies depending on the type of Personal Data and the purposes of processing it.
 
We will respond without undue delay and in any event within one month from the data we receive your request. This timeframe can be extended by two months to take the complexity of the request, or the number of requests received into account. In this case, we will inform you within one month from receiving your request, specifying the reasons for extending the response timeframe.
 

2. Where you are a California resident: Your California Rights and Choices

California residents, under the California Consumer Privacy Act of 2018 (“CCPA”), have specific rights with regards to their Personal Data. This section describes how to exercise those rights and our process for handling those requests.
 

1. Right to request access to your Personal Data

California residents have the right to request that we disclose what categories of Personal Data that we collect, use, disclose, or sell about them. In particular, California residents may request:

• the specific pieces of Personal Data that we have collected about you;
• the categories of Personal Data we have collected about you;
• the categories of sources from which the Personal Data was collected;
• the categories of Personal Data about you we disclosed for a business purpose or sold;
• the categories of third parties to whom the Personal Data was disclosed for a business purpose or sold; and
• the business or commercial purpose for collecting or selling the Personal Data.

2. Right to request deletion of your Personal Data

You may also request that we delete any Personal Data that we collect from you. However, we may retain Personal Data for certain important purposes, as set out by law. When we receive and verify your request to delete your Personal Data, we will proceed to delete the data unless an exception applies.
 

3. How to exercise your CCPA privacy rights

California residents may exercise their CCPA privacy rights by sending an email to privacyofficer@publicisgroupe.com, or by contacting us at 1-833-983-0087.
For security purposes (and as required under California law), we will verify your identity – in part by requesting certain information from you – when you request to exercise your California privacy rights.  For instance, if you request categories or specific pieces of Personal Data we have collected about you, you may need to confirm your possession of an identifier (such as an email address) or to provide a piece of identification that confirms you are the person you claim to be. 
If we are unable to complete your request fully for any reason, we will provide you additional information about the reasons why we could not comply with your request.
 
You may also designate an agent to make requests to exercise your rights under CCPA as described above. We will take steps both to verify the identity of the person seeking to exercise their rights as listed above, and to verify that your agent has been authorized to make a request on your behalf through providing us with a signed written authorization or a copy of a power of attorney.
 

6. Data Security

 
Your Personal Data will be collected through an online Fundraising Form provided by the Platform iRaiser and stored on a secure third-party Hosting Platform. Your payment will be securely processed by an external payment infrastructure. We rely on the Platform´s security controls to secure your data against loss or damage, to help protect the accuracy and security of your Personal Data and to prevent unauthorized access or improper use. If you think your Personal Data is not secure or that there has been unauthorized access to your Personal Data, please contact privacyofficer@publicisgroupe.com immediately.
 

7. Confidentiality

 
Please note that we treat Personal Data as strictly confidential. 
 

8.  Data Transfers

 
Your Personal Data might be transferred and accessible from countries which are not considered to have the same level of data protection as in the EU. However, we ensure all data transfers comply with applicable legal requirements.
 

9. Use of Cookies

 
Information on the Personal Data Protection and Cookie Policy of iRaiser can be found under the following link: https://www.iraiser.com/wp-content/uploads/2021/06/PERSONAL-DATA-PROTECTION-POLICY.pdf.
 

10. Further Information

 
If you consider that we are not complying with this Privacy Notice or if you have any questions in relation to this Privacy Notice, please contact privacyofficer@publicisgroupe.com. You may also lodge a formal complaint with your competent data protection authority.
 
Updated: 07.03.2022


CREDITS:

Logo: Ewelina Chrobot
Background image: gettyimages.com; Image no.: 1317078518