The purpose of this Privacy Policy is to inform users of the YUZUCARD website, Subscribers, users of the YUZUCARD solution, and, more generally, individuals whose personal data is processed by NEWMIPS.
NEWMIPS places particular importance on the protection of personal data and is committed to processing such data in accordance with applicable regulations, in particular Regulation (EU) 2016/679 of April 27, 2016 (“GDPR”) and applicable French data protection law.
1. IDENTITY OF THE DATA CONTROLLER
The data controller for the processing of personal data covered by this Policy is:
NEWMIPS
SAS NEWMIPS with a capital of €60,000, hereinafter NEWMIPS
Registration No.: 804065753 00019 – Bordeaux Commercial Register
Address: 19, Avenue Charles et Emile Lestage – 33170 GRADIGNAN
Phone: 0983551105
Email: contact @ newmips.com
(hereinafter “NEWMIPS”).
If you have any questions regarding this Policy or the protection of personal data, you may contact NEWMIPS at the following address: contact @ newmips.com
2. SCOPE OF THIS POLICY
This Policy applies to the processing of personal data carried out by NEWMIPS when it acts as the data controller, in particular in connection with:
- browsing the YUZUCARD website;
- creating and managing a YUZUCARD account;
- subscribing to the Services;
- managing the contractual and commercial relationship;
- managing support and requests submitted to NEWMIPS;
- billing and payment;
- the security of the Services;
- communications regarding the Services;
- and, where applicable, marketing communications.
When the Subscriber uses YUZUCARD to collect, record, store, or process personal data concerning its own customers, employees, prospects, or other individuals, NEWMIPS may act as the Subscriber’s data processor.
In this case, the Subscriber remains responsible for the processing, and NEWMIPS processes the data in accordance with the Subscriber’s instructions.
Such processing is governed by the General Terms and Conditions of Sale and, where applicable, by the Data Processing Agreement (DPA) entered into between NEWMIPS and the Subscriber.
This Privacy Policy therefore does not constitute the information provided to data subjects regarding processing carried out on behalf of the Subscriber.
3. WHAT DATA MIGHT WE COLLECT?
Depending on the services used and interactions with NEWMIPS, various categories of data may be collected.
3.1 Identification and Contact Information
NEWMIPS may collect, among other things:
- last name;
- first name;
- email address;
- phone number;
- job title;
- company or organization;
- business address;
- any information voluntarily provided when contacting us.
3.2 Account Information
When a person creates or uses a YUZUCARD account, NEWMIPS may process:
- account credentials;
- email address;
- profile information;
- information regarding the subscribed Service;
- information regarding rights and access;
- transaction history for the account;
- data necessary for account security.
3.3 Data Related to the Contractual Relationship
In connection with the subscription to and provision of the Services, NEWMIPS may process, in particular:
- information regarding the Subscriber;
- subscribed plan;
- subscription date;
- contract term;
- payment frequency;
- information regarding renewal;
- history of communications with NEWMIPS;
- information regarding support requests.
The Terms and Conditions provide for three Plans in particular: Explorer, Advantage, and Premium.
The Explorer Plan is free, while the Advantage and Premium Plans are paid plans with a twelve-month commitment period.
3.4 Billing and Payment Data
When necessary for the management of billing and payments, NEWMIPS may process:
- billing information;
- invoice details;
- payment history;
- payment status;
- information necessary for handling unpaid invoices.
When payment is made online, payment data may be processed directly by the payment service provider used by NEWMIPS.
Payment service provider: ODOO – https://shop.yuzucard.com/
NEWMIPS does not retain complete credit card data when such data is processed directly by its payment service provider, except for the information necessary to track and verify payment.
3.5 Technical Data and Connection Data
When using the website or the SOFTWARE, certain technical data may be collected, including:
- IP address;
- date and time of connection;
- browser type;
- operating system;
- device used;
- connection-related data;
- technical logs;
- data related to security events;
- data related to the use of the Service.
This data may be used, in particular, to ensure security, detect abnormal behavior, and improve the operation of the Services.
3.6 Data Provided to Customer Support
When you contact NEWMIPS, particularly by email or through the available support channels, NEWMIPS may process:
- your contact information;
- the content of your request;
- any documents or information you submit;
- information related to the account or Service in question;
- the history of your communications.
We recommend that you do not provide support with any personal data that is not necessary for processing your request.
4. WHY DOES NEWMIPS USE YOUR DATA?
NEWMIPS uses personal data for the following purposes.
4.1 Provision and Management of Services
The data may be used to:
- create and administer accounts;
- enable access to the SOFTWARE;
- manage User rights;
- provide the subscribed features;
- ensure the Service operates properly;
- manage renewals and cancellations;
- monitor the contractual relationship.
4.2 Payment and Billing Management
Data may be used to:
- issue invoices;
- record payments;
- manage due dates;
- handle delinquent payments;
- maintain accounting records;
- comply with applicable legal obligations.
4.3 Support and Assistance
NEWMIPS may use the data to:
- respond to requests;
- identify the relevant account;
- diagnose technical issues;
- track incidents;
- improve the quality of support.
4.4 Security
NEWMIPS may process certain data in order to:
- secure accounts;
- detect unauthorized access;
- prevent fraud and abuse;
- detect behavior that could compromise security;
- ensure the security of the SOFTWARE and its infrastructure;
- investigate security incidents.
4.5 Service Improvement
Certain data may be used to analyze Service usage, detect malfunctions, and improve the features offered.
Whenever possible, NEWMIPS prioritizes the use of aggregated, statistical, or anonymized data.
4.6 Communications Regarding the Services
NEWMIPS may use the Subscriber’s or User’s contact information to send information that is necessary or useful for using the Services.
This may include, in particular:
- technical information;
- security-related information;
- updates;
- information regarding changes to the Service;
- usage recommendations;
- account-related information;
- billing-related information;
- maintenance-related information.
These communications are necessary for the proper management of the contractual relationship when they concern the operation or security of the Services.
The Terms of Service also provide that certain communications related to the monitoring and support of the customer relationship may be sent to the Subscriber.
4.7 Marketing Communications
When NEWMIPS wishes to send marketing or promotional communications, these are carried out in accordance with applicable marketing regulations.
When consent is required, NEWMIPS obtains such consent before sending the relevant communications.
Each marketing communication includes, where required, the option to unsubscribe or opt out of future communications.
5. WHAT ARE THE LEGAL BASES FOR DATA PROCESSING?
Depending on the purpose of the processing, NEWMIPS may process data on the following legal bases:
5.1 Performance of a Contract
When processing is necessary for the performance of a contract or for the implementation of pre-contractual measures.
This basis may specifically apply to:
- account creation;
- the provision of Services;
- subscription management;
- customer support;
- payment processing;
- management of the contractual relationship.
5.2 Compliance with a Legal Obligation
Certain data may be retained or processed to comply with legal and regulatory obligations applicable to NEWMIPS, particularly regarding accounting, tax, or document retention requirements.
5.3 Legitimate Interest
NEWMIPS may process certain data when necessary to pursue its legitimate interests, provided that such processing does not disproportionately infringe upon the rights and freedoms of the data subjects.
This may include, in particular:
- the security of the Services;
- the prevention of fraud and abuse;
- the improvement of the Services;
- customer relationship management;
- the protection of NEWMIPS’s rights.
5.4 Consent
When required by law, NEWMIPS obtains the data subject’s consent prior to processing the data.
Consent may be withdrawn at any time when processing is based on this ground.
Withdrawal of consent does not affect the lawfulness of processing carried out prior to such withdrawal.
6. WHO HAS ACCESS TO THE DATA?
Personal data is accessible only to individuals who need it to perform their job duties.
Depending on the specific purposes, recipients may include:
- authorized NEWMIPS employees: the technical, project/product, support, communications, and security teams;
- hosting service providers;
- payment service providers;
- security service providers;
- NEWMIPS’s professional advisors when their involvement is necessary;
- administrative or judicial authorities when disclosure is legally required.
NEWMIPS ensures that the service providers it engages offer appropriate safeguards regarding data protection and security.
7. HOSTING AND SUBCONTRACTORS
To provide YUZUCARD, NEWMIPS may use external service providers, particularly for hosting, technical infrastructure, maintenance, or security.
The Terms and Conditions specify that the hosting of the SOFTWARE and its applications may be provided by an external service provider.
The website is hosted by OVH.
SAS OVH with capital of €10,069,020
Registration: 424 761 419 00045 – RCS Lille Métropole
Website: www.ovh.fr
Headquarters: 2 rue Kellermann – 59100 Roubaix – France
When these service providers process personal data on behalf of NEWMIPS, NEWMIPS ensures that such processing is carried out in accordance with applicable regulations.
8. DATA TRANSFERS OUTSIDE THE EUROPEAN ECONOMIC AREA
NEWMIPS prioritizes, whenever possible, the processing and hosting of data within the European Economic Area.
When personal data is transferred to a country outside the European Economic Area, NEWMIPS ensures that such transfers are carried out in accordance with the GDPR.
9. HOW LONG DO WE RETAIN DATA?
NEWMIPS retains data only for as long as necessary for the purposes for which it is processed, subject to applicable legal retention obligations and statutes of limitations.
Depending on the form, different types of data may be collected for different purposes:
|
Service
|
URL
|
Profiles
|
Collected data
|
Purpose
|
Data Retention Period
|
|---|---|---|---|---|---|
|
Community Creation Form
|
Community / Subscriber
|
Community Name/Title, Description, Country, Address, Title, Last Name, First Name, Phone Number (optional), Email
|
Creating a community and its administrator account
|
2 years after the severing of relations
|
|
|
User Account Creation Form
|
User
|
Title, Last Name, First Name, Date of Birth, Phone Number (optional), Email
|
Creating a user within a community
|
2 years after the severing of relations
|
|
|
Login Page
|
User
|
Email address
|
User Login and Access to User Information
|
2 years after the severing of relations
|
|
|
Login Page
|
Community Manager
|
Email Address, Password
|
Community Manager Login
|
2 years after the severing of relations
|
At the end of the applicable retention period, the data is deleted, anonymized, or archived when retention is necessary to comply with a legal obligation or to enable NEWMIPS to defend its rights.
10. DATA SECURITY
NEWMIPS implements appropriate technical and organizational measures to protect personal data against, in particular:
- unauthorized access;
- loss;
- destruction;
- alteration;
- unauthorized disclosure;
- fraudulent use.
Security measures may include, among other things, measures relating to:
- access control;
- authentication;
- infrastructure security;
- backup;
- system monitoring;
- incident management;
- network and system protection.
NEWMIPS adapts these measures in light of evolving risks, available technologies, and the nature of the processing activities carried out.
The Subscriber and Users are also responsible for the security of their own access, particularly the confidentiality of their login credentials.
11. YOUR RIGHTS
In accordance with applicable regulations, you have the following rights, depending on the circumstances and subject to the conditions set forth in the regulations:
Right of Access
You may request confirmation as to whether data concerning you is being processed and, if so, obtain a copy of that data.
Right to Rectification
You may request the correction of inaccurate or incomplete data.
Right to Erasure
You may request the erasure of your data under the conditions set forth by the regulations.
This right is not absolute and may be limited, in particular, when NEWMIPS is legally required to retain certain data.
Right to Restriction of Processing
You may request the restriction of the processing of your data under the conditions set forth by the GDPR.
Right to Object
You may object to certain processing activities when the conditions set forth in the GDPR are met, particularly when the processing is based on NEWMIPS’s legitimate interest.
You may object at any time to the processing of your data for marketing purposes.
Right to Data Portability
When the conditions set forth in the regulations are met, you may request to receive the data you have provided to NEWMIPS in a structured, commonly used, and machine-readable format, or request that it be transmitted to another data controller.
Right to Withdraw Your Consent
When processing is based on your consent, you may withdraw it at any time.
Post-Mortem Instructions
You may set forth instructions regarding the handling of your personal data after your death, subject to the conditions set forth in applicable regulations.
12. HOW TO EXERCISE YOUR RIGHTS?
To exercise your rights, you may contact NEWMIPS: contact @ newmips.com
The request must enable NEWMIPS to reasonably identify the data subject and the nature of the request.
Where necessary and proportionate, NEWMIPS may request proof of identity to prevent unauthorized persons from accessing your data.
NEWMIPS responds to requests within the timeframes set forth in applicable regulations.
13. FILING A COMPLAINT WITH THE CNIL
If you believe that the processing of your personal data infringes upon your rights or that your request has not been handled satisfactorily, you may file a complaint with the competent supervisory authority.
In France, the competent authority is the: Commission Nationale de l’Informatique et des Libertés (CNIL)
However, you may first contact NEWMIPS to allow it to review your request.
14. COOKIES AND OTHER TRACKING TECHNOLOGIES
The YUZUCARD website may use cookies and other tracking technologies to ensure its proper functioning and, as applicable, to measure its audience, improve its usability, or offer certain features.
Cookies can be classified into the following categories:
- cookies strictly necessary for the website to function;
- audience measurement cookies;
- functionality cookies;
- personalization cookies;
- advertising or marketing cookies, if applicable.
When the user’s consent is required, the relevant cookies are placed or used only after such consent has been obtained.
The user may change their preferences at any time using the cookie management tool provided on the website.
15. THIRD-PARTY DATA PROVIDED BY THE SUBSCRIBER OR USERS
When the Subscriber or a User transmits data concerning another person to NEWMIPS, it is the Subscriber’s or User’s responsibility to ensure that they have the necessary legal basis for such transmission and, where required, that the data subjects have been properly informed.
When NEWMIPS acts as a data processor for the Subscriber, the respective obligations of the Parties are specified in the applicable DPA.
16. AMENDMENTS TO THIS POLICY
NEWMIPS may amend this Privacy Policy, in particular to take into account:
- changes in laws and regulations;
- recommendations from competent authorities;
- changes to the Services;
- changes in the technologies used;
- changes in the processing activities carried out by NEWMIPS.
The applicable version is the one published on the YUZUCARD website on the date of access.
In the event of a substantial amendment likely to significantly affect the rights of data subjects, NEWMIPS may notify the data subjects by any appropriate means.
17. CONTACT
If you have any questions regarding this Policy or the processing of your personal data, please contact NEWMIPS:
NEWMIPS
Email: contact @ newmips.com
Phone: 0983551105