Personal data
Data controllers
The information requested when registering on the site is necessary and mandatory to create the user’s account. In particular, the email address may be used by the site for administration, management and communication relating to the service.
The site guarantees users that the collection and processing of personal information is carried out in compliance with privacy and in accordance with French law no. 78-17 of 6 January 1978 on information technology, files and civil liberties.
For personal data collected as part of product pricing or site browsing, the controller is NEUVILLE SAS, represented by Jean-Christophe PANDOLFI, (jc@carexpat.com) its legal representative. Under Articles 39 and 40 of the law dated 6 January 1978, users have the right to access, rectify, delete and object to the processing of their personal data. Users may exercise this right by post at: Service Technique - NEUVILLE SAS, 50 rue Saint-Sabin, 75011 PARIS - FRANCE
As the controller of the data it collects, careXpat undertakes to comply with the applicable legal framework. In particular, it is the responsibility of the client to define the purposes of its data processing, provide its prospects and customers with comprehensive information about the processing of their personal data when obtaining their consent, and maintain a processing register that accurately reflects reality. Each time careXpat processes personal data, the company takes all reasonable measures to ensure the accuracy and relevance of the personal data with regard to the purposes for which it is processed.
Purpose of data collected
- To allow browsing on the site and the management and traceability of services ordered by the user: connection and usage data, quote history, etc.
- To price insurance products: data relating to your expatriation.
- To prevent and combat computer fraud (spamming, hacking, etc.): computer equipment used for browsing, IP address, password (hashed).
- To improve browsing on the site: connection and usage data.
- To conduct optional satisfaction surveys on careXpat: email address.
- To run communication campaigns (SMS, email): phone number and email address.
careXpat does not sell your personal data. It is used only where necessary or for statistical and analytical purposes.
Rights of access, rectification and objection
- Right of access (Article 15 GDPR) and rectification (Article 16 GDPR), to update and complete user data, and to block or erase users' personal data (Article 17 GDPR), where it is inaccurate, incomplete, ambiguous, outdated, or where its collection, use, disclosure or storage is prohibited
- Right to withdraw consent at any time (Article 13-2c GDPR)
- Right to restrict the processing of user data (Article 18 GDPR)
- Right to object to the processing of user data (Article 21 GDPR)
- Right to portability of data provided by users, where that data is processed automatically based on their consent or a contract (Article 20 GDPR)
- Right to decide what happens to user data after their death and to choose who careXpat should disclose (or not disclose) their data to from among their designated third parties.
Once careXpat becomes aware of a user’s death, and in the absence of specific instructions from them, careXpat undertakes to destroy their data unless retention is required for evidentiary purposes or to comply with a legal obligation.
If the user wishes to know how careXpat uses their personal data, requests rectification or objects to its processing, they may contact careXpat in writing at the following address:
NEUVILLE SAS
DPO Jean-Christophe Pandolfi
50 rue Saint-Sabin
75011 PARIS - FRANCE
or submit a request by email to the following address: dpo@carexpat.com.
In this case, the user must specify which personal data they would like careXpat to correct, update or delete, identifying themselves precisely with a copy of an identity document (ID card or passport).
Requests for deletion of personal data are subject to the obligations imposed on careXpat by law, in particular with regard to the retention or archiving of documents. Finally, users of careXpat may lodge a complaint with the supervisory authorities, in particular the CNIL.
Non-disclosure of personal data
careXpat undertakes not to process, host or transfer customer information to any country outside the European Union or any country recognised as ‘non-adequate’ by the European Commission without first informing the customer. careXpat remains free to choose its technical and commercial subcontractors, provided that they offer sufficient guarantees with regard to the requirements of the General Data Protection Regulation (GDPR: no. 2016-679).
careXpat undertakes to take all necessary precautions to maintain the security of the information and to ensure that it is not disclosed to unauthorised persons. However, if an incident affecting the integrity or confidentiality of customer information comes to careXpat’s attention, the company shall promptly inform the customer and indicate what corrective measures have been taken. In addition, careXpat does not collect any so-called “sensitive data”.
User personal data may be processed by careXpat’s subsidiaries and subcontractors (service providers) solely for the purposes described in this policy.
Within the limits of their respective responsibilities and for the purposes described above, the main persons likely to have access to careXpat user data are primarily customer service agents. Participation in loyalty programmes, marketing or any other activity carried out on a third-party website or programme is subject to the contractual terms and conditions of that third party. In such cases, careXpat cannot be held responsible for activities carried out by these third parties and strongly encourages visitors to read the applicable terms and conditions. In particular, third-party websites visited by the user or advertisements displayed on the site may contain cookies (cookies are small text files sent by a website to your browser and stored on your computer). These cookies are managed by third parties that are independent from careXpat and under their sole responsibility. careXpat has no access to the data that may be collected by these cookies.
Cookies
A ‘cookie’ is a small information file sent to the user’s browser and stored on their device (e.g. computer, smartphone) (hereinafter ‘Cookies’). This file contains information such as the user’s domain name, Internet service provider, operating system, and date and time of access. Cookies do not represent any risk of damaging the user’s device.
careXpat may process user information concerning their visit to the site, such as pages viewed and searches performed. This information enables careXpat to improve the site’s content and user browsing experience.
Since cookies facilitate browsing and/or the provision of services offered by the site, users can configure their browser to decide whether to accept them, allowing cookies to be stored on their device or rejecting them, either systematically or according to their source. Users can also configure their browser to request acceptance or refusal each time a cookie may be stored on their device. careXpat informs users that, in this case, some browser functions may not be available.
If the user refuses to store cookies on their device or browser, or deletes cookies already stored, their browsing and experience on the site may be limited. This may also occur if careXpat or one of its service providers is unable to recognise, for technical compatibility purposes, the type of browser being used by the device, its language and display settings or the country from which the device appears to be connected to the internet.
Where applicable, careXpat declines all responsibility for any consequences related to degraded operation of the site and services potentially offered by careXpat resulting (i) from the user’s refusal of cookies and (ii) from careXpat’s inability to store or consult the cookies necessary for operation due to the user’s choices. For the management of cookies and user preferences, configuration for each browser is different. It is described in the browser’s help menu, which explains how the user can modify their cookie preferences.
Users may change their cookie preferences at any time. careXpat may also use external service providers to help collect and process the information described in this section.
These types of cookies will only be stored on your device if you consent to them by continuing to browse careXpat’s website or mobile app. You can withdraw your consent to careXpat storing these cookies at any time.